Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
File:                     V3GDYWiNFi_4AjwSJ81kTa45ocA.mft (raw, json)
Hash identifier:          +36QcNOM9fLgwLeHjnyw1tFUTX/XuxqjNHCtqh7Ah40=
Subject key identifier:   A4:08:14:1E:76:6E:66:CF:DB:75:22:B5:48:B5:C3:23:F9:8D:9D:51
Authority key identifier: 57:71:83:61:68:8D:16:2F:F8:02:3C:12:27:CD:64:4D:AE:39:A1:C0
Certificate issuer:       /CN=57718361688d162ff8023c1227cd644dae39a1c0
Certificate serial:       0199FCC68371E61977BED890A97B6E199193
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
Manifest number:          1671
Signing time:             Sun 19 Oct 2025 14:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:32 +0000
Files and hashes:         1: V3GDYWiNFi_4AjwSJ81kTa45ocA.crl (hash: sncnZRTj8zt5EawEv0thvz/arHuc6SBVgQvKklMczdY=)
                          2: lgeLoySacO5n6-jqTWkewt--0AI.roa (hash: cHeeK4JCsJJNj8Pz7DQjcNm/axVPSQ0h4TJyF4NqSFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:83:71:e6:19:77:be:d8:90:a9:7b:6e:19:91:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57718361688d162ff8023c1227cd644dae39a1c0
        Validity
            Not Before: Oct 19 14:01:32 2025 GMT
            Not After : Oct 20 14:01:32 2025 GMT
        Subject: CN=a408141e766e66cfdb7522b548b5c323f98d9d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bb:68:7d:32:1e:f9:04:9b:d2:a4:c1:de:6a:
                    b9:f5:6c:b7:fb:22:1a:d7:f7:df:97:22:66:6a:9d:
                    e8:d6:2d:8c:80:0e:9c:6e:7a:53:ee:76:a7:62:9d:
                    36:35:f1:a9:31:71:d9:9c:16:20:b9:38:0a:f5:a2:
                    17:ca:9f:dc:4d:5c:b5:d0:74:bb:ce:16:2c:da:c5:
                    a3:47:d1:09:5e:1e:0c:ce:26:65:ca:72:25:f3:cf:
                    a5:ad:a8:23:c2:ac:23:f8:25:75:44:57:0c:08:17:
                    f6:6f:ad:04:7a:b2:a6:bf:9d:4f:46:04:d4:fa:3d:
                    ca:ac:27:37:11:69:a2:1c:34:85:e8:b9:1b:a6:13:
                    a9:4e:a7:e9:3d:98:c6:65:a9:f7:13:d5:9e:a7:fb:
                    b8:09:d6:a7:0a:d2:6c:44:9a:6a:1b:69:aa:c0:29:
                    32:4c:0a:f1:50:96:fc:05:21:00:21:96:43:8a:e3:
                    8c:56:5e:36:09:79:f9:a5:78:8a:f1:04:04:60:f7:
                    23:64:9e:57:ea:bf:2d:47:43:57:cf:ec:9b:11:a2:
                    e9:3e:b1:5b:df:12:93:ae:4a:df:f3:4f:ad:c1:df:
                    ee:0d:33:89:74:2a:31:80:5b:51:8a:e4:08:31:ff:
                    8b:d9:e4:66:9d:c2:8a:f8:eb:8a:c8:89:84:04:8b:
                    93:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:08:14:1E:76:6E:66:CF:DB:75:22:B5:48:B5:C3:23:F9:8D:9D:51
            X509v3 Authority Key Identifier:
                keyid:57:71:83:61:68:8D:16:2F:F8:02:3C:12:27:CD:64:4D:AE:39:A1:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:a4:88:ba:94:75:21:50:fa:3f:4f:27:cb:ee:e6:42:0b:8d:
         ac:b2:d5:96:2a:9f:80:aa:56:80:4a:f3:05:e7:22:1a:ce:43:
         0a:79:e8:6d:8a:27:9c:97:77:7b:96:53:af:84:83:b5:76:69:
         8b:d2:e2:35:f0:52:ae:96:8d:91:f0:ad:db:56:3c:10:d4:21:
         be:92:a0:3e:4f:2b:55:3c:c3:d1:70:34:74:89:8d:33:15:f5:
         64:35:3e:96:a7:e6:fc:77:b1:bc:7b:cc:6d:f7:8c:32:95:a2:
         b9:38:f9:d2:a3:4c:ee:b2:9c:38:d7:77:a0:d5:86:63:3b:66:
         b3:d0:40:9a:63:7c:91:c8:2a:09:de:de:d7:ca:fd:1e:b0:4c:
         c3:db:fd:b5:ec:10:19:46:2d:d2:5a:fd:63:42:3d:71:12:1a:
         d7:5d:56:aa:88:7d:03:22:ff:35:1a:6a:51:a1:de:27:b8:33:
         d6:67:b5:e8:44:4a:60:dd:96:9c:8a:98:59:2a:87:5a:dc:55:
         11:4e:b5:9e:ca:ea:ae:d3:cc:57:96:bf:7f:f3:dd:c5:b8:b7:
         ce:27:4a:f0:73:30:11:1b:ae:44:04:9e:6d:58:d0:6d:5c:8e:
         f4:1e:d2:52:71:fc:b0:44:48:8f:19:15:49:4c:1f:89:d8:f9:
         07:c2:f0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:28 2025 by rpki-client