Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.mft
File:                     gqQWGsq_ZtQl7YeMXalqfVyz_-Q.mft (raw, json)
Hash identifier:          6YyCWq0fjhsrUoeMUwajU8MmIUkH+YJrq5FwY2dD0lM=
Subject key identifier:   E9:4D:1C:C0:AB:98:E1:0C:5A:B1:F1:CC:69:44:20:DA:F2:41:87:41
Authority key identifier: 82:A4:16:1A:CA:BF:66:D4:25:ED:87:8C:5D:A9:6A:7D:5C:B3:FF:E4
Certificate issuer:       /CN=82a4161acabf66d425ed878c5da96a7d5cb3ffe4
Certificate serial:       019892C91886E364B6A402E418A982600A54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.mft
Manifest number:          1625
Signing time:             Sun 10 Aug 2025 07:01:49 +0000
Manifest this update:     Sun 10 Aug 2025 07:01:49 +0000
Manifest next update:     Mon 11 Aug 2025 07:01:49 +0000
Files and hashes:         1: gqQWGsq_ZtQl7YeMXalqfVyz_-Q.crl (hash: y4CoKvcUr6UI/QudY5jtRuArMjac2xpa7AGfWLOpZSQ=)
                          2: r4535rejwLyNlch_9-1WL9yyNgI.roa (hash: HlBTwouJ/vT3vPrKECrX417tf3S6s+K4qcEjU3ZHOug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 07:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:c9:18:86:e3:64:b6:a4:02:e4:18:a9:82:60:0a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a4161acabf66d425ed878c5da96a7d5cb3ffe4
        Validity
            Not Before: Aug 10 07:01:49 2025 GMT
            Not After : Aug 11 07:01:49 2025 GMT
        Subject: CN=e94d1cc0ab98e10c5ab1f1cc694420daf2418741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:45:48:7a:d3:54:92:96:5e:2a:dd:19:71:60:
                    9e:53:db:7e:10:b9:49:f9:65:81:e5:e5:64:c9:26:
                    dd:a5:a6:8a:8f:0f:ba:b7:57:22:98:1c:5e:94:a7:
                    e1:f7:56:ed:e1:33:f0:83:15:7c:f6:9f:39:27:2d:
                    92:c5:24:a3:e1:c9:bf:9a:ec:04:eb:b0:db:79:c7:
                    9d:4f:02:6e:95:0c:07:17:ad:99:15:59:82:72:ba:
                    1d:25:d1:06:78:9e:c0:a0:82:27:b5:cd:7a:cc:ec:
                    0e:ad:8d:67:d4:1e:ca:5e:d3:40:3f:95:32:06:a7:
                    c6:6c:e3:c1:55:84:44:9c:90:b5:c6:08:24:a0:a8:
                    9f:ee:95:77:07:2a:83:86:31:29:72:58:63:54:63:
                    c1:cc:b9:25:aa:f2:06:6d:5b:dd:60:23:d9:16:4c:
                    bc:c6:d7:d7:86:df:48:34:c6:7a:49:75:6a:fd:9c:
                    3d:62:9e:4a:4a:59:a4:ef:48:25:03:c2:84:0d:51:
                    b5:5c:10:48:47:f9:99:92:8e:ce:25:c7:62:dc:e5:
                    07:a9:7e:f6:35:b2:3b:c2:b8:99:2f:0f:88:7d:ee:
                    03:69:b1:bf:24:40:31:ff:28:98:f9:6a:0b:a6:3c:
                    dd:fa:ae:bf:68:a4:d8:44:21:77:b4:1f:7d:51:d4:
                    4c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4D:1C:C0:AB:98:E1:0C:5A:B1:F1:CC:69:44:20:DA:F2:41:87:41
            X509v3 Authority Key Identifier:
                keyid:82:A4:16:1A:CA:BF:66:D4:25:ED:87:8C:5D:A9:6A:7D:5C:B3:FF:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ed:b7:9f:11:09:b8:7c:59:e5:7f:37:c5:83:ca:af:36:52:
         54:57:99:a2:02:1f:5d:3a:aa:50:9b:61:5e:4f:97:86:a3:9d:
         5e:52:fb:a8:ca:f6:33:76:73:6d:c7:4f:34:e0:f0:1e:f2:40:
         4f:5a:98:ec:dc:41:c5:c4:2c:84:d9:f0:b9:b9:cc:9c:c0:79:
         f8:52:90:2f:20:48:26:b0:eb:a2:97:72:3c:2b:ab:e5:69:a6:
         6f:41:ed:2f:09:a8:33:05:23:92:85:10:db:8e:c0:96:94:77:
         65:d4:54:e5:7f:20:ca:0a:5e:28:ca:39:c0:fd:1a:d3:ef:f5:
         5a:1a:28:30:c3:5d:e1:21:46:d5:95:c5:74:2d:f3:0c:50:3e:
         57:39:4d:78:53:73:0b:7a:47:e6:76:68:a7:8e:53:71:3d:56:
         b0:ca:e0:71:d5:76:95:83:b2:27:76:8c:7e:c4:de:34:a9:f0:
         95:87:63:33:3f:73:f6:41:1f:66:72:89:7f:fa:6f:1a:6f:88:
         9d:fc:82:cf:08:2d:46:50:ee:44:44:fc:1e:4c:6c:c3:8e:e5:
         43:7c:e9:d9:82:05:b5:3f:e7:b5:90:51:08:3b:e1:f6:a5:9d:
         e0:ac:04:5d:1f:80:b1:1d:f0:1d:b8:84:3d:7b:b1:53:e9:43:
         71:40:fd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:56:19 2025 by rpki-client