Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File:                     gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier:          x/h8UN1HeiRtgb6vJUCpeH3IkoLeHUbw3X6WRWPs8hk=
Subject key identifier:   30:4C:AF:80:2A:B2:25:E3:36:C4:D9:50:D3:CB:08:A0:70:15:E6:8A
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer:       /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial:       0198D5BBEE14B4B0B17C5C8C08707420E052
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 07:01:59 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:59 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:59 +0000
Files and hashes:         1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: C/BNDigovrTIS9ZWgDuyh/LRO+rjLR2eMDj/TAH0u4s=)
                          2: zMBNnU414lgd-NbPPxv6LfAwsv0.roa (hash: a4j1fjgcVTUDMcw7oEdiVT0gcdKWNK33wBEmeJ+tzqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:ee:14:b4:b0:b1:7c:5c:8c:08:70:74:20:e0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
        Validity
            Not Before: Aug 23 07:01:59 2025 GMT
            Not After : Aug 24 07:01:59 2025 GMT
        Subject: CN=304caf802ab225e336c4d950d3cb08a07015e68a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:85:52:24:90:33:63:6d:97:73:5a:06:35:97:
                    15:46:a1:f9:0c:05:0e:95:09:f1:b6:ec:57:ee:25:
                    e8:16:bc:12:f1:79:e7:b4:41:78:c2:f5:9a:e2:db:
                    55:c2:a7:3d:e2:7c:d1:40:69:df:fe:63:5b:dd:44:
                    34:54:d6:d9:12:56:9a:8c:0b:56:e2:77:4d:3e:20:
                    a3:c7:11:af:80:6f:3e:dc:73:61:b2:a6:65:62:48:
                    22:47:4c:ce:63:2b:e7:e9:11:c4:58:77:69:a9:db:
                    49:de:fa:df:c0:0a:2a:59:e1:97:5c:c2:99:8d:60:
                    04:b5:78:16:97:0a:95:2f:63:1d:88:3f:69:a7:d5:
                    1e:75:11:74:96:7c:32:b3:ed:3d:ca:c4:92:d7:b1:
                    50:a4:0e:b5:20:03:0d:bc:f1:ea:78:40:e1:b1:c1:
                    c6:aa:8c:c4:47:91:c3:4a:d4:d2:5c:61:a0:27:bc:
                    39:a3:f9:4c:4a:a9:a8:f8:0c:91:b5:e7:8e:ab:e3:
                    47:2a:1a:c4:b3:30:f2:d0:74:75:5b:3a:a4:35:02:
                    c8:0f:dc:4a:38:18:2f:2d:3e:dd:ef:69:94:15:af:
                    8a:98:bb:26:2a:1a:ef:93:42:90:b5:90:b8:f6:d8:
                    71:2d:98:f7:36:2f:c3:7b:9f:cc:d6:d2:52:bf:48:
                    84:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4C:AF:80:2A:B2:25:E3:36:C4:D9:50:D3:CB:08:A0:70:15:E6:8A
            X509v3 Authority Key Identifier:
                keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:33:87:02:3e:6b:3c:af:a9:fb:f4:f7:ed:1d:5a:52:59:36:
         82:6f:53:c1:de:71:b7:9d:39:47:8a:6f:25:cd:20:29:b5:7f:
         23:d0:08:14:4a:9b:f2:8d:36:ee:40:1d:e5:98:ff:0e:67:59:
         cc:6c:46:84:26:35:93:65:65:fb:09:95:37:58:9b:59:c7:c9:
         ab:3c:3d:ab:5a:d5:cd:2a:5a:f2:ca:eb:ee:c3:8a:fc:9a:c0:
         a7:9d:c1:89:e8:7f:5c:8d:cd:17:bf:07:2d:2c:4f:8e:92:72:
         01:47:8a:62:32:59:a8:3d:d8:da:91:fa:7e:69:98:ee:49:dd:
         05:9c:71:91:2e:b7:98:9a:54:50:07:f6:d4:f2:e7:61:f4:76:
         05:44:ce:05:f4:7f:9c:7f:dd:03:44:57:56:9e:f0:91:fd:2a:
         82:80:86:7a:95:f5:4b:f9:08:9f:bb:f5:6e:d6:9d:1d:b3:b9:
         26:3b:62:92:24:bf:1f:9c:f9:15:3b:0c:32:70:34:cc:50:4a:
         65:be:c3:41:e4:04:0c:8b:bd:64:19:16:e3:4a:3a:24:7d:12:
         97:37:b8:12:14:99:ce:0f:3c:04:be:60:e3:e9:e9:a9:41:be:
         04:e4:61:dd:f6:82:37:35:18:f7:e5:ae:86:2d:74:bf:3f:e1:
         cc:49:77:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:18:55 2025 by rpki-client