
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
File:                     gP5WmKEnlkzA5M6OP9yYXiolpmM.mft (raw, json)
Hash identifier:          KMkDd2UVlDHK3G6j+2TTarpwZmkFeOV4j36QbwGQA6o=
Subject key identifier:   E2:1E:E9:BB:70:F0:DE:20:06:A4:1F:44:8D:B7:4A:79:E8:3D:3E:F9
Authority key identifier: 80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
Certificate issuer:       /CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Certificate serial:       019A3422127D21F87BFBDAB8064DB1445B58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
Manifest number:          05C7
Signing time:             Thu 30 Oct 2025 08:00:39 +0000
Manifest this update:     Thu 30 Oct 2025 08:00:39 +0000
Manifest next update:     Fri 31 Oct 2025 08:00:39 +0000
Files and hashes:         1: MWh5oxD0mlPfv3wl5DDlIllo7IY.roa (hash: hCUe3UqGLfLJn0/ykpo1moRqC/s0I/1a6u8vKsOmeBg=)
                          2: gP5WmKEnlkzA5M6OP9yYXiolpmM.crl (hash: Xs383tF3/g4p00MnKEarb36U8AJOt93N633DzrZ5ETs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 31 Oct 2025 08:00:39 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:34:22:12:7d:21:f8:7b:fb:da:b8:06:4d:b1:44:5b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
        Validity
            Not Before: Oct 30 08:00:39 2025 GMT
            Not After : Oct 31 08:00:39 2025 GMT
        Subject: CN=e21ee9bb70f0de2006a41f448db74a79e83d3ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:30:10:53:8e:8c:7e:cf:cc:20:70:54:31:5a:
                    61:d0:c6:97:9f:7b:4b:7d:d0:58:8f:f3:3d:ae:9d:
                    48:e8:e2:d6:99:72:29:12:83:c5:87:d6:4c:68:a4:
                    bd:8a:c7:6b:61:2c:6d:5c:aa:6a:d6:63:52:8d:2e:
                    14:c8:6a:31:39:22:dd:b5:ae:a1:ff:85:2a:e9:33:
                    91:2b:e5:7f:00:4a:e7:00:7a:f2:11:ac:06:87:c2:
                    87:ca:60:78:aa:35:86:55:0c:8d:1e:43:a2:0c:90:
                    2c:e2:49:42:7b:e0:42:e1:f7:d7:ef:f4:8c:ff:9e:
                    25:8a:34:bd:f2:7c:74:5a:5c:e2:de:04:d9:7a:a1:
                    2c:9a:ea:2f:95:f1:65:a3:12:45:06:6a:32:6e:5c:
                    0e:dd:87:9a:7e:4d:f8:64:f3:7c:99:d8:f3:9f:92:
                    ad:ee:90:f8:25:67:6b:6b:7e:5b:6d:00:83:12:11:
                    f6:17:57:de:4d:b6:2b:92:d1:ec:3f:e5:34:7c:33:
                    d7:f4:74:fd:67:f6:97:1b:43:b2:87:de:e5:13:47:
                    85:cb:47:f8:63:3e:24:d7:86:06:25:82:ef:4c:bb:
                    55:52:ff:5d:d3:d9:54:28:fc:a7:9e:5a:ba:8d:a8:
                    19:ce:09:2d:04:86:e7:dd:fb:29:a4:90:19:d1:2e:
                    f1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1E:E9:BB:70:F0:DE:20:06:A4:1F:44:8D:B7:4A:79:E8:3D:3E:F9
            X509v3 Authority Key Identifier:
                keyid:80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         0d:f2:1c:9b:60:e5:be:bb:0e:8b:d1:6b:96:a5:d6:a0:cc:2b:
         01:e9:c3:71:eb:f4:4a:c1:c7:79:79:ff:0e:38:de:db:db:c8:
         6b:fa:78:98:26:d3:f4:6d:bd:82:c3:ae:5b:86:ee:ed:62:81:
         e1:79:b6:fb:a5:f5:66:28:b4:1c:09:93:18:fd:ad:d8:17:dc:
         30:b6:0e:ca:eb:a8:e7:11:9f:95:ff:c9:db:9b:e9:ea:23:fe:
         67:15:62:5c:2f:dc:a6:96:d4:ea:82:7a:d5:35:12:68:67:28:
         61:d9:83:bb:5e:b6:b9:a9:aa:24:6d:f2:42:16:6d:00:7b:8e:
         89:e5:a0:a5:29:00:6e:00:ad:a6:5d:b8:a3:06:1c:3d:3a:61:
         fd:54:92:e3:9f:a7:94:3d:01:17:b3:fc:fd:0e:90:5c:4f:ab:
         e6:eb:cb:7b:c5:1d:51:00:25:7e:d6:ab:66:0b:54:bd:09:81:
         ef:d8:14:5f:5a:d0:07:b4:56:16:ff:a6:cf:c6:2e:cb:87:cc:
         49:53:1e:26:20:b5:c5:9c:99:7d:02:87:cf:f4:b3:2e:f3:e9:
         5a:13:9d:5c:3e:a8:b5:bc:6a:eb:7b:97:c1:06:b1:fc:ca:34:
         a9:cf:72:ff:b2:c5:95:91:5b:29:c7:60:2b:7c:b0:58:0d:5d:
         53:30:ce:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 17:16:24 2025 by rpki-client