Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft
File:                     gynJE4dY3-i6EjXuDsfZtlifSyc.mft (raw, json)
Hash identifier:          kSIokve/GHyISj9Fq7hrn4nuLrjEz4N5ymtDeVoyIr4=
Subject key identifier:   99:1A:B8:A3:18:E7:50:53:E5:24:D9:BF:62:24:CF:F2:23:4F:71:65
Authority key identifier: 83:29:C9:13:87:58:DF:E8:BA:12:35:EE:0E:C7:D9:B6:58:9F:4B:27
Certificate issuer:       /CN=8329c9138758dfe8ba1235ee0ec7d9b6589f4b27
Certificate serial:       0199233148EC1F31A5F7C9B454C9871D7A72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft
Manifest number:          065C
Signing time:             Sun 07 Sep 2025 08:00:56 +0000
Manifest this update:     Sun 07 Sep 2025 08:00:56 +0000
Manifest next update:     Mon 08 Sep 2025 08:00:56 +0000
Files and hashes:         1: NEtfj8eymwkFpDG7BP2gOv3cbAs.roa (hash: J8/tby/ZFT8OsdOz/hNiW3bEdXZu2ngXmdS3bjVWlAA=)
                          2: gynJE4dY3-i6EjXuDsfZtlifSyc.crl (hash: Q8oN8nCk3kv4XA/oWOLonnKDLJCuCwWOfu1mKjKG62w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:31:48:ec:1f:31:a5:f7:c9:b4:54:c9:87:1d:7a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8329c9138758dfe8ba1235ee0ec7d9b6589f4b27
        Validity
            Not Before: Sep  7 08:00:56 2025 GMT
            Not After : Sep  8 08:00:56 2025 GMT
        Subject: CN=991ab8a318e75053e524d9bf6224cff2234f7165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9b:97:16:58:8e:cd:f2:e1:36:53:3a:98:4e:
                    30:84:36:6e:0b:4a:b8:af:d3:a0:28:55:01:02:23:
                    7e:0b:d6:62:99:7b:5d:32:76:70:9c:da:6d:3a:54:
                    93:f3:1d:42:cb:bd:b5:fb:7f:51:4e:a6:bf:a8:20:
                    fd:22:27:73:08:c8:06:8e:07:6f:b7:6a:aa:f5:b0:
                    a2:15:5c:de:d7:6f:1d:02:07:a4:8e:a5:d7:1b:ee:
                    f4:19:93:6d:d9:f0:3f:47:24:41:2e:0a:7e:84:c3:
                    65:38:3a:dc:a2:93:62:ec:0d:32:4c:b1:81:7a:ae:
                    5c:85:93:5f:b1:da:35:df:99:be:09:de:b1:66:19:
                    da:12:dd:99:b3:51:4c:1e:80:42:e7:55:6f:f3:ef:
                    90:07:d2:e3:e2:e0:cb:d3:0d:2a:ea:a7:e1:dd:47:
                    5e:e7:d4:54:b7:65:04:f9:bf:d7:c4:b5:69:69:f6:
                    a1:d8:d7:4e:01:56:ae:9d:72:9e:bc:e2:51:de:cd:
                    28:43:53:b8:c1:09:7d:78:89:96:1a:8d:77:17:e5:
                    a2:a5:5f:9b:ba:25:f1:04:af:ee:b8:f4:46:04:40:
                    12:1f:c9:e4:d8:00:f9:a1:fd:0e:42:75:44:54:b1:
                    79:d3:f9:55:7e:4a:5c:2f:39:89:66:52:de:97:2c:
                    58:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1A:B8:A3:18:E7:50:53:E5:24:D9:BF:62:24:CF:F2:23:4F:71:65
            X509v3 Authority Key Identifier:
                keyid:83:29:C9:13:87:58:DF:E8:BA:12:35:EE:0E:C7:D9:B6:58:9F:4B:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:3f:98:7c:27:e3:94:05:7f:39:e7:26:4d:ae:2c:c7:2e:a3:
         5b:4b:6a:6f:e3:0f:34:18:09:e4:60:6a:50:7b:8b:c6:6c:18:
         ef:b1:49:b9:a3:93:88:2d:e6:ff:c0:bc:0a:f6:cd:e9:27:c0:
         e6:48:1d:43:cb:ab:19:da:70:d2:c3:4d:42:77:36:6d:3b:ef:
         56:d7:cd:5b:3c:20:9b:8c:e7:94:cf:88:49:13:0b:71:0f:10:
         db:5e:c1:96:b5:6e:f0:d5:82:a3:70:b1:4d:97:9a:b6:3d:a3:
         71:9c:4d:65:7c:c3:b4:1f:ea:3f:e3:a8:21:cc:a9:f3:d6:f4:
         b6:5d:65:94:2b:d0:92:e3:fa:f4:75:e5:88:52:aa:3e:74:08:
         df:24:18:41:4d:2d:e2:a2:0d:03:e8:8f:6d:79:46:19:10:80:
         82:a5:a7:48:c2:42:48:02:b7:3d:13:55:cf:9e:48:11:76:66:
         ad:44:1c:ea:4d:dc:76:31:35:f8:9c:c1:9f:fa:d1:09:4b:34:
         ac:9d:d4:e8:38:01:80:4c:48:16:54:f6:d2:28:d0:3a:b9:9e:
         a7:69:ba:b8:3c:45:33:a2:e4:12:65:16:b4:f4:60:14:18:8d:
         d4:73:00:69:02:5d:9a:6b:e3:60:0d:ea:9a:66:fb:b4:9d:6f:
         35:e5:3b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:21 2025 by rpki-client