Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
File:                     g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft (raw, json)
Hash identifier:          UN5Rlww85bHVOf6mvwGRiH/FNSfuVMZtkN1S9FLQPpo=
Subject key identifier:   6B:4D:DD:7B:25:D7:CF:8F:C7:39:99:C9:3A:D1:32:4E:9B:89:0F:4C
Authority key identifier: 83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
Certificate issuer:       /CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Certificate serial:       01993236627033A6C026D4F7FACE6261EE18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
Manifest number:          0714
Signing time:             Wed 10 Sep 2025 06:00:48 +0000
Manifest this update:     Wed 10 Sep 2025 06:00:48 +0000
Manifest next update:     Thu 11 Sep 2025 06:00:48 +0000
Files and hashes:         1: g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl (hash: V+1HN6rxFF7vzvXVPqhbu8usFSAjy6Zsf7O23pnd11M=)
                          2: r0PvjEpnlWFsFe9mhlu-x7uuqW4.roa (hash: v9Sjd6VL0RkK073Ql08i5EoR8baGeigT54elfTpIto4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 06:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:32:36:62:70:33:a6:c0:26:d4:f7:fa:ce:62:61:ee:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
        Validity
            Not Before: Sep 10 06:00:48 2025 GMT
            Not After : Sep 11 06:00:48 2025 GMT
        Subject: CN=6b4ddd7b25d7cf8fc73999c93ad1324e9b890f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d4:1a:ab:0d:0b:aa:e2:c8:30:f1:85:d9:17:
                    11:8f:dd:2f:ea:d4:87:fa:75:a7:41:51:92:83:cc:
                    ce:39:d1:01:21:f6:d2:3d:1f:dd:bf:e0:29:aa:9f:
                    5b:ad:71:c7:99:7c:1e:29:55:60:ab:f5:23:4a:e2:
                    9f:82:c0:ae:13:0a:ff:db:cd:a1:f3:5c:06:43:7b:
                    4a:34:fa:90:d2:65:87:34:38:41:98:e5:51:47:67:
                    ea:30:18:50:00:67:6c:19:65:18:3d:a8:86:08:03:
                    80:4f:97:fa:41:ad:58:aa:ca:ea:ed:bd:cd:3a:d1:
                    fa:ff:e0:e9:c2:72:17:50:3b:21:b1:e1:12:b6:fc:
                    fe:68:da:5a:eb:53:8c:d5:84:a5:bd:a3:82:69:d1:
                    1a:a3:73:52:58:60:df:5d:c3:74:ef:af:81:49:b0:
                    f7:cc:49:0e:cb:b8:24:42:b3:48:a6:95:2a:9f:ed:
                    c3:7f:20:a8:93:ad:d3:32:90:8d:1f:07:cf:35:5e:
                    8b:24:ed:42:bf:0b:fc:bd:60:e9:2e:8f:4d:65:5a:
                    bd:23:53:35:41:f3:82:d1:c6:a4:2a:fb:20:f3:cc:
                    9b:54:11:55:59:3b:d5:8c:4c:f3:ef:26:27:01:b0:
                    82:f7:16:31:b5:3c:74:a1:f0:70:86:e2:cc:3f:f5:
                    9a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4D:DD:7B:25:D7:CF:8F:C7:39:99:C9:3A:D1:32:4E:9B:89:0F:4C
            X509v3 Authority Key Identifier:
                keyid:83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:c4:11:54:be:78:f6:08:aa:bf:7c:fc:2c:74:87:8e:9d:cb:
         a4:b5:91:22:a2:fc:44:ec:5d:c3:1c:69:4c:9e:85:54:04:1b:
         0b:ef:c9:cb:29:db:04:be:1a:9d:a9:89:b2:29:52:2d:72:f3:
         4f:cf:9b:c0:06:8d:2b:e9:f6:e5:48:59:da:bd:fa:37:ba:f5:
         cb:be:3a:29:7d:de:14:4f:75:82:25:22:a7:d8:b7:83:99:50:
         f5:a2:a6:4c:c2:d5:ba:e4:3d:74:f7:03:25:dc:02:3b:18:cd:
         39:73:c9:b8:48:a9:22:15:88:dc:71:2a:70:45:3b:71:8a:2e:
         1e:ea:0e:14:a4:3f:5e:2f:03:96:67:06:35:66:25:b3:7b:11:
         4d:8f:1a:d7:34:5c:e5:2e:7f:57:4d:bc:e4:cf:14:c9:89:98:
         83:a9:3c:72:74:ad:e6:cd:e2:31:82:f4:83:00:78:10:2c:70:
         e4:c0:ea:d8:53:e0:cf:01:11:55:ea:c4:52:bc:64:f4:2f:85:
         96:1f:5a:cf:90:c8:fd:69:24:1f:04:5e:8b:0c:21:e5:b9:3b:
         d3:a2:3d:c1:7e:af:91:ec:fc:5f:3d:9f:9a:85:37:ce:89:7b:
         78:06:71:88:78:1d:1d:f6:0c:34:e5:61:95:68:05:7e:e4:5d:
         51:9e:ab:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:31:59 2025 by rpki-client