Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
File:                     gDCVaDspR93Unu6sDb2eqVSuoUQ.mft (raw, json)
Hash identifier:          /d6JIOSKkGx//GJ4qxN2zxAFX05YxLYesdgVS0F52IQ=
Subject key identifier:   23:B8:D0:3A:80:7E:56:E5:5C:79:DF:18:AF:6B:28:AA:6A:17:79:45
Authority key identifier: 80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44
Certificate issuer:       /CN=803095683b2947ddd49eeeac0dbd9ea954aea144
Certificate serial:       01992E23C35AFDF46EC2155AEE6BEB468BBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
Manifest number:          058D
Signing time:             Tue 09 Sep 2025 11:01:59 +0000
Manifest this update:     Tue 09 Sep 2025 11:01:59 +0000
Manifest next update:     Wed 10 Sep 2025 11:01:59 +0000
Files and hashes:         1: W5iuUvjQHKES7b_m2-IC5Q7IB04.roa (hash: usyzAXKt0ilcyhdvyj8HiQdu4iL1ydlMcUp3wQXJixw=)
                          2: gDCVaDspR93Unu6sDb2eqVSuoUQ.crl (hash: /+fhtso4nI8b/bxvjLXED4MQLN9zHo/JIhmwjyU/MTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 11:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2e:23:c3:5a:fd:f4:6e:c2:15:5a:ee:6b:eb:46:8b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=803095683b2947ddd49eeeac0dbd9ea954aea144
        Validity
            Not Before: Sep  9 11:01:59 2025 GMT
            Not After : Sep 10 11:01:59 2025 GMT
        Subject: CN=23b8d03a807e56e55c79df18af6b28aa6a177945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:bc:8f:20:7a:a5:e2:c5:65:5b:24:88:a0:0e:
                    4c:19:6a:5a:e7:91:9c:65:57:a6:09:99:4c:33:0a:
                    c8:ff:02:63:46:7e:8c:bc:9d:9f:48:c6:ff:5c:11:
                    db:5a:71:39:3b:e3:c4:6e:ee:be:7d:d3:9f:59:f2:
                    fa:21:ae:67:2a:94:04:93:ed:dc:6e:a9:21:99:cd:
                    fd:1f:0f:cf:89:dd:da:63:30:77:6e:45:03:0e:56:
                    95:de:cc:72:d9:69:65:cf:a2:38:93:26:af:66:2f:
                    d0:5a:f4:2a:d1:a2:99:d6:6f:37:bc:00:3b:f9:78:
                    de:8f:69:1d:62:64:a2:59:e6:a1:56:e1:01:cb:55:
                    d6:89:80:78:7b:6f:be:05:37:d6:cb:3e:3e:7f:25:
                    98:d3:a5:89:61:03:09:f5:a1:1d:14:84:66:cf:32:
                    9a:2a:4f:dc:3f:99:21:69:97:7a:3a:0d:4f:6a:79:
                    0b:0b:f7:bc:b4:5b:0c:d6:4a:18:8b:dd:da:b2:20:
                    e1:4e:ad:f6:d4:1b:ae:49:77:83:81:1f:2e:ef:6b:
                    1e:72:50:8b:88:3f:38:1c:65:72:8c:ca:d2:37:a6:
                    00:67:c4:90:6d:fb:57:d3:c1:9a:63:05:44:a3:0d:
                    1d:02:b0:47:3c:2c:47:ea:0d:03:b3:97:d6:6e:0e:
                    26:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B8:D0:3A:80:7E:56:E5:5C:79:DF:18:AF:6B:28:AA:6A:17:79:45
            X509v3 Authority Key Identifier:
                keyid:80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:5f:7c:a6:3c:fc:e7:c3:24:35:d2:33:6f:67:fc:0a:10:dc:
         e5:7f:cc:50:98:f9:39:d6:f6:8b:f6:ed:ad:7a:ee:b2:3c:f6:
         0a:e4:a1:0c:5d:6f:40:f2:a6:43:b5:ef:e5:4b:89:7e:6f:e7:
         28:a4:21:44:62:cd:ef:a5:43:86:3e:d9:b6:9d:22:3d:03:25:
         8a:51:b0:f2:fb:c9:16:5a:8d:47:21:16:a3:10:40:2b:fc:b7:
         49:ca:3b:47:dc:7c:02:8a:0e:8a:27:d1:28:18:db:d8:79:0f:
         c4:da:78:14:b5:ab:a3:49:4f:7e:0f:7e:9f:fd:ed:77:e6:64:
         ce:12:2f:92:dc:45:34:9d:6a:06:51:6c:36:fc:ff:f9:d6:6d:
         08:0e:36:da:40:96:52:19:c4:2f:dd:dd:e0:85:c8:f0:73:4b:
         a7:ea:0a:ba:bc:fd:30:a2:3d:65:31:c7:4e:1f:e5:7c:59:d0:
         c8:b8:2a:fe:4a:d5:fa:04:23:a1:c5:22:7e:9b:d2:fc:5c:09:
         07:d2:fe:8a:41:10:1e:ab:40:a2:a4:7a:f2:34:e3:6d:6f:03:
         da:d6:c4:65:be:66:9e:85:b5:16:b5:85:98:25:d1:c7:02:fc:
         66:a0:2f:54:31:80:8b:5f:f7:7e:c3:17:1d:01:19:5d:30:b4:
         5e:e8:bc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 20:31:41 2025 by rpki-client