Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft
File:                     gRAUn9EhMLPNzzWGKw3NuYqUcck.mft (raw, json)
Hash identifier:          FRAIRdxv9aC0eNUuesrA9sJPEM44U7fuX8UtY7xWOmc=
Subject key identifier:   E6:B7:39:E5:DD:3B:BF:B4:D8:DB:D6:B3:48:C6:3C:50:97:B0:F3:99
Authority key identifier: 81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9
Certificate issuer:       /CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9
Certificate serial:       019A4FCFC1B13D6965CAA59F0BEB614FD2A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft
Manifest number:          114C
Signing time:             Tue 04 Nov 2025 17:00:06 +0000
Manifest this update:     Tue 04 Nov 2025 17:00:06 +0000
Manifest next update:     Wed 05 Nov 2025 17:00:06 +0000
Files and hashes:         1: 806ngxQFbLg-MFXB9RB492466i0.roa (hash: p/nhUvWIiglPDhL2yjGq+wAsIWcIw+TsOyuSheiCKGg=)
                          2: gRAUn9EhMLPNzzWGKw3NuYqUcck.crl (hash: InLOIEAPdLh790epURA8DE1a+dqhixz1AwzzE87QiYc=)
                          3: h7WrxxlFxq_jYFk35jmIYb3f00s.roa (hash: h2rZQ/4NrSDJTIeZUF9nM2gyqifu2Mb4/5cQKdqqscg=)
                          4: y1PeU9JRt-8zy7fAHdTs76jVsHc.roa (hash: 0p/JFK5m9p7bozQ4pnJznyoRdt6D50XJVcxIdNoOA38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 17:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:cf:c1:b1:3d:69:65:ca:a5:9f:0b:eb:61:4f:d2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9
        Validity
            Not Before: Nov  4 17:00:06 2025 GMT
            Not After : Nov  5 17:00:06 2025 GMT
        Subject: CN=e6b739e5dd3bbfb4d8dbd6b348c63c5097b0f399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:e1:f8:d3:95:c4:67:2a:70:7f:9f:81:48:
                    44:3e:b7:ca:0f:b4:77:3d:32:24:38:02:3b:9a:fe:
                    e2:28:00:50:71:93:ea:55:6a:8c:f5:c8:f7:61:cb:
                    5a:3c:a7:95:92:f7:e6:eb:97:ba:c6:22:5d:41:d2:
                    70:6e:ed:8f:6e:62:eb:fc:bd:8c:8a:de:53:2e:6e:
                    1d:c1:42:bd:55:95:a4:e8:12:5d:da:3a:0d:5b:17:
                    4c:47:20:70:42:2b:6f:0a:1c:71:0b:0e:84:27:dd:
                    a3:44:ff:30:90:1f:0f:ab:76:39:03:ab:69:c3:1c:
                    9f:fd:39:d7:a7:bb:0e:78:e7:5e:d3:e0:b8:88:f2:
                    ad:0b:9d:18:78:f7:3f:5a:e9:82:00:12:b9:80:a2:
                    72:e8:c6:d6:93:eb:a0:e9:62:2f:12:c3:08:ba:7b:
                    bd:6c:de:dd:cb:03:b8:52:56:18:20:56:02:28:ca:
                    26:4c:2f:27:fc:94:2f:6a:a7:a3:ca:b3:22:5f:d4:
                    38:03:17:ea:0e:3d:56:14:e0:93:90:07:b0:e4:c9:
                    50:53:1c:e4:df:54:37:62:ef:d2:1b:e7:f3:e2:1a:
                    76:78:4e:17:3f:13:c2:b4:cc:af:45:9c:36:93:0b:
                    d5:2d:2c:9a:e8:d8:3e:8c:31:59:ce:66:01:34:72:
                    33:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B7:39:E5:DD:3B:BF:B4:D8:DB:D6:B3:48:C6:3C:50:97:B0:F3:99
            X509v3 Authority Key Identifier:
                keyid:81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:67:8f:89:61:01:f0:e8:f8:83:5d:13:03:ec:0e:39:26:f4:
         32:4e:19:a6:2d:62:8a:09:61:7f:46:27:4d:1c:be:52:ac:b0:
         07:72:d3:5f:60:a1:a3:0c:eb:fa:a5:1c:cf:e6:81:42:1f:90:
         88:18:a9:e1:ab:8e:86:52:ea:f4:f7:49:97:d5:14:0c:a2:16:
         65:fb:3c:6c:ea:4a:e6:27:f1:3e:fe:cf:64:91:2a:43:f4:d7:
         79:14:3a:31:a8:5f:01:fa:9d:7a:2b:cc:de:1a:5d:1c:7b:22:
         64:f9:3b:4d:83:86:b9:c2:fc:bd:1e:0b:6a:7a:80:25:87:4b:
         6d:81:98:19:14:c7:8f:9d:7c:3d:9b:6e:e9:90:5a:80:d7:0d:
         ba:f9:51:34:91:88:de:d5:cb:47:92:73:e9:27:3a:f1:fc:2a:
         a9:f9:e3:e3:e3:a4:d0:7f:78:77:50:b1:d5:e6:ec:c8:b2:a3:
         87:f5:f6:e9:e6:05:24:84:85:2f:ef:d9:9c:6f:6f:e7:dd:08:
         59:54:94:ee:2e:38:f0:0a:5d:3c:d4:b1:09:d8:1a:70:07:8a:
         fb:70:a1:fe:4d:2f:ed:7f:36:48:c5:56:6a:88:d1:50:c7:43:
         fa:27:be:6c:e0:2c:9a:8d:ce:31:79:d1:a3:09:ba:16:5b:43:
         d2:56:e1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:08:10 2025 by rpki-client