Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
File:                     gDCVaDspR93Unu6sDb2eqVSuoUQ.mft (raw, json)
Hash identifier:          Dxvj7sy7JMMvNddqLgbc62CePHCy3M0S/t1kNlVxR7I=
Subject key identifier:   28:C3:9B:99:45:BC:AB:E2:1F:20:79:02:91:B5:C8:43:6C:E3:68:C0
Authority key identifier: 80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44
Certificate issuer:       /CN=803095683b2947ddd49eeeac0dbd9ea954aea144
Certificate serial:       01987E6673CA5806CFDA6B5904E4B61D6933
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
Manifest number:          0532
Signing time:             Wed 06 Aug 2025 08:01:40 +0000
Manifest this update:     Wed 06 Aug 2025 08:01:40 +0000
Manifest next update:     Thu 07 Aug 2025 08:01:40 +0000
Files and hashes:         1: W5iuUvjQHKES7b_m2-IC5Q7IB04.roa (hash: usyzAXKt0ilcyhdvyj8HiQdu4iL1ydlMcUp3wQXJixw=)
                          2: gDCVaDspR93Unu6sDb2eqVSuoUQ.crl (hash: mwdQFYLqkOTuTg9PPhkDnZDq6g0Z5+HZKfUZMIlWWOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:66:73:ca:58:06:cf:da:6b:59:04:e4:b6:1d:69:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=803095683b2947ddd49eeeac0dbd9ea954aea144
        Validity
            Not Before: Aug  6 08:01:40 2025 GMT
            Not After : Aug  7 08:01:40 2025 GMT
        Subject: CN=28c39b9945bcabe21f20790291b5c8436ce368c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:44:25:b0:9d:76:bc:69:6a:b6:f4:45:0d:15:
                    3d:5d:50:e0:e9:ac:f6:86:53:81:ab:d7:bc:6c:ed:
                    c1:86:60:e7:87:60:ab:54:30:b4:a2:0f:42:52:46:
                    c9:af:16:d3:e4:2f:04:0c:a1:8d:66:3a:f2:3a:7e:
                    f5:de:1b:80:c2:7c:c7:9c:42:c1:23:85:d6:53:05:
                    f5:e6:13:6e:35:54:45:8b:2e:73:26:9d:82:21:67:
                    76:b6:f2:aa:7c:da:87:b6:6d:14:a8:e6:7f:c9:70:
                    64:5b:72:df:69:3e:4e:4b:de:7e:c1:3d:94:9b:0e:
                    9d:09:e7:42:b6:55:12:93:37:9d:63:ec:11:a7:37:
                    23:bb:e9:28:b3:89:52:16:68:bb:1d:eb:92:41:6b:
                    a1:3b:11:9c:65:0f:00:a6:85:59:b9:f0:b5:8a:39:
                    c1:63:ef:67:06:7e:e2:cc:90:eb:a4:96:22:23:72:
                    35:5d:f4:01:68:fe:ea:ad:39:95:a8:3c:04:ec:f4:
                    fd:8b:74:d8:5f:8e:a1:84:d9:18:2c:65:c7:44:46:
                    f9:cb:a8:97:48:09:08:2d:59:47:34:10:6f:bd:57:
                    ad:ea:14:55:3c:33:9d:11:3e:f5:ea:83:c6:b5:22:
                    ad:15:59:fe:54:7c:e2:58:30:23:d0:f8:e0:b7:42:
                    c5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C3:9B:99:45:BC:AB:E2:1F:20:79:02:91:B5:C8:43:6C:E3:68:C0
            X509v3 Authority Key Identifier:
