Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
File:                     gQYKUYUo6GqOp38YigJjeQwI9rk.mft (raw, json)
Hash identifier:          XXliHoYcTkwlWQ19LUEcICs3JBRgwHU1CHSk4rLu+vk=
Subject key identifier:   38:1A:EF:F4:5B:23:96:1A:E7:26:A8:2B:28:FB:8F:1F:84:97:13:97
Authority key identifier: 81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
Certificate issuer:       /CN=81060a518528e86a8ea77f188a0263790c08f6b9
Certificate serial:       01993500CC9D8DD665CE213F3DB40CDBA455
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
Manifest number:          1075
Signing time:             Wed 10 Sep 2025 19:01:08 +0000
Manifest this update:     Wed 10 Sep 2025 19:01:08 +0000
Manifest next update:     Thu 11 Sep 2025 19:01:08 +0000
Files and hashes:         1: gQYKUYUo6GqOp38YigJjeQwI9rk.crl (hash: HxV6faQmldWdDg1ewBw3yJW2e5rkMbDsWs1J3YYUh18=)
                          2: mzS0mg7LzekXtU0-AI8vjQNsdnI.roa (hash: W1Odlm/4gNw2/x1K4BE4WalP/0rHvCKJa9lik2Xno0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 19:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:00:cc:9d:8d:d6:65:ce:21:3f:3d:b4:0c:db:a4:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81060a518528e86a8ea77f188a0263790c08f6b9
        Validity
            Not Before: Sep 10 19:01:08 2025 GMT
            Not After : Sep 11 19:01:08 2025 GMT
        Subject: CN=381aeff45b23961ae726a82b28fb8f1f84971397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a0:73:69:80:a2:4c:33:4f:42:15:1a:24:c7:
                    f4:e2:e8:5f:ec:44:4b:e3:fd:89:da:9b:4f:cd:77:
                    27:61:9c:0d:37:62:b9:44:83:ca:5f:6b:22:91:fd:
                    dc:82:c7:ea:0d:0d:f6:3d:b4:31:1a:a6:ab:0c:dd:
                    a7:b4:4b:72:20:08:47:29:a3:48:31:32:fd:9a:31:
                    54:6b:97:8b:93:46:f6:37:aa:24:75:9a:84:9b:60:
                    02:b0:76:d4:f3:a5:92:4b:8a:28:21:9d:12:a9:03:
                    74:e0:fc:01:18:06:10:bc:d2:f4:c7:c4:d6:6b:8c:
                    3e:45:3c:f4:ba:f1:52:e0:3f:9e:8c:31:e7:a9:73:
                    b3:cd:54:ab:4c:b6:bd:34:4a:38:03:69:0c:fa:eb:
                    db:08:df:d5:d9:85:1a:0a:73:16:ee:5e:1c:94:6d:
                    23:22:e7:35:d4:46:88:3f:73:e8:4d:63:c3:0b:11:
                    1c:e9:72:30:dc:06:1d:d0:f2:3c:6f:1a:98:9c:cd:
                    aa:85:d0:b8:8d:f3:49:bb:25:ca:3a:5f:9e:a6:6d:
                    19:a4:8b:75:58:25:23:bc:51:ee:b3:74:26:50:49:
                    69:92:ed:b9:dd:1c:fe:1d:3a:fe:b6:f3:9e:7a:7a:
                    6f:27:82:86:64:88:2d:0d:23:db:59:99:cf:18:05:
                    2e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1A:EF:F4:5B:23:96:1A:E7:26:A8:2B:28:FB:8F:1F:84:97:13:97
            X509v3 Authority Key Identifier:
                keyid:81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:37:14:f2:0c:0b:4b:c7:31:14:4f:9f:fb:e4:05:1c:90:fc:
         13:b9:b5:91:93:d9:67:d3:23:a1:05:83:43:34:7f:d6:7b:e0:
         d9:c3:8b:a2:6c:f8:02:30:d9:77:fa:da:27:7e:11:fa:d6:92:
         e1:c5:e2:7f:65:81:6c:c7:94:7d:49:8c:3b:16:69:cf:dc:ac:
         d3:93:a5:8c:20:39:3f:81:dc:21:7a:1e:94:fc:db:53:fe:d0:
         4f:12:24:e2:5a:cd:a9:17:bd:d8:ee:3c:85:8b:02:5e:96:de:
         5d:84:53:00:aa:ad:49:d0:78:a2:b3:14:5b:fd:3c:d3:7c:36:
         75:bf:a6:2d:0c:81:c1:04:6b:b2:71:5b:eb:b2:d0:f6:03:cf:
         92:11:e4:ae:ff:67:85:fc:47:46:aa:f4:bd:9a:c0:bb:4f:ca:
         14:6e:8f:79:79:35:26:79:08:94:b9:e5:2f:96:89:7c:bc:11:
         7e:84:eb:3a:73:9f:18:00:7b:55:55:19:a8:7a:8d:ac:41:22:
         ff:97:72:53:ef:af:4f:6b:3a:0c:9b:94:0d:0b:29:29:91:5c:
         dd:69:3f:26:95:fd:95:35:dc:5c:1e:8f:a3:15:80:8e:2c:33:
         28:bf:07:db:4e:a7:f0:04:0b:04:33:cb:2f:99:d2:cd:44:f3:
         bf:9d:84:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:18:59 2025 by rpki-client