Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
File:                     Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft (raw, json)
Hash identifier:          sTjOz6H1kU0HoUgjlgqoUqYdFChrmbSyn39KLoGIjXQ=
Subject key identifier:   C0:B2:3A:31:43:EC:54:03:30:C9:22:8D:23:98:B6:4B:E7:70:34:CB
Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
Certificate issuer:       /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Certificate serial:       01992331536D04A6709AE285E6B0CAC6B9A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
Manifest number:          1675
Signing time:             Sun 07 Sep 2025 08:00:59 +0000
Manifest this update:     Sun 07 Sep 2025 08:00:59 +0000
Manifest next update:     Mon 08 Sep 2025 08:00:59 +0000
Files and hashes:         1: 6UgffgqyRmXA4X4lQkfxVrdwBsA.roa (hash: evXeFj81thsrgyrUvw1aQVJLYDNLbEIIyY5wmZWNCGU=)
                          2: EMVnap43Y9UsFWtlCe55L5ZXNno.roa (hash: 79QWn/jDXhxzY15VXil6olMuq2XcT6cSiSrWZxg+0Gg=)
                          3: Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl (hash: hsKx+aED4g6//JLTlvLapDq6AvfJ5KKqnBhAzW8NR8A=)
                          4: LxmN4uMoK6wh408GJ6l9gH0ugu0.roa (hash: kJ1RLjAnYMeLDEzPUcjx7KqkgbH5nyx8Lbk4P/H0Wtw=)
                          5: ST5QgStVsZ8VLKir2fIMPSp6_jU.roa (hash: 2UGwzfV+8KmtBgovMvwjTZRncLGcWbahxwdG9QTxnao=)
                          6: fRi0G2cIUxI61l2GTTKIFQAG9RE.roa (hash: IiPf4Yv8/FcDmWTn4xUhoGH8CrL6FWqGZiw6UQ0WOHg=)
                          7: yAm1lV_S8WQU9xUYSz0xhS5WWFk.roa (hash: +RLHgrQThKYdngYSU7w4Ac27ABqxEk770X6x0K5R6ZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:31:53:6d:04:a6:70:9a:e2:85:e6:b0:ca:c6:b9:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
        Validity
            Not Before: Sep  7 08:00:59 2025 GMT
            Not After : Sep  8 08:00:59 2025 GMT
        Subject: CN=c0b23a3143ec540330c9228d2398b64be77034cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7e:ed:2d:ff:db:4c:09:15:e6:ef:65:85:a5:
                    64:3f:f9:4a:61:eb:ec:79:ed:77:78:d2:7c:10:8d:
                    42:ce:34:9d:0e:a3:c7:15:43:6d:36:89:51:9c:8e:
                    f5:a9:70:c4:71:49:a8:b9:61:de:01:44:66:ac:37:
                    71:dc:57:6f:b2:cf:9a:df:2d:8a:3c:74:69:5d:bd:
                    d3:a0:5a:0a:5e:0b:83:26:aa:34:7e:54:ee:85:71:
                    23:0f:38:8a:7f:e6:4b:b7:4a:b7:ea:8a:d0:3f:f0:
                    59:15:96:b2:5b:93:ea:79:7d:16:46:39:c1:70:ed:
                    b0:0a:e5:27:8b:1b:f2:8b:9b:57:34:7e:bf:49:c9:
                    ff:45:2d:60:19:48:eb:ef:07:c1:ea:f8:3c:5f:ad:
                    b2:8a:31:bf:d4:97:ba:76:d7:40:6d:61:a8:55:89:
                    54:9e:d2:60:55:6f:99:e8:11:a8:f4:4c:22:6e:a9:
                    a6:a4:a6:56:61:db:77:8b:88:d4:04:de:de:91:b8:
                    5e:3e:2b:49:e9:d5:c9:95:09:16:0a:81:f9:f7:58:
                    82:e6:35:b1:f4:0c:a7:3e:2e:92:d8:f2:dd:b3:a2:
                    b4:65:21:2d:52:b5:2a:a0:98:47:85:95:35:6f:39:
                    58:a7:a5:b4:95:f2:b9:38:66:52:9a:b9:bb:dc:5d:
                    2d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B2:3A:31:43:EC:54:03:30:C9:22:8D:23:98:B6:4B:E7:70:34:CB
            X509v3 Authority Key Identifier:
                keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d9:e7:c4:97:29:1f:06:0a:f8:0b:31:bc:a8:08:6c:2a:e1:
         97:bf:2e:be:3a:0a:27:81:6c:39:db:8f:82:2b:8e:ed:6b:de:
         43:70:fd:f3:76:fb:c5:af:46:1c:17:52:eb:dc:c0:98:6b:5b:
         54:81:05:55:6d:7a:08:c5:ee:6c:b8:ae:92:be:58:b7:80:8e:
         ab:49:c9:92:34:af:af:6e:22:13:4f:62:59:03:ed:7c:b0:20:
         1e:5d:47:57:9b:52:a9:50:0a:06:38:26:04:3b:68:8a:e9:41:
         40:22:c0:88:2c:12:15:65:2c:f5:91:98:61:bb:8c:0d:d2:be:
         a1:12:9b:c3:71:cd:65:09:6f:87:de:56:ec:22:c0:fa:86:13:
         cd:81:e6:a4:0b:71:28:c3:23:5e:a1:9f:71:6b:4c:45:7e:ff:
         66:f6:be:43:f5:b4:b0:f4:b6:dd:1b:9b:6e:8f:95:66:d9:9f:
         59:87:af:57:47:c7:55:0e:8c:a3:52:55:ac:c5:b6:57:cf:57:
         5e:03:28:61:3d:ea:4f:ad:c5:7d:da:d1:b5:14:19:a4:e9:b5:
         0a:2f:64:39:17:a1:e9:61:e2:dd:72:c9:de:3b:36:a0:84:51:
         60:88:7e:96:03:02:3b:b1:d5:1f:82:32:cf:ca:e7:12:97:88:
         02:bc:52:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:00 2025 by rpki-client