Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
File:                     gMez3pa5HtxunIXZ1aZoQZIDtfU.mft (raw, json)
Hash identifier:          SEumouBGLV2o26OC9/G3Tk2GA0H5XDjeJkOxp5AdONs=
Subject key identifier:   C3:B3:E6:C6:CF:FE:56:00:DF:32:55:CE:36:C1:45:A7:38:A2:53:E5
Authority key identifier: 80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5
Certificate issuer:       /CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
Certificate serial:       019A50E39D0B1A9F1CC3474C968C0DFD25D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
Manifest number:          04E9
Signing time:             Tue 04 Nov 2025 22:01:25 +0000
Manifest this update:     Tue 04 Nov 2025 22:01:25 +0000
Manifest next update:     Wed 05 Nov 2025 22:01:25 +0000
Files and hashes:         1: gMez3pa5HtxunIXZ1aZoQZIDtfU.crl (hash: aEc16eZfQkAMH2Hdqjn8ooURAWmZ9Q0HYOp6Teed5zM=)
                          2: xVzCoBRTedY1vT9C7xN3NLO-WeY.roa (hash: ystLlP8JPbF13VOw8QCBVAQ5cldgA4v4fXVvBu8BWIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e3:9d:0b:1a:9f:1c:c3:47:4c:96:8c:0d:fd:25:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
        Validity
            Not Before: Nov  4 22:01:25 2025 GMT
            Not After : Nov  5 22:01:25 2025 GMT
        Subject: CN=c3b3e6c6cffe5600df3255ce36c145a738a253e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:01:13:53:7b:6d:f9:e2:57:b7:a8:69:0a:cc:
                    d5:91:2b:e5:a5:74:43:ff:ba:a9:8c:08:51:46:66:
                    78:19:a4:0a:4e:18:c5:f1:fd:17:38:d8:b6:ce:fd:
                    aa:c2:53:f2:c1:04:ed:d7:4e:a3:c1:47:26:6b:f1:
                    d8:81:4e:53:53:d1:0f:80:87:ca:b4:96:20:e0:0c:
                    74:91:74:6a:a2:0f:c6:6b:18:52:32:0b:da:ba:6f:
                    58:bc:2d:4c:72:cc:7f:e8:f0:fc:3b:cc:97:d7:97:
                    50:79:12:f1:67:1a:86:1c:33:ec:88:ea:78:3e:4d:
                    66:ae:3f:0f:1b:b6:e5:db:92:1f:d5:97:f3:3a:e2:
                    fc:1f:cd:cc:02:12:8d:f7:7d:c3:cf:13:39:5d:9d:
                    36:69:f5:aa:19:4a:3c:ff:bd:eb:db:6d:22:05:69:
                    a2:6f:6a:8f:0f:8d:29:82:3e:89:72:c3:45:99:51:
                    ee:2c:3a:c6:37:e1:78:52:5c:33:4e:07:fb:47:65:
                    ff:4b:3e:5e:94:c3:39:6e:49:1e:ab:46:89:46:e9:
                    7c:94:24:9a:69:c4:d8:b0:87:7c:c6:70:76:c4:b6:
                    8e:69:c4:aa:01:ce:df:01:d8:2f:45:9e:46:bb:19:
                    6d:86:e8:c9:26:c8:58:db:c1:bf:68:eb:1d:ef:88:
                    ed:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B3:E6:C6:CF:FE:56:00:DF:32:55:CE:36:C1:45:A7:38:A2:53:E5
            X509v3 Authority Key Identifier:
                keyid:80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:0f:bd:e7:bd:d3:e3:ea:4d:f6:5f:7d:78:56:4c:9f:50:45:
         94:94:64:91:d0:b1:7f:8a:52:e9:65:b7:8f:9d:c9:60:b8:c7:
         66:48:52:e8:b2:cd:c7:b0:b8:bf:4a:85:3c:3e:2a:43:e8:19:
         d5:19:c2:5e:a4:33:5f:51:37:b6:c4:ca:7a:01:98:a2:a3:f7:
         c8:96:34:18:e6:7b:9d:5b:98:7b:f8:f2:3b:b7:86:ae:95:01:
         3a:fa:e8:76:30:70:5d:17:b8:43:92:67:0f:c3:af:1e:72:ba:
         c3:c7:d3:da:e9:a9:3c:2b:df:9e:65:01:d5:4f:50:01:25:49:
         64:d7:c2:cc:b3:33:69:5e:99:82:f0:e0:6f:5a:a4:91:dd:87:
         86:41:c4:f6:27:5e:cf:1f:4c:b6:bf:c4:38:4e:75:64:27:6b:
         34:c8:53:51:a9:a1:2f:0f:e3:e0:eb:2f:26:e6:58:7d:0a:14:
         ec:40:c9:e0:4f:4a:26:6c:5d:98:7c:b5:aa:3e:a7:e5:67:74:
         b7:e5:9c:a0:dd:9b:c4:42:bd:60:46:9c:da:52:9a:85:f8:1e:
         0e:eb:52:b3:e6:c0:5f:98:e2:11:02:b5:30:50:3e:4c:0a:2a:
         00:ba:df:18:8d:33:fa:be:d1:38:42:05:da:19:41:80:57:96:
         f5:a7:37:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:52:33 2025 by rpki-client