Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
File:                     gMez3pa5HtxunIXZ1aZoQZIDtfU.mft (raw, json)
Hash identifier:          B3Aavpgytwg5FsC+bRvAP0EU/nqzS0BC8XckCT3TNAg=
Subject key identifier:   46:D2:F1:16:03:36:47:67:2E:57:6D:EA:F7:3C:7E:BA:B4:23:0E:8E
Authority key identifier: 80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5
Certificate issuer:       /CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
Certificate serial:       0199FBEBAF785E6C32E8A280DA90D47D5344
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
Manifest number:          04BD
Signing time:             Sun 19 Oct 2025 10:02:31 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:31 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:31 +0000
Files and hashes:         1: gMez3pa5HtxunIXZ1aZoQZIDtfU.crl (hash: drNKgudsaoH2dHuKnAUgl5v6H8wEkQoD7Sz0/mENCKE=)
                          2: xVzCoBRTedY1vT9C7xN3NLO-WeY.roa (hash: ystLlP8JPbF13VOw8QCBVAQ5cldgA4v4fXVvBu8BWIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:af:78:5e:6c:32:e8:a2:80:da:90:d4:7d:53:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
        Validity
            Not Before: Oct 19 10:02:31 2025 GMT
            Not After : Oct 20 10:02:31 2025 GMT
        Subject: CN=46d2f116033647672e576deaf73c7ebab4230e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ec:b8:f7:4e:16:af:4e:0c:ac:a6:b0:a0:34:
                    bf:e6:a9:8e:f6:6d:07:3e:0d:8f:ea:f6:b2:00:60:
                    85:86:53:b5:b7:3a:12:8e:13:a0:17:55:68:e6:bb:
                    4c:1e:88:34:3f:25:5e:05:0c:69:81:6c:6c:a6:b9:
                    86:f8:e8:ad:e2:34:04:03:7e:31:d8:3b:ae:fe:6f:
                    0a:82:b2:12:04:8c:bd:a3:bc:38:20:5e:dd:09:b3:
                    5a:43:8a:91:ac:87:a6:9e:f7:ec:23:28:6c:40:8f:
                    3e:e0:0e:24:1d:cb:35:ea:1a:e0:00:a4:9e:e6:5c:
                    72:6c:46:a0:06:3b:15:cd:01:ac:17:34:0e:7e:ca:
                    54:92:be:28:89:d5:f5:e4:dd:ff:3e:02:19:66:c4:
                    62:88:fd:4e:b8:96:99:0a:54:e7:5c:21:aa:2f:ff:
                    94:fe:4b:79:91:e3:a5:0d:68:41:0c:6e:15:b1:78:
                    32:2b:48:43:52:4b:65:bf:3d:a1:da:2b:68:03:e4:
                    ac:99:2a:d9:a0:e0:5b:fe:34:16:5a:1b:89:41:6c:
                    66:b9:97:13:73:df:c4:ca:81:aa:8e:40:c9:fb:f7:
                    23:94:4f:02:83:78:e6:c6:a7:34:d7:ad:b8:c9:11:
                    27:32:0a:94:4f:b1:b1:8c:60:0a:45:21:f3:8b:43:
                    9e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D2:F1:16:03:36:47:67:2E:57:6D:EA:F7:3C:7E:BA:B4:23:0E:8E
            X509v3 Authority Key Identifier:
                keyid:80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:c7:d7:1e:93:93:be:87:84:af:91:e9:65:0d:e3:e4:d1:7d:
         cf:1e:b0:45:4e:65:97:63:21:8d:51:d9:e5:6d:ba:7e:f4:ce:
         16:37:ac:2a:df:37:24:42:4d:e4:f7:fa:6f:c6:1e:7f:a6:f6:
         b6:d2:22:17:58:51:59:84:a9:43:c8:1a:80:42:81:3f:bc:4d:
         e9:28:83:f2:d8:1c:5b:5c:6a:6b:04:b6:ba:20:8c:2d:86:54:
         42:18:6d:d7:ab:63:37:69:b4:3e:96:75:28:87:ca:2c:8f:34:
         c6:09:3c:7e:21:fb:ad:fb:5f:03:76:dd:fc:d0:58:e2:b7:7f:
         bf:77:bf:76:c6:58:ce:37:43:72:6a:fc:70:52:b5:45:61:63:
         14:75:99:84:54:4f:aa:35:03:22:5b:7b:81:67:ea:61:a9:e2:
         96:dc:a5:ea:9a:b7:55:03:96:cd:25:56:66:8b:cb:bd:d9:73:
         64:f8:84:d0:3b:e4:01:67:e3:99:5b:fc:22:4e:5a:45:3a:bf:
         89:38:b2:f9:5c:d5:87:8a:2c:4f:ce:68:f2:d3:6e:c4:2a:16:
         fe:4f:bc:54:41:8e:f3:17:f3:94:38:f8:52:30:68:e7:35:7d:
         ee:7a:2d:3c:e2:32:8c:79:bc:66:96:f4:2f:54:85:0e:4c:68:
         15:77:3d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:05 2025 by rpki-client