Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
File:                     giSLXgiFiWS6K1RzFSAV_VmR_fg.mft (raw, json)
Hash identifier:          G8Bo1SHUi1ymXkRE7ofNYHzChGk2LRbnonT32NO5Npo=
Subject key identifier:   65:63:92:05:0F:CD:D8:9E:B8:D5:44:C5:B6:C6:3F:C0:AF:5D:D6:36
Authority key identifier: 82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8
Certificate issuer:       /CN=82248b5e08858964ba2b5473152015fd5991fdf8
Certificate serial:       0199FD33E11775FE1D4802107A918018F7B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
Manifest number:          1673
Signing time:             Sun 19 Oct 2025 16:00:59 +0000
Manifest this update:     Sun 19 Oct 2025 16:00:59 +0000
Manifest next update:     Mon 20 Oct 2025 16:00:59 +0000
Files and hashes:         1: GpgJajGCbSNl3e4aO7PdAchg1ng.roa (hash: JjeUV08MlhBjZNwlusZZDt6ugsqaNAcVm8lYJFEKoLw=)
                          2: giSLXgiFiWS6K1RzFSAV_VmR_fg.crl (hash: mykAHoXXC5FR5lJ5NJxpvwO76pAmS+NrI7JBdnkDvkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:33:e1:17:75:fe:1d:48:02:10:7a:91:80:18:f7:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82248b5e08858964ba2b5473152015fd5991fdf8
        Validity
            Not Before: Oct 19 16:00:59 2025 GMT
            Not After : Oct 20 16:00:59 2025 GMT
        Subject: CN=656392050fcdd89eb8d544c5b6c63fc0af5dd636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:93:92:30:71:90:32:9b:11:70:f6:e8:f3:68:
                    58:22:90:96:4b:5c:aa:f1:77:ba:a0:1f:c9:cc:32:
                    23:c3:b3:2b:07:95:b4:81:29:99:91:61:99:57:b0:
                    58:68:a0:e3:8f:34:52:9d:e7:31:bf:4e:ff:f4:83:
                    e9:5d:74:b3:45:78:8d:08:b9:e3:b8:73:8f:8f:5f:
                    8f:16:3d:ce:ab:c3:20:c4:21:c6:db:b3:ae:6b:1f:
                    5f:de:06:b3:92:11:e9:8b:00:96:cb:e4:96:3d:2b:
                    ad:da:9f:93:ac:aa:44:10:48:f7:cf:91:09:5f:8d:
                    a5:93:79:a7:ba:86:18:d2:cf:84:bf:d2:c2:52:33:
                    a6:9d:65:f5:2f:07:4d:eb:90:ac:3e:a9:62:ba:fc:
                    2e:81:60:6a:9e:ae:cb:cc:f1:b4:f1:bb:68:c6:cd:
                    12:8d:a7:5c:0a:0f:42:5b:0d:2c:92:d7:d1:ac:a5:
                    15:d8:de:40:cf:f7:4e:e0:34:06:7a:2f:f0:65:91:
                    f3:76:05:ef:eb:9a:b1:19:16:a9:53:29:ca:06:60:
                    0b:66:ae:06:f9:c3:b1:80:84:eb:15:5b:df:93:e4:
                    35:f9:e7:09:fc:5d:36:f3:e6:f5:53:d5:9e:ee:9f:
                    fb:d6:1a:8a:96:70:70:35:8a:91:4e:b7:50:fe:08:
                    6a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:63:92:05:0F:CD:D8:9E:B8:D5:44:C5:B6:C6:3F:C0:AF:5D:D6:36
            X509v3 Authority Key Identifier:
                keyid:82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:58:c9:31:f9:30:8e:02:1e:76:49:7d:ec:95:b9:6d:fa:22:
         12:d4:cf:f3:a0:a1:53:4c:31:b3:a5:b7:2d:db:53:e4:c5:05:
         a4:7f:56:94:f1:8c:86:1a:10:91:7d:1b:66:54:1e:a4:66:9b:
         a8:e3:c5:e6:9d:8e:b2:2d:48:46:08:b4:6e:52:63:6e:20:70:
         ab:5e:d4:d3:d1:b9:1a:0a:b7:b5:99:49:88:c9:e7:02:8f:ce:
         df:e6:0d:e1:62:06:c4:e9:a0:12:49:1b:8f:4a:70:74:f8:f2:
         9d:52:5e:74:9f:3d:b3:05:1b:b4:de:61:51:cc:17:0f:71:4f:
         00:0e:72:1e:27:38:36:34:6a:36:e3:d0:73:64:1c:86:03:81:
         23:77:35:81:14:a6:48:95:a4:1e:a4:ae:38:ce:a5:a2:80:6c:
         1a:cd:eb:5d:27:d5:c5:50:6d:7f:80:c6:f1:97:4a:96:6e:49:
         64:d3:13:ae:77:7f:cd:9d:d8:f9:3d:a3:66:9e:c1:1a:d1:32:
         5f:07:c6:32:a1:88:28:2d:30:35:99:aa:d1:bc:db:ef:37:0f:
         e8:93:2d:69:3b:ad:21:d9:ac:4a:93:ff:d3:ea:31:4a:8b:88:
         c7:10:5e:d3:d7:22:45:d1:79:62:28:93:3c:a7:f8:8f:fc:80:
         ce:de:6f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:56 2025 by rpki-client