Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/gm6310-hBxWX-jM5-_iDHC6Vssc.mft
File:                     gm6310-hBxWX-jM5-_iDHC6Vssc.mft (raw, json)
Hash identifier:          3YiR+fgaaIk8Z6NKZZxdVslk0V6f0dbufvYw3NlGd6o=
Subject key identifier:   D4:D2:FC:1D:EC:57:AB:C7:04:76:91:57:81:69:9E:37:EA:2B:8B:AF
Authority key identifier: 82:6E:B7:D7:4F:A1:07:15:97:FA:33:39:FB:F8:83:1C:2E:95:B2:C7
Certificate issuer:       /CN=826eb7d74fa1071597fa3339fbf8831c2e95b2c7
Certificate serial:       019A73017C9B52C6204132C75EFEFA05E1FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gm6310-hBxWX-jM5-_iDHC6Vssc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/gm6310-hBxWX-jM5-_iDHC6Vssc.mft
Manifest number:          171D
Signing time:             Tue 11 Nov 2025 13:01:08 +0000
Manifest this update:     Tue 11 Nov 2025 13:01:08 +0000
Manifest next update:     Wed 12 Nov 2025 13:01:08 +0000
Files and hashes:         1: 92eglBFm4UMAVtPH9IkG9URQIWk.roa (hash: bpICQo3Md95UoWjh41NuV2joPCJhpEI/T4pNh3i8ITQ=)
                          2: gm6310-hBxWX-jM5-_iDHC6Vssc.crl (hash: wED8+E6tLJRdgAjIn0+KS6aeb/ilGh/OU2b3+CmilVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/gm6310-hBxWX-jM5-_iDHC6Vssc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/gm6310-hBxWX-jM5-_iDHC6Vssc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gm6310-hBxWX-jM5-_iDHC6Vssc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:73:01:7c:9b:52:c6:20:41:32:c7:5e:fe:fa:05:e1:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826eb7d74fa1071597fa3339fbf8831c2e95b2c7
        Validity
            Not Before: Nov 11 13:01:08 2025 GMT
            Not After : Nov 12 13:01:08 2025 GMT
        Subject: CN=d4d2fc1dec57abc70476915781699e37ea2b8baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:82:51:56:c3:d8:d1:33:ad:fb:52:89:a7:1c:
                    4d:ee:a9:b2:3a:fc:43:1f:64:4f:d6:76:db:d4:0e:
                    23:ad:3f:c6:7b:34:68:8e:bc:e1:a8:25:8a:59:8d:
                    2a:79:69:7b:a7:7f:1c:78:d0:84:15:df:42:ce:79:
                    27:94:0a:1a:c4:92:69:14:a0:9f:52:1e:61:dc:5a:
                    1e:0d:62:4c:10:29:20:82:97:be:87:5e:d1:d0:59:
                    2a:92:93:ea:57:9b:8a:17:f6:07:53:db:b5:7c:bd:
                    af:a2:cb:d8:78:e3:ca:a0:0b:83:09:a8:aa:2e:38:
                    8d:15:16:b9:17:45:a0:02:ba:25:e1:bb:72:28:23:
                    11:47:5e:b9:57:ba:3a:17:e3:f1:af:ae:e3:ee:97:
                    f6:d8:8f:6d:53:f3:53:c1:6d:18:e1:53:bc:3b:c3:
                    7b:f9:83:1b:fd:5b:03:ce:cc:d0:7a:4e:16:83:cd:
                    8b:11:79:f7:ab:5e:66:9f:3c:6a:10:3a:00:b2:ad:
                    fb:1a:8a:03:2f:5d:9d:45:1f:d2:4c:15:4a:f1:c5:
                    35:cf:e9:33:db:2d:07:7d:20:a3:e7:a8:aa:d5:17:
                    01:d3:1f:56:06:32:73:c2:ef:31:cc:b0:43:ed:71:
                    c3:38:a4:5d:ab:57:0a:60:7b:4d:88:93:ca:c3:78:
                    8d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D2:FC:1D:EC:57:AB:C7:04:76:91:57:81:69:9E:37:EA:2B:8B:AF
            X509v3 Authority Key Identifier:
                keyid:82:6E:B7:D7:4F:A1:07:15:97:FA:33:39:FB:F8:83:1C:2E:95:B2:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gm6310-hBxWX-jM5-_iDHC6Vssc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/gm6310-hBxWX-jM5-_iDHC6Vssc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/gm6310-hBxWX-jM5-_iDHC6Vssc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ae:e7:e1:3c:0d:6b:ed:7a:5b:7d:3d:21:26:db:22:5b:17:
         0e:60:c4:94:ca:c7:cb:3d:e3:93:e9:92:70:c3:61:9a:63:8e:
         98:b9:b3:dd:7c:11:90:ff:4c:c3:7d:93:67:5f:23:21:b4:4a:
         e4:d2:bf:a1:d1:a4:33:9c:83:00:3a:df:ba:be:15:ae:56:16:
         cf:1b:ad:68:44:02:6e:9d:a3:e2:c4:6c:74:9c:bf:a1:85:6f:
         c1:21:3b:03:a7:72:01:1f:61:64:b2:14:e2:94:80:c0:b7:02:
         a8:92:cc:9c:01:de:a7:08:4f:75:ff:c3:f2:71:4e:76:96:a3:
         72:06:6f:6f:75:5c:d6:58:92:d1:6b:b7:86:e7:b0:9f:c8:1a:
         a2:50:be:53:a1:f7:bd:cc:ab:f6:d3:94:1a:7d:c9:74:24:9d:
         96:b1:78:63:f7:f6:85:12:a2:9a:56:f7:58:f6:d3:d4:07:bd:
         37:10:05:36:df:d7:80:c9:54:39:2c:22:a9:ce:7b:14:33:80:
         d5:6c:02:53:f9:57:5a:23:63:e2:3b:2b:c5:ae:52:ea:5b:57:
         f9:ac:b6:45:d7:43:89:3e:ea:06:75:ba:be:f1:65:1f:b6:04:
         68:a9:b4:4b:9c:d8:83:96:88:8d:8a:f7:31:a1:cb:a8:36:c0:
         82:73:9f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:19 2025 by rpki-client