Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
File:                     gDCVaDspR93Unu6sDb2eqVSuoUQ.mft (raw, json)
Hash identifier:          6qvxL5TTyHQ+OStj3DhxRw6eOJiLwMvzDcsKq5ai+BU=
Subject key identifier:   39:E0:9B:4A:62:C7:10:58:D2:A4:EA:39:C6:B6:62:DA:A2:73:6B:61
Authority key identifier: 80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44
Certificate issuer:       /CN=803095683b2947ddd49eeeac0dbd9ea954aea144
Certificate serial:       0197C3134F89EAE5937B902EF0FF21E2FF59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
Manifest number:          04D1
Signing time:             Mon 30 Jun 2025 23:01:51 +0000
Manifest this update:     Mon 30 Jun 2025 23:01:51 +0000
Manifest next update:     Tue 01 Jul 2025 23:01:51 +0000
Files and hashes:         1: W5iuUvjQHKES7b_m2-IC5Q7IB04.roa (hash: usyzAXKt0ilcyhdvyj8HiQdu4iL1ydlMcUp3wQXJixw=)
                          2: gDCVaDspR93Unu6sDb2eqVSuoUQ.crl (hash: hyw3aZ6hUwcyaqOWYFHfBPy5dOhIiO8ZI6IM9htVZmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 15:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c3:13:4f:89:ea:e5:93:7b:90:2e:f0:ff:21:e2:ff:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=803095683b2947ddd49eeeac0dbd9ea954aea144
        Validity
            Not Before: Jun 30 23:01:51 2025 GMT
            Not After : Jul  1 23:01:51 2025 GMT
        Subject: CN=39e09b4a62c71058d2a4ea39c6b662daa2736b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0d:90:1e:27:63:24:3d:13:2e:c5:6e:e0:51:
                    f7:41:c7:cf:6b:24:b3:ef:e7:f2:9f:6c:a2:79:57:
                    20:26:9d:a0:6c:de:15:fd:6b:8b:1b:9a:cb:54:8b:
                    3c:bf:02:8e:f8:aa:a9:f7:f1:e3:59:9c:32:3c:05:
                    5e:af:7e:01:73:70:09:c9:02:a9:ce:d1:58:74:8c:
                    1e:6b:c3:b7:cb:ef:b4:47:e9:39:51:c6:88:e6:3c:
                    33:68:b7:9d:74:19:a3:0f:cd:34:d2:34:ba:a9:07:
                    91:ba:36:25:51:fe:24:a8:d7:4e:e3:64:9c:fe:e4:
                    03:88:fd:bc:f4:34:db:b3:68:ba:ec:a2:2e:b9:12:
                    4a:2f:8a:3a:98:18:32:8b:a7:03:ff:f3:05:78:24:
                    7e:6b:03:5b:96:f6:19:9d:b0:ea:cc:4a:22:bf:ff:
                    4f:3d:96:e0:5b:73:0d:7d:03:27:91:d8:e3:c1:16:
                    18:0e:79:f4:09:fb:da:69:c9:94:6b:c4:90:3e:19:
                    50:e1:b2:14:14:80:73:2d:ad:f0:df:c7:89:4b:f2:
                    5f:7e:49:f3:ea:70:6a:ce:aa:ec:9d:ca:41:2b:23:
                    4a:19:96:95:93:77:30:aa:c6:29:6a:b6:bd:66:ca:
                    71:50:ed:a9:d0:46:47:28:c3:f3:59:42:19:8d:03:
                    fb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E0:9B:4A:62:C7:10:58:D2:A4:EA:39:C6:B6:62:DA:A2:73:6B:61
            X509v3 Authority Key Identifier:
                keyid:80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:01:6c:c5:e5:2a:9d:57:fa:c0:39:3c:39:20:f1:90:cb:a0:
         ce:22:22:a2:ba:e6:70:43:cf:e1:ab:f8:0c:46:a8:54:c9:6d:
         12:b7:42:35:02:31:c0:84:ec:fe:29:57:6e:01:49:66:43:0f:
         98:ec:69:39:ff:42:6d:e6:a1:dd:1d:48:cf:83:df:5a:1c:cf:
         47:da:db:97:c2:60:73:ce:a6:ca:1c:ee:48:38:2d:6e:ce:cc:
         90:d7:63:53:bc:dc:6e:e6:ef:4d:11:a3:cd:37:9d:98:3b:5e:
         45:e3:d6:b3:93:2f:4d:4a:1a:60:df:a5:0d:30:b9:70:73:89:
         d1:92:6f:e3:27:cb:08:f9:2e:37:91:85:2e:e6:8d:6d:27:e9:
         03:b3:49:ed:46:cf:e4:d0:67:f1:28:b7:ef:72:7c:52:58:e8:
         e2:5f:ec:3f:81:be:4a:12:5d:0c:b1:b1:a4:56:42:7f:e2:7e:
         b6:6a:4e:61:47:68:29:04:11:3b:39:5c:df:f7:8f:17:22:d2:
         17:7d:27:5e:bf:29:47:55:cc:4b:61:eb:e7:0e:20:15:4b:38:
         0b:7f:b4:31:8c:f2:d2:fe:34:b6:30:92:db:38:0e:cb:da:4a:
         38:93:41:a0:79:a0:d3:40:01:37:04:e0:f4:1f:25:68:4a:96:
         81:ed:7f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:06:00 2025 by rpki-client