Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
File:                     gnMxRuPp1uEVRjF_dSGeogLF-S0.mft (raw, json)
Hash identifier:          qLlbsRvbdtk/nuiFytbh5d8ceLqD1sGmXv65wR2FWnQ=
Subject key identifier:   6D:12:C1:00:05:93:F8:26:66:C1:D0:FB:58:53:E2:1C:0A:97:E3:2D
Authority key identifier: 82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D
Certificate issuer:       /CN=82733146e3e9d6e11546317f75219ea202c5f92d
Certificate serial:       019A51BEDDD76C50959DE88B1A7F2AC4144E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
Manifest number:          06BA
Signing time:             Wed 05 Nov 2025 02:00:54 +0000
Manifest this update:     Wed 05 Nov 2025 02:00:54 +0000
Manifest next update:     Thu 06 Nov 2025 02:00:54 +0000
Files and hashes:         1: Ui37pni8yZO_R93Vyy6g6ty1CZs.roa (hash: KVFAYIQrtJyTceCsFbCiblO1P3leUs2Y5nLFzfChjkg=)
                          2: gnMxRuPp1uEVRjF_dSGeogLF-S0.crl (hash: edh+2NgtHd7tOYo31Xuyt8caFZNorqsYJGniQ8rbYlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:be:dd:d7:6c:50:95:9d:e8:8b:1a:7f:2a:c4:14:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82733146e3e9d6e11546317f75219ea202c5f92d
        Validity
            Not Before: Nov  5 02:00:54 2025 GMT
            Not After : Nov  6 02:00:54 2025 GMT
        Subject: CN=6d12c1000593f82666c1d0fb5853e21c0a97e32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:50:c4:b2:d1:09:1d:ad:d6:89:25:db:c8:7b:
                    82:72:4c:2f:9a:5e:fb:80:1b:00:f8:db:84:7e:8c:
                    d8:ff:49:6d:a6:b0:78:1c:dd:21:e5:66:00:18:2d:
                    66:57:9d:a6:f3:5c:a7:aa:08:66:0b:08:85:f3:8d:
                    30:14:0e:e2:60:f2:2a:46:9e:12:b4:d5:3e:60:cd:
                    ca:5b:9a:34:1b:3b:77:c5:52:78:67:21:d4:be:a5:
                    b9:f6:78:c7:db:c8:14:8b:d6:15:5a:77:62:43:ca:
                    09:50:b1:0d:f4:ef:8e:95:90:5d:21:4f:f6:ef:8b:
                    48:b8:7f:67:e7:91:e9:b0:91:17:ea:74:d2:13:62:
                    67:6a:17:4d:4f:5a:a0:17:57:12:70:50:3e:2b:ef:
                    f4:37:21:5b:29:e5:5d:8a:0e:3f:da:0b:36:9c:01:
                    26:88:d8:c0:f9:f7:e7:6f:e0:aa:a9:f0:f8:94:cf:
                    3a:af:b0:83:7e:16:a0:8d:22:58:ad:4c:79:70:8b:
                    3c:d9:5a:ce:25:b3:81:6a:29:9d:14:52:dc:32:62:
                    65:50:16:92:f8:20:3b:56:c4:3c:23:69:bc:8f:c2:
                    a8:2c:e0:0f:25:ff:d9:a9:f0:09:5d:d7:06:f3:02:
                    c1:6d:75:aa:41:cc:6e:59:02:94:c0:a9:ea:83:20:
                    29:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:12:C1:00:05:93:F8:26:66:C1:D0:FB:58:53:E2:1C:0A:97:E3:2D
            X509v3 Authority Key Identifier:
                keyid:82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:3f:0b:7e:62:6c:d7:8e:bc:c5:c2:ae:0c:36:a3:64:d3:05:
         4a:d5:ba:c8:ce:a0:9b:33:d8:48:ca:30:71:17:04:61:fd:c3:
         cf:7f:1d:28:3c:57:c5:28:15:ac:3a:b1:fa:ca:fc:84:bb:c2:
         c1:d6:f3:81:21:51:8b:69:a1:77:f8:a3:3e:b9:c9:60:c8:b1:
         64:13:45:d9:50:e8:93:c0:75:69:d3:78:ba:37:bd:ee:8b:af:
         d3:36:e2:5f:bd:67:fc:66:9b:27:06:9c:2e:5c:dd:b8:61:aa:
         ba:2a:93:1b:13:94:c5:08:48:17:ce:05:6e:37:aa:cc:f8:7c:
         24:06:cf:01:f2:97:d8:c7:1e:fa:d3:8f:c9:fd:c5:96:14:00:
         77:e3:56:f4:e6:24:01:d3:46:5d:92:db:a7:a2:da:58:8b:10:
         ef:c5:68:ce:30:eb:43:b3:1f:6f:19:75:2b:7a:f6:d4:08:ed:
         93:c3:2f:20:b5:e8:37:3e:b7:b7:dc:6a:8f:54:32:24:a9:8e:
         79:80:31:66:9f:db:32:38:38:5c:a2:da:71:e8:4a:78:dc:ac:
         84:71:a1:42:bb:6a:4a:2c:da:14:18:9c:20:b9:12:ef:79:2e:
         18:20:a7:4e:a3:ff:9f:17:c0:78:a9:bb:24:38:61:e6:44:2c:
         93:06:6e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:26:50 2025 by rpki-client