                keyid:80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ae:54:33:da:0a:32:23:88:f4:7a:ba:7f:32:5e:6a:e1:10:
         49:9b:28:b3:05:a1:a7:2d:b8:98:13:b0:e0:23:a8:b8:59:1b:
         91:bc:13:00:ed:57:d7:34:2f:5f:a0:a7:e7:8e:46:a0:57:05:
         88:f2:2d:09:46:d9:8b:b6:34:a8:f9:07:69:78:3a:43:04:4a:
         c9:ce:3f:12:18:aa:5f:99:38:29:9a:77:89:a0:ae:34:8c:db:
         9b:51:4f:d0:82:64:5a:06:a0:10:b1:ca:b6:ea:c0:2d:ac:61:
         cf:21:4e:5b:a0:0e:f8:1b:f4:c8:f4:b3:06:ef:e2:f8:3f:4c:
         22:e8:1e:8a:39:72:cc:83:d4:dd:3f:ef:ca:59:d7:68:08:83:
         85:37:de:7e:36:c5:51:3e:50:b1:83:99:f5:97:dc:a3:ca:07:
         ae:e8:29:52:dc:59:a6:01:3e:bf:a1:39:73:85:63:30:5f:0a:
         dc:1c:77:a3:3b:99:59:09:99:e9:fe:6a:be:19:49:74:58:24:
         5a:0a:1e:a1:2d:94:1c:32:2d:d1:8b:b5:b5:ce:dd:dc:b0:f7:
         ac:f5:13:74:f2:bd:7f:ba:d0:23:e9:22:de:05:0e:e2:39:06:
         d3:f1:ef:9b:26:65:5e:6a:f9:82:0e:75:1b:ae:33:29:1b:31:
         94:f7:6b:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+ZnPKWAbP2mtZBOS2HWkzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMzA5NTY4M2IyOTQ3ZGRkNDllZWVhYzBkYmQ5ZWE5NTRh
ZWExNDQwHhcNMjUwODA2MDgwMTQwWhcNMjUwODA3MDgwMTQwWjAzMTEwLwYDVQQD
EygyOGMzOWI5OTQ1YmNhYmUyMWYyMDc5MDI5MWI1Yzg0MzZjZTM2OGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUQlsJ12vGlqtvRFDRU9XVDg6az2
hlOBq9e8bO3BhmDnh2CrVDC0og9CUkbJrxbT5C8EDKGNZjryOn713huAwnzHnELB
I4XWUwX15hNuNVRFiy5zJp2CIWd2tvKqfNqHtm0UqOZ/yXBkW3LfaT5OS95+wT2U
mw6dCedCtlUSkzedY+wRpzcju+kos4lSFmi7HeuSQWuhOxGcZQ8ApoVZufC1ijnB
Y+9nBn7izJDrpJYiI3I1XfQBaP7qrTmVqDwE7PT9i3TYX46hhNkYLGXHREb5y6iX
SAkILVlHNBBvvVet6hRVPDOdET716oPGtSKtFVn+VHziWDAj0Pjgt0LFhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjDm5lFvKviHyB5ApG1yENs42jAMB8GA1UdIwQY
MBaAFIAwlWg7KUfd1J7urA29nqlUrqFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0RDVmFEc3BSOTNVbnU2c0RiMmVxVlN1b1VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zOTkyNjktNWUxNC00ZDVlLWExYmMt
NmJkZDM0NzhkMTBjLzEvZ0RDVmFEc3BSOTNVbnU2c0RiMmVxVlN1b1VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8zOTkyNjktNWUxNC00ZDVlLWExYmMtNmJkZDM0NzhkMTBj
LzEvZ0RDVmFEc3BSOTNVbnU2c0RiMmVxVlN1b1VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIq5UM9oK
MiOI9Hq6fzJeauEQSZsoswWhpy24mBOw4COouFkbkbwTAO1X1zQvX6Cn545GoFcF
iPItCUbZi7Y0qPkHaXg6QwRKyc4/EhiqX5k4KZp3iaCuNIzbm1FP0IJkWgagELHK
turALaxhzyFOW6AO+Bv0yPSzBu/i+D9MIugeijlyzIPU3T/vylnXaAiDhTfefjbF
UT5QsYOZ9Zfco8oHrugpUtxZpgE+v6E5c4VjMF8K3Bx3ozuZWQmZ6f5qvhlJdFgk
WgoeoS2UHDIt0Yu1tc7d3LD3rPUTdPK9f7rQI+ki3gUO4jkG0/HvmyZlXmr5gg51
G64zKRsxlPdryA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:13:42 2025 by rpki-client