Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
File:                     gWaEopWOAZDycKgKmHiTGeHO5Ng.mft (raw, json)
Hash identifier:          A1NRgwo+6Cc+Mts6rnhPqIqpWnwPrMG/IXAIr4JGq2o=
Subject key identifier:   02:70:77:6E:17:45:83:33:3E:12:54:3B:34:C8:03:41:56:80:CF:CC
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Certificate issuer:       /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial:       019890DA137E2F30CAC9F6F7F42A03853D53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
Manifest number:          1629
Signing time:             Sat 09 Aug 2025 22:01:07 +0000
Manifest this update:     Sat 09 Aug 2025 22:01:07 +0000
Manifest next update:     Sun 10 Aug 2025 22:01:07 +0000
Files and hashes:         1: OdWvB1tzlHuezmOiK21E-034390.roa (hash: LkUkFhkMgSy8DoAFPtShWqNO2nOGOboJ8BsC8K9ico0=)
                          2: fgZqb1eXsifotU80oWGCNeapyHo.roa (hash: tNyodLqu2MH+TIN/vy+n1/1LvfEmsJX7JG+2Qz7k9Us=)
                          3: gWaEopWOAZDycKgKmHiTGeHO5Ng.crl (hash: Hmkt6PJrCqkgSrHxVXP24W2jLnnOh0mOPs101atgobk=)
                          4: rhWOdvbRW_QkUa1o5T8i6dRU720.roa (hash: v5LlEHGBOX4X3JyqUu8rErhLCU66G7I7hGMGMVexdV4=)
                          5: wF03zlYV8_r_ZZnCmj1tslqE2ZI.roa (hash: EKYSZKyX0wz37/7aJtOTH5iytiN7NBI4neSvEUBFYGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:da:13:7e:2f:30:ca:c9:f6:f7:f4:2a:03:85:3d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
        Validity
            Not Before: Aug  9 22:01:07 2025 GMT
            Not After : Aug 10 22:01:07 2025 GMT
        Subject: CN=0270776e174583333e12543b34c803415680cfcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:15:fa:74:13:10:fd:58:3e:ee:ba:7e:25:65:
                    f6:dd:06:9e:2b:c6:5c:1e:5b:b3:65:12:1d:92:37:
                    76:bf:8b:b5:65:c3:e5:99:b2:7b:23:78:dd:53:13:
                    51:41:91:5f:ac:64:d2:b2:5a:66:f6:85:d8:77:49:
                    bc:31:7d:ab:52:3a:9b:59:de:64:34:f2:58:1a:54:
                    4c:ca:21:0f:7e:6f:d8:df:4b:0d:00:00:52:64:c6:
                    3a:9b:70:cb:4b:77:b3:e6:54:9f:11:f7:d7:63:a0:
                    50:92:f0:6b:67:af:47:6a:67:a7:c2:aa:53:b3:60:
                    84:dd:2f:d3:7f:27:b1:75:d7:88:38:9f:28:ec:18:
                    91:ae:1b:f9:a5:15:30:9e:d2:c4:12:55:fc:64:40:
                    ac:ce:b0:b7:24:13:7f:27:d5:ef:07:48:61:f4:de:
                    a5:68:ca:03:53:eb:75:03:dc:c6:d7:98:e7:bc:d5:
                    02:b9:68:a2:9e:95:1b:3f:ef:f1:18:67:bb:54:ed:
                    3a:95:09:97:e4:fa:1e:c7:29:69:53:21:5a:a0:43:
                    29:05:c4:ea:2a:0f:2e:9e:b8:25:bc:5d:79:c1:7a:
                    dc:e2:87:50:5e:62:31:ad:e8:96:32:50:26:8e:af:
                    2f:a0:f1:fe:14:39:d0:5d:9e:8a:37:2e:03:31:a9:
                    55:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:70:77:6E:17:45:83:33:3E:12:54:3B:34:C8:03:41:56:80:CF:CC
            X509v3 Authority Key Identifier:
                keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e8:42:ad:dd:ba:82:50:86:e1:25:2f:05:4a:91:6f:ac:86:
         39:a8:c9:d5:52:c8:bc:55:bf:d4:5b:c6:8c:4b:f8:a5:83:c2:
         4f:2d:43:39:2c:a7:bc:57:d6:2a:2e:47:e8:3f:b7:fe:aa:cf:
         f0:19:af:88:ec:90:e9:42:ee:6b:ab:f3:42:1e:89:da:63:d8:
         87:10:7f:c5:3a:e3:b8:09:02:f8:c2:72:ad:54:2a:52:77:7d:
         4b:e1:1f:d3:ab:b8:61:79:94:12:d3:b3:45:8b:66:10:78:14:
         29:7d:29:1f:95:fb:2e:bc:f7:0c:82:d6:5a:5d:6a:da:b4:45:
         d1:0a:fe:71:6f:7a:74:86:22:49:98:7e:0a:46:9c:18:ee:9b:
         ed:53:fd:e4:a5:a6:93:2a:b1:14:d7:ce:c3:ea:d8:7b:9e:f4:
         99:bb:79:92:b6:da:b0:e2:2c:57:63:62:74:bf:3d:12:b4:b0:
         0f:ce:a9:c4:b3:a7:75:53:cf:68:e3:28:59:61:8c:a2:e5:5b:
         cb:d1:6e:d9:ca:4b:0e:72:2d:a3:9e:32:86:28:c4:10:cf:09:
         94:5a:84:c2:d3:fa:c2:f8:6c:c7:9f:d0:14:a3:d8:3f:72:29:
         5b:90:b4:33:80:26:96:89:e8:8e:d0:8f:81:0b:63:2b:3f:a1:
         3a:49:a4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:20:13 2025 by rpki-client