Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/gm6310-hBxWX-jM5-_iDHC6Vssc.mft
File:                     gm6310-hBxWX-jM5-_iDHC6Vssc.mft (raw, json)
Hash identifier:          +2q8j7mj6S6I+R7gGmhHPO1m/y6T251dKuFwykE/xxE=
Subject key identifier:   96:32:C9:BC:BB:2A:F0:3A:CF:BE:9D:FA:F1:0D:49:1E:6A:75:AA:31
Authority key identifier: 82:6E:B7:D7:4F:A1:07:15:97:FA:33:39:FB:F8:83:1C:2E:95:B2:C7
Certificate issuer:       /CN=826eb7d74fa1071597fa3339fbf8831c2e95b2c7
Certificate serial:       019A4E4F76002F35E3CDCF50F0E6B7F67B22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gm6310-hBxWX-jM5-_iDHC6Vssc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/gm6310-hBxWX-jM5-_iDHC6Vssc.mft
Manifest number:          170A
Signing time:             Tue 04 Nov 2025 10:00:21 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:21 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:21 +0000
Files and hashes:         1: 92eglBFm4UMAVtPH9IkG9URQIWk.roa (hash: bpICQo3Md95UoWjh41NuV2joPCJhpEI/T4pNh3i8ITQ=)
                          2: gm6310-hBxWX-jM5-_iDHC6Vssc.crl (hash: AHc3mVz619CpzfY329oYBbkjCSO7NV1wohiNdnr8X2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/gm6310-hBxWX-jM5-_iDHC6Vssc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/gm6310-hBxWX-jM5-_iDHC6Vssc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gm6310-hBxWX-jM5-_iDHC6Vssc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:76:00:2f:35:e3:cd:cf:50:f0:e6:b7:f6:7b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826eb7d74fa1071597fa3339fbf8831c2e95b2c7
        Validity
            Not Before: Nov  4 10:00:21 2025 GMT
            Not After : Nov  5 10:00:21 2025 GMT
        Subject: CN=9632c9bcbb2af03acfbe9dfaf10d491e6a75aa31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cf:06:a1:85:03:13:5e:cd:09:4c:51:51:8e:
                    e9:45:b1:24:a0:9e:0e:41:4a:16:9e:79:84:de:5f:
                    d4:7a:7b:82:b9:a1:49:19:5d:12:3b:67:a9:84:17:
                    ed:2d:50:b1:59:22:45:1d:51:51:0b:77:64:76:e2:
                    0c:5f:93:4d:92:f1:34:c8:93:1e:7e:64:9c:e2:4c:
                    ae:0e:db:5f:e7:e7:1b:cf:d5:de:08:55:77:7b:76:
                    32:89:2b:a6:99:5f:ff:e4:0f:8d:f5:81:4b:28:1e:
                    24:56:2a:97:95:4a:be:75:20:eb:75:de:46:e0:d2:
                    23:d3:51:81:3b:d1:e9:a4:9c:37:a6:cf:57:7a:0e:
                    f0:0c:e8:bf:c4:e9:9d:60:b9:e4:20:3e:e7:87:25:
                    62:8a:d9:e7:4f:48:49:0b:0a:a4:11:ab:17:a7:a7:
                    a9:70:a8:89:80:60:2b:7e:28:0a:bd:29:e2:5b:a1:
                    43:82:26:0d:40:3d:04:f6:d4:f7:75:24:4b:5b:1c:
                    5d:46:10:bb:ad:33:1a:f3:d0:75:59:a1:38:e0:eb:
                    c2:16:36:42:bb:55:a9:66:a7:46:65:e0:ed:eb:5b:
                    91:a4:33:9c:b2:29:36:19:96:20:a2:a5:de:34:90:
                    6e:8e:df:3a:92:40:c9:6b:e0:0e:f1:c5:9f:0e:dd:
                    99:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:32:C9:BC:BB:2A:F0:3A:CF:BE:9D:FA:F1:0D:49:1E:6A:75:AA:31
            X509v3 Authority Key Identifier:
                keyid:82:6E:B7:D7:4F:A1:07:15:97:FA:33:39:FB:F8:83:1C:2E:95:B2:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gm6310-hBxWX-jM5-_iDHC6Vssc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/gm6310-hBxWX-jM5-_iDHC6Vssc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0218cf-d1a8-4725-ba96-5265a723f8d4/1/gm6310-hBxWX-jM5-_iDHC6Vssc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:23:67:93:e7:1a:6a:2a:60:fa:65:7a:7b:ea:63:34:da:37:
         a6:7e:4d:f2:5b:1c:01:8f:7f:43:1c:57:2a:18:f2:e3:7d:87:
         e8:ce:62:f3:95:08:ce:55:7a:bb:77:29:d3:e2:51:6f:d6:49:
         c6:9b:fa:26:b6:78:e2:75:b5:92:42:cd:d2:4f:7a:7f:41:c4:
         67:f6:7e:c4:c5:78:82:5a:e8:ad:30:62:70:1a:a6:41:78:4a:
         f4:5b:b1:73:89:41:3b:bb:88:2b:67:48:f8:a3:30:42:60:8c:
         1d:50:37:eb:24:35:23:bf:a0:9c:01:13:ce:60:5a:bf:e6:27:
         09:9a:6c:90:f7:d5:a2:c5:be:cc:52:1a:1d:e7:4a:1f:36:49:
         3f:aa:76:4d:34:6d:3c:61:83:30:5b:fa:ba:6a:33:6a:11:d4:
         e1:77:34:39:ad:2d:c1:66:59:ff:9a:79:29:0d:af:aa:79:a5:
         0c:a1:59:9f:df:ca:f5:2c:c8:f7:36:d4:38:c2:27:70:c1:ba:
         53:00:8e:a9:12:56:fa:63:9f:8b:46:51:c9:a7:67:0d:96:2d:
         d8:45:13:b6:41:31:a9:10:49:48:9a:bd:8a:38:2e:96:eb:7c:
         cc:5c:7f:ff:95:6e:10:9e:4a:5e:9c:28:ee:e3:65:e4:42:8e:
         4b:b4:7b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:32 2025 by rpki-client