Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
File:                     V3GDYWiNFi_4AjwSJ81kTa45ocA.mft (raw, json)
Hash identifier:          JZAH0Z98sl6DlySAzdq2+pycIe+IvyXoksNJO9VIVys=
Subject key identifier:   94:7D:C1:41:F9:DB:41:03:18:CA:16:5D:53:ED:88:B8:7C:40:89:80
Authority key identifier: 57:71:83:61:68:8D:16:2F:F8:02:3C:12:27:CD:64:4D:AE:39:A1:C0
Certificate issuer:       /CN=57718361688d162ff8023c1227cd644dae39a1c0
Certificate serial:       019A19BD13E5FE76FBCD38CA1B6EED79F3A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
Manifest number:          1680
Signing time:             Sat 25 Oct 2025 05:00:13 +0000
Manifest this update:     Sat 25 Oct 2025 05:00:13 +0000
Manifest next update:     Sun 26 Oct 2025 05:00:13 +0000
Files and hashes:         1: V3GDYWiNFi_4AjwSJ81kTa45ocA.crl (hash: VeuCGm43Xl/2UGQ7nYwVBFYySiNe8jZkNWXkyb7PhSk=)
                          2: lgeLoySacO5n6-jqTWkewt--0AI.roa (hash: cHeeK4JCsJJNj8Pz7DQjcNm/axVPSQ0h4TJyF4NqSFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 05:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:19:bd:13:e5:fe:76:fb:cd:38:ca:1b:6e:ed:79:f3:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57718361688d162ff8023c1227cd644dae39a1c0
        Validity
            Not Before: Oct 25 05:00:13 2025 GMT
            Not After : Oct 26 05:00:13 2025 GMT
        Subject: CN=947dc141f9db410318ca165d53ed88b87c408980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:1b:bb:e7:bf:fd:9d:6b:ff:ca:3f:73:f5:1c:
                    f4:bf:cf:04:40:eb:73:91:fe:97:8c:dd:b7:1f:f9:
                    06:81:c6:ca:d6:bd:3f:eb:0c:99:85:c4:46:10:4d:
                    e7:33:0b:d9:24:0d:3c:e2:a9:44:41:87:87:98:44:
                    67:34:15:7b:fa:d8:0d:96:ac:d6:6e:af:32:e6:94:
                    08:ba:2e:ea:05:79:84:91:8b:ed:1b:98:cb:74:1b:
                    de:10:d2:43:ee:75:9e:6d:68:d1:42:12:75:76:fc:
                    8b:cb:2b:db:ee:28:27:74:aa:7a:04:70:f7:cf:ea:
                    ff:73:31:ae:67:fb:86:a4:60:a4:88:7a:60:78:5f:
                    b7:22:2d:89:77:f2:da:eb:70:f2:83:41:e0:d3:6b:
                    05:23:7e:16:c1:4e:42:f6:68:ac:67:00:84:f2:06:
                    cb:b7:4d:67:b5:92:1c:6b:8c:2d:b9:27:08:b1:00:
                    ee:1d:04:41:f7:2e:b7:db:7f:af:44:2e:d7:ac:a3:
                    af:fe:7c:3a:0f:c2:f6:54:75:14:22:94:24:5e:15:
                    67:f9:c7:d3:77:56:5e:23:87:e8:50:73:c0:70:0b:
                    e6:42:f9:c9:79:ba:f2:5d:bf:3d:b3:6a:52:42:7c:
                    5a:18:bd:56:8e:76:cc:b8:1f:6e:56:a6:2f:01:c1:
                    ff:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7D:C1:41:F9:DB:41:03:18:CA:16:5D:53:ED:88:B8:7C:40:89:80
            X509v3 Authority Key Identifier:
                keyid:57:71:83:61:68:8D:16:2F:F8:02:3C:12:27:CD:64:4D:AE:39:A1:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f3:1f:b9:95:b9:60:52:8f:c5:85:2c:95:8e:af:92:fc:b6:
         93:3a:17:48:50:38:2f:05:0b:c6:8d:3a:cd:1b:44:f7:4b:b5:
         fb:98:8b:4f:c1:82:12:22:9f:1e:e5:47:b2:f3:97:b0:b3:27:
         f7:98:09:43:ee:28:c0:69:88:b3:5d:ba:f7:1a:f6:e5:d5:38:
         7e:5c:61:c5:8a:b4:9a:56:1a:ca:23:69:98:47:8f:ae:9e:6a:
         fd:71:b5:39:10:37:cf:89:55:bc:b3:ce:8a:9a:30:b0:7c:88:
         11:35:90:96:6a:03:bd:1c:40:5f:06:01:56:d7:d5:0f:b3:65:
         bb:70:bb:8f:c6:30:81:f2:a2:36:d8:34:50:7e:83:25:54:b0:
         0b:ae:5f:71:7f:80:c7:1c:6a:46:de:ac:43:87:03:64:72:81:
         ce:75:b8:85:33:e3:5a:23:b8:75:33:30:9f:94:07:25:4a:d0:
         aa:ca:46:b9:52:19:a9:73:07:ea:59:0a:9f:2c:c7:20:47:70:
         8a:5d:5e:a2:99:2b:ff:fc:ea:e7:39:ba:ba:aa:3d:91:0d:ef:
         e2:8f:82:4c:93:d9:a1:20:32:1e:fb:43:3d:be:71:96:ba:95:
         9a:50:e2:01:57:c7:b8:b7:81:43:8d:83:e9:43:dc:f8:06:d4:
         0f:16:b4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:35:33 2025 by rpki-client