Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
File:                     GYNgTwg-WMPNGdOUgLqq3zihm2M.mft (raw, json)
Hash identifier:          qi1aCo4ZgnakoKMzFUyEBBSUv2Wq/1+3o2UYTJgEO4s=
Subject key identifier:   7E:68:BA:BB:1C:58:40:BA:4A:1B:D6:B7:98:73:36:C9:41:52:20:E7
Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
Certificate issuer:       /CN=1983604f083e58c3cd19d39480baaadf38a19b63
Certificate serial:       01992330F08065F239BADBF5C7E58391BD3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
Manifest number:          08FC
Signing time:             Sun 07 Sep 2025 08:00:33 +0000
Manifest this update:     Sun 07 Sep 2025 08:00:33 +0000
Manifest next update:     Mon 08 Sep 2025 08:00:33 +0000
Files and hashes:         1: 7NcD3v3bTwDr9ocN3-x63vupO1g.roa (hash: HvV0nfI75827YQCzKbYVEWTCzA0c8O1WIDzuDKlaH5w=)
                          2: GYNgTwg-WMPNGdOUgLqq3zihm2M.crl (hash: /bkIYgv5hQ4N9cK3R60PQcoIpzovMldzaiS64148uDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:30:f0:80:65:f2:39:ba:db:f5:c7:e5:83:91:bd:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63
        Validity
            Not Before: Sep  7 08:00:33 2025 GMT
            Not After : Sep  8 08:00:33 2025 GMT
        Subject: CN=7e68babb1c5840ba4a1bd6b7987336c9415220e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6c:9e:c8:09:3b:dd:14:f8:20:54:08:9b:3e:
                    16:13:71:12:02:4f:6c:87:75:01:25:ee:21:fc:22:
                    17:16:2f:e1:45:e8:6d:4a:fc:2d:b2:45:b9:23:d2:
                    d7:16:36:ca:aa:ef:09:48:a5:1e:69:d0:38:b7:61:
                    42:bc:d4:fd:a4:14:fa:c5:fa:00:d7:43:9e:92:fc:
                    ab:21:6e:32:d9:63:f3:44:17:cc:c9:04:16:ac:f5:
                    22:27:cf:02:32:61:95:a6:38:88:e6:ac:a3:e6:a0:
                    21:a5:eb:8e:1a:f4:a5:b0:60:b9:6a:9a:25:f9:ce:
                    f6:12:ec:8f:28:40:c8:be:88:77:3a:3a:5d:ca:29:
                    41:db:46:f2:82:ed:00:3c:5b:8c:52:f4:86:a3:dd:
                    a7:9f:da:3f:96:53:7d:0c:5b:7e:2f:4c:bf:90:f0:
                    a6:c7:30:a8:9e:ce:95:df:32:44:a2:dd:25:4b:92:
                    a7:5b:11:1b:94:14:bd:89:95:8a:e9:84:ab:c7:12:
                    c4:33:28:c2:2b:3e:5c:8b:ff:20:57:b1:0d:9f:c8:
                    9c:6d:4a:5a:af:d1:d4:a8:7b:d8:a0:a3:db:51:3d:
                    8c:6a:a5:b3:91:b4:44:96:3c:82:8b:88:36:a3:74:
                    aa:4d:b5:44:c6:6c:fd:02:fa:6e:bd:f8:68:51:95:
                    12:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:68:BA:BB:1C:58:40:BA:4A:1B:D6:B7:98:73:36:C9:41:52:20:E7
            X509v3 Authority Key Identifier:
                keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d0:6c:c4:84:09:0d:87:41:e8:61:9d:b0:de:3c:2e:c2:b9:
         e4:8f:4f:ed:38:ea:67:37:da:e4:77:47:06:ac:1b:b6:08:ac:
         d4:a6:2b:a1:38:64:1a:90:fc:4b:83:fc:e3:83:76:e2:cc:75:
         fd:df:15:43:07:f9:f3:49:57:20:51:54:ca:45:27:1a:d4:74:
         a2:4c:03:58:57:59:c7:eb:be:e8:cf:85:0e:64:46:aa:a5:2b:
         e7:b4:3c:95:46:99:5f:ce:75:d5:a3:6d:ec:30:10:48:1e:a4:
         22:c3:b8:f9:15:cd:ea:d9:55:4b:da:f9:37:69:76:2a:0c:c0:
         a3:23:8b:cf:59:7a:1c:11:4c:84:e8:39:96:29:36:9d:51:e5:
         3e:bd:63:5d:14:0f:66:28:77:00:73:0d:3b:e2:95:45:d0:04:
         f6:6c:15:7c:c9:df:9d:5c:d5:99:11:4f:fd:b5:f8:0d:0d:7f:
         a8:52:22:39:b2:59:1f:41:d7:06:41:fc:91:13:a0:99:5a:63:
         bc:68:f7:c1:22:bc:5e:86:34:43:81:c0:49:7c:c0:fa:c7:4c:
         88:7a:9e:52:d5:4d:51:87:6f:4a:2a:4b:84:4b:0b:66:10:cf:
         1b:be:ae:9a:d9:41:24:b3:42:04:71:01:30:44:8f:bc:08:7a:
         dd:a3:d5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:11 2025 by rpki-client