Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
File:                     gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft (raw, json)
Hash identifier:          vhqgcE6xBVOdpgO0r06GYA0pxJHk7QRfUPCVpVj1FBs=
Subject key identifier:   81:43:60:40:4F:9F:6B:C4:10:2B:44:5F:F1:35:62:00:62:67:D9:CD
Authority key identifier: 83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74
Certificate issuer:       /CN=833a0b5594339aefe8b558e3729290b42bb1a974
Certificate serial:       019A424B51339487F7A6D4010BCD2B202054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
Manifest number:          107F
Signing time:             Sun 02 Nov 2025 02:00:23 +0000
Manifest this update:     Sun 02 Nov 2025 02:00:23 +0000
Manifest next update:     Mon 03 Nov 2025 02:00:23 +0000
Files and hashes:         1: 1-27kWYKAbmGvckcGXREu8_O6E5Q.roa (hash: TMyKOohNPE+V9J//F3lIZGfAGQhVpkDHjFotXauXdgo=)
                          2: gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl (hash: w4XVFiXNySAMILkcyjdcfF6jG2mOmLrM6icyDC/+aYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Nov 2025 21:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:42:4b:51:33:94:87:f7:a6:d4:01:0b:cd:2b:20:20:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833a0b5594339aefe8b558e3729290b42bb1a974
        Validity
            Not Before: Nov  2 02:00:23 2025 GMT
            Not After : Nov  3 02:00:23 2025 GMT
        Subject: CN=814360404f9f6bc4102b445ff13562006267d9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:79:4b:99:1e:11:ab:1a:26:b6:82:23:c8:26:
                    f2:21:6d:43:7a:84:3c:64:45:f2:e7:33:15:f6:d5:
                    4e:79:33:24:61:2d:65:12:9a:5f:62:0c:1d:3a:83:
                    96:9a:60:ed:f6:fb:fd:bb:04:1a:f8:71:02:b9:75:
                    17:6c:14:57:d9:c4:04:2b:2f:ca:9f:3d:c2:b9:b6:
                    69:05:6c:33:91:dd:05:a0:9e:77:d0:27:77:64:41:
                    93:32:cb:d8:b7:73:b7:98:4f:ac:73:53:6b:85:3a:
                    6a:40:fc:4c:b0:94:f2:33:cf:75:41:e1:cf:98:82:
                    17:4c:25:c6:84:d9:c3:b9:68:d5:a0:3e:a3:ed:76:
                    6b:4b:cf:7d:94:86:6d:f6:38:17:ea:32:1f:1c:be:
                    a0:a7:bb:5b:07:5c:10:af:f8:d8:dd:d5:50:a4:b1:
                    e2:cf:75:78:43:16:41:b4:94:a8:74:6d:af:1e:e5:
                    bf:98:01:0f:e6:36:df:4d:01:c1:45:9b:38:8a:c8:
                    23:69:5f:fd:61:96:8f:34:8f:9b:5e:9d:b4:fd:db:
                    b8:17:84:9c:6e:e6:bd:c1:19:fb:87:4b:ab:63:e0:
                    0d:00:45:b9:0f:c7:49:11:3d:ad:52:34:ee:e1:99:
                    83:a4:04:c3:c8:10:dd:a3:3c:25:c0:c9:22:ad:f5:
                    e1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:43:60:40:4F:9F:6B:C4:10:2B:44:5F:F1:35:62:00:62:67:D9:CD
            X509v3 Authority Key Identifier:
                keyid:83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:fe:ba:34:8e:fa:7d:0b:b6:58:de:74:c2:9a:61:95:42:6a:
         f9:6f:59:49:4c:16:4c:97:f4:46:d7:1a:54:ec:5f:69:6c:22:
         96:0e:87:e4:54:05:ca:15:ba:cd:c6:0a:ed:db:32:b6:48:60:
         ae:8b:8c:3a:bb:ac:2f:3c:96:b3:c5:d3:11:46:3c:19:f6:59:
         eb:ec:4d:dc:96:3d:25:57:f1:c4:65:85:05:c2:6b:01:be:96:
         5c:39:56:99:c7:19:6a:41:f1:3b:94:5a:a0:e8:11:f0:9e:19:
         1d:b9:ea:d2:f2:b3:cc:a2:fb:92:8e:23:4f:ee:72:20:2d:fc:
         a1:e1:1c:17:e8:c8:a8:84:93:f6:b1:73:7d:ce:80:8c:4f:c3:
         19:a6:71:90:d4:dd:50:ed:ef:6b:29:8c:75:e3:a5:6e:42:12:
         e7:ae:57:4a:dc:f5:8d:17:b0:4d:76:32:a2:12:15:d8:6a:59:
         48:49:f8:c1:50:fe:9a:07:d2:2a:7f:ad:e1:04:a5:a9:9b:0a:
         d9:33:58:c1:6a:cc:64:ee:6a:85:0e:04:e7:00:a4:76:6d:12:
         fa:b4:1a:f6:e3:f6:7b:78:84:52:e5:7a:d9:b6:c4:7f:50:03:
         53:f5:a9:06:0a:1f:0a:bf:87:67:3c:11:9a:87:d8:01:c5:4e:
         3f:d8:81:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 06:19:07 2025 by rpki-client