Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
File:                     v3DW_GPRd37tzY9GpVk2F8YxneY.mft (raw, json)
Hash identifier:          IrO++sOQ8uymLUdXAn8NMFAs9rTg7gbCWm1ijQFEFZo=
Subject key identifier:   2A:07:B1:B1:A5:4E:B8:4B:40:9A:CC:BD:C4:3A:8D:D0:45:50:F4:6E
Authority key identifier: BF:70:D6:FC:63:D1:77:7E:ED:CD:8F:46:A5:59:36:17:C6:31:9D:E6
Certificate issuer:       /CN=bf70d6fc63d1777eedcd8f46a5593617c6319de6
Certificate serial:       019890358C9EC01306A522AF715F936C2843
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
Manifest number:          1627
Signing time:             Sat 09 Aug 2025 19:01:25 +0000
Manifest this update:     Sat 09 Aug 2025 19:01:25 +0000
Manifest next update:     Sun 10 Aug 2025 19:01:25 +0000
Files and hashes:         1: uCVmenLcASyNoh4ZOZE-C9n4LLY.roa (hash: d6oXAE1yERYBjWPnG7isycEkaI7F0yqfWlZw0H+T+Mo=)
                          2: v3DW_GPRd37tzY9GpVk2F8YxneY.crl (hash: xHjQg6qyO0xef0g6dLNE07mWFJiNDgIJwI6LJyq5Ukw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:35:8c:9e:c0:13:06:a5:22:af:71:5f:93:6c:28:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf70d6fc63d1777eedcd8f46a5593617c6319de6
        Validity
            Not Before: Aug  9 19:01:25 2025 GMT
            Not After : Aug 10 19:01:25 2025 GMT
        Subject: CN=2a07b1b1a54eb84b409accbdc43a8dd04550f46e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:aa:11:c1:d3:73:71:e0:5a:7f:68:1c:1a:2c:
                    e5:c2:f8:6b:e1:04:86:96:db:aa:11:5f:e7:cd:4c:
                    0e:27:d2:49:49:05:4c:cd:a4:f9:a1:4c:88:11:1c:
                    33:cd:cf:c6:60:13:3a:0b:d6:6c:00:a6:bb:8d:96:
                    9e:f6:6d:94:ca:45:fe:bb:5f:a8:40:0f:79:e2:ff:
                    23:2d:a7:7c:f1:63:a2:ac:fa:23:dd:ff:4f:b1:d4:
                    a0:dd:05:78:c0:3a:0b:01:33:3f:34:ad:3f:e7:d6:
                    72:00:c1:b9:71:2c:0e:71:ea:8f:de:7e:87:6c:94:
                    cb:c0:bc:9c:90:17:1b:be:ff:4a:04:f1:48:f2:a7:
                    32:70:99:ae:c6:00:71:5a:f3:05:5a:1a:68:7e:f6:
                    fb:d8:16:20:fc:96:01:6f:ee:7a:15:9b:b0:a9:fe:
                    36:91:fe:3a:30:81:56:eb:5d:ac:87:3f:eb:c4:af:
                    de:ee:be:23:d0:de:c9:1d:cf:57:21:60:74:5a:82:
                    17:f2:b1:7c:b2:b1:ec:6b:ec:76:2b:f7:98:5e:69:
                    ee:b4:ad:79:2c:b5:24:f5:9a:f9:b2:dc:d0:68:08:
                    38:01:bd:4a:bb:56:fb:03:70:f1:9f:a7:f2:e4:e5:
                    ec:21:79:dc:12:f1:72:06:d9:d3:07:ea:8e:59:83:
                    23:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:07:B1:B1:A5:4E:B8:4B:40:9A:CC:BD:C4:3A:8D:D0:45:50:F4:6E
            X509v3 Authority Key Identifier:
                keyid:BF:70:D6:FC:63:D1:77:7E:ED:CD:8F:46:A5:59:36:17:C6:31:9D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:32:7d:89:d9:27:99:77:7c:9a:3c:0b:c9:6f:2e:be:fa:3a:
         89:85:26:a6:2b:6f:a5:a6:2d:73:e6:6b:de:78:7d:19:0e:14:
         40:ba:f6:1e:91:83:5d:08:67:c4:46:b7:c4:70:91:de:c3:dd:
         8e:8e:30:d5:ce:a7:a0:4b:3d:bf:27:c1:3e:c6:d0:ff:25:04:
         66:ab:c7:1a:5a:46:a3:bd:9e:c7:74:7f:32:b9:e8:90:a9:4a:
         8a:a7:56:50:32:0f:d3:64:2b:64:d8:89:e5:a7:8e:4a:f2:b8:
         5f:ea:f2:ae:95:25:45:c2:7c:49:ad:71:06:3c:3f:b6:18:c8:
         55:37:83:f6:ce:57:5e:b0:ad:9c:7f:fa:63:84:d5:d7:45:80:
         ed:4b:26:91:03:23:b8:fd:6e:ab:d3:df:40:ca:55:08:ad:19:
         fd:b2:41:01:f8:45:ea:6f:e7:c4:b0:de:31:ab:98:8d:b9:5e:
         ef:af:97:a2:d0:b3:30:91:a8:6d:f3:5e:ad:17:a2:42:ea:f7:
         44:9c:e3:df:62:c8:3c:6e:ab:df:c4:de:cb:42:d6:65:fd:50:
         0e:80:c4:73:78:7e:18:ac:fa:12:fa:df:48:87:3d:ce:c5:6b:
         c8:7b:64:12:d9:ef:d5:03:33:79:c6:74:e3:c7:60:3c:5a:0f:
         99:f9:cf:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:37:12 2025 by rpki-client