Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
File:                     gDCVaDspR93Unu6sDb2eqVSuoUQ.mft (raw, json)
Hash identifier:          9Zhjdd248xt/exufy1ptPT0w60V0GSNybmIc6ABwjHw=
Subject key identifier:   AF:22:27:36:DD:60:88:E1:2C:88:FC:62:F0:CB:9B:A4:6D:58:94:F8
Authority key identifier: 80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44
Certificate issuer:       /CN=803095683b2947ddd49eeeac0dbd9ea954aea144
Certificate serial:       0199FEB51BCAB8922A765E97AC4C54018487
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
Manifest number:          05F9
Signing time:             Sun 19 Oct 2025 23:01:45 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:45 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:45 +0000
Files and hashes:         1: W5iuUvjQHKES7b_m2-IC5Q7IB04.roa (hash: usyzAXKt0ilcyhdvyj8HiQdu4iL1ydlMcUp3wQXJixw=)
                          2: gDCVaDspR93Unu6sDb2eqVSuoUQ.crl (hash: IcnoTMiFaX18QISEHSMywIi4Oev3LmzIsylZX2C1Uvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b5:1b:ca:b8:92:2a:76:5e:97:ac:4c:54:01:84:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=803095683b2947ddd49eeeac0dbd9ea954aea144
        Validity
            Not Before: Oct 19 23:01:45 2025 GMT
            Not After : Oct 20 23:01:45 2025 GMT
        Subject: CN=af222736dd6088e12c88fc62f0cb9ba46d5894f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:20:4a:96:9e:3d:c4:01:bf:87:c0:d4:7c:2b:
                    28:c4:1f:11:1e:bf:40:6b:b7:5d:b0:03:db:1d:24:
                    c3:5f:99:df:95:7b:b4:dd:d6:ec:39:0f:2c:10:88:
                    0f:a1:19:11:92:ac:25:eb:74:79:f8:4f:e9:5a:a0:
                    5c:0f:25:8e:fc:8a:89:0b:c3:e6:19:56:71:0e:51:
                    2d:c8:92:1e:da:c1:1c:23:e1:f6:8a:60:94:12:3b:
                    d4:d7:2d:0c:21:80:70:cd:1f:20:b1:9d:29:ff:ea:
                    89:ae:12:7b:c4:b7:05:2e:12:46:18:af:6b:ee:a7:
                    7f:15:df:e6:9c:a4:2d:0b:5d:58:0b:b4:8d:57:36:
                    91:e5:40:29:1d:25:1c:68:54:e2:19:de:bf:84:c4:
                    a6:90:8a:c2:c3:fe:9a:76:b6:8b:33:6c:71:dd:d3:
                    39:7c:18:d7:09:4a:f8:b6:19:ad:aa:2f:64:00:47:
                    48:39:37:dd:d2:34:5a:d1:3a:9a:df:10:20:ac:58:
                    dc:fc:cb:d3:93:c4:33:c1:f9:09:5d:37:28:f0:0f:
                    32:7e:4a:e1:c3:78:a1:7c:8b:cf:20:f9:9a:e2:87:
                    e2:8e:64:67:f6:cc:0e:8b:64:2b:c9:1c:2c:f8:01:
                    10:bb:53:ef:be:50:06:5a:4c:41:5e:2f:74:b9:5e:
                    fc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:22:27:36:DD:60:88:E1:2C:88:FC:62:F0:CB:9B:A4:6D:58:94:F8
            X509v3 Authority Key Identifier:
                keyid:80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:30:35:be:c4:a6:a6:fe:9c:d9:fd:ee:e4:7d:24:7c:02:d2:
         d9:8a:a3:14:20:14:bd:6d:cc:a1:c8:86:15:7e:02:dc:f0:2d:
         52:98:65:fb:b5:63:1c:79:e1:32:53:75:b6:3b:02:3e:62:c5:
         9e:65:b3:4a:8e:cb:dd:4f:1d:84:e2:6d:ff:7b:b7:21:e9:8d:
         fa:49:36:65:f7:1b:52:29:16:90:de:22:b8:f5:38:7c:2e:3b:
         43:49:98:9f:cd:54:da:a2:c7:47:ae:0b:29:10:e4:94:56:0c:
         d2:c7:2b:04:dc:b3:b6:0d:06:5f:57:57:c9:c7:04:6e:aa:38:
         ea:f9:3b:a9:96:c3:ae:43:9b:6b:36:f9:6f:fd:be:0d:73:46:
         ab:e5:ba:61:26:c9:fb:2b:c4:c5:27:85:32:c9:53:12:68:3e:
         58:69:07:6b:23:53:ca:df:1f:fd:4c:b5:65:24:55:c7:eb:57:
         48:64:ca:6f:52:a0:a5:86:c9:2c:f0:94:9e:9b:92:00:4a:d2:
         2a:f5:17:16:70:fc:06:67:78:76:81:3c:82:c9:45:81:ce:b8:
         2b:0c:4c:05:5b:4d:6e:3f:a9:bf:96:a1:3b:6a:60:b7:a0:10:
         09:33:87:67:37:c7:20:30:60:93:e8:91:7d:00:db:1b:a8:bb:
         31:f2:d2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:06:49 2025 by rpki-client