Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
File:                     GRk80M-5OVmJNY4DljEs-7HIj_4.mft (raw, json)
Hash identifier:          fCiLfq3kjcgm/+CLGN4Fps5UUUKZiI6Wom7aimYVusk=
Subject key identifier:   F9:55:5F:AD:47:AA:9F:10:FA:BA:FF:D3:90:77:E8:A1:D0:40:18:62
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Certificate issuer:       /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial:       0196A91DAC2D237BEB5669F4E7A4883E5B2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
Manifest number:          1637
Signing time:             Wed 07 May 2025 05:00:16 +0000
Manifest this update:     Wed 07 May 2025 05:00:16 +0000
Manifest next update:     Thu 08 May 2025 05:00:16 +0000
Files and hashes:         1: 7pztvUDezwt3ZSHLohSTcy0jFYM.roa (hash: uP/w6/w3g1+AZjMv77F/dMcv4FObFdLOts1JHnWbc4w=)
                          2: GRk80M-5OVmJNY4DljEs-7HIj_4.crl (hash: RijSBOoi5o7jIMMNAuf9FMJXX1HennvbOwC+y1QUHd4=)
                          3: JOgCirCmqh8IwK9JRXmwBnch_N8.roa (hash: 3in2bzHpjZv9l1M8BDarQhfyY52u8NykvrfPHABgj8o=)
                          4: O2A95fKA1A2XI5zokqy2M5EQluY.roa (hash: l7DaeRNWKyhpILryPmDUINT37G9okCmuQyW2gonVmu8=)
                          5: __DG8yGKTfUA6389GGmGaK0u4Lk.roa (hash: u95HLPZpv4ehbrFFz+3buFaF1ssi8x25bu+46kL8kIU=)
                          6: yqhpAot3xi6epn6ENDWr8uOqyio.roa (hash: kICDDy+hxEl81swZp9LVJwlGqZNulN1S7VyaDfHwQvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:1d:ac:2d:23:7b:eb:56:69:f4:e7:a4:88:3e:5b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
        Validity
            Not Before: May  7 05:00:16 2025 GMT
            Not After : May  8 05:00:16 2025 GMT
        Subject: CN=f9555fad47aa9f10fabaffd39077e8a1d0401862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a4:1b:76:f7:79:18:0b:f3:57:38:74:3e:32:
                    d7:7a:e3:c0:e8:b4:20:65:10:44:39:35:2d:ec:cd:
                    b5:42:82:be:89:4d:0b:5e:78:75:ad:c8:24:e8:dd:
                    6e:89:5e:73:ee:2a:c7:2e:bb:58:d5:48:f5:07:dd:
                    e1:98:cd:68:db:0e:28:b0:31:39:df:de:68:e6:03:
                    ee:fb:08:9b:7a:14:02:a0:84:8b:ac:2c:1d:f0:52:
                    ca:21:0c:64:91:77:95:90:59:e8:c9:9a:02:07:19:
                    b2:f3:55:86:2f:fe:ae:94:6f:a9:18:22:52:35:11:
                    64:95:53:fa:5e:e9:33:cf:4f:2f:22:26:b5:92:45:
                    8b:c3:ef:be:af:56:3a:77:86:1c:3e:65:2c:b3:b7:
                    07:15:ad:81:4c:39:3a:d1:35:3a:36:a1:2d:21:30:
                    47:c7:c0:cc:12:2c:7b:ff:f2:3f:f0:49:93:0d:5c:
                    29:24:2a:8f:95:a7:18:55:40:b6:2b:66:b4:7f:b1:
                    aa:dc:28:66:a3:2b:a0:aa:bd:90:98:d8:89:7b:f8:
                    bf:be:b2:57:8a:5d:bd:2e:51:1c:d9:6f:08:9b:64:
                    1e:25:71:7f:1e:91:ec:5c:4b:d0:d9:43:32:f4:cb:
                    f9:f6:79:21:3b:35:c9:f2:d8:6e:b9:24:de:3f:4b:
                    b2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:55:5F:AD:47:AA:9F:10:FA:BA:FF:D3:90:77:E8:A1:D0:40:18:62
            X509v3 Authority Key Identifier:
                keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:1a:be:ae:fa:0f:38:74:23:45:c5:62:a3:94:e5:4a:5c:60:
         d1:35:13:dd:72:05:3f:32:8b:ad:9d:1c:a6:4d:76:0a:63:10:
         5d:b8:45:3f:bf:37:ca:08:3d:13:8e:82:56:77:e7:28:16:14:
         81:e1:a9:e7:c2:ca:ef:fa:fa:61:a0:41:c2:4b:32:9c:b1:ac:
         36:aa:46:a8:d6:07:66:22:90:f9:38:9a:c4:95:65:46:0a:7c:
         40:4e:07:50:e5:f6:80:83:ca:0e:96:6f:ec:b2:e3:31:98:b3:
         41:db:f3:fb:b5:08:13:f2:51:41:a8:96:7d:77:42:f0:6e:59:
         48:3f:27:62:7a:7c:8d:3e:a9:46:ae:a4:a6:23:8e:48:59:ac:
         5b:30:e9:da:12:5b:a3:a3:b5:ce:f9:13:81:c1:f5:27:06:88:
         2c:ed:dc:96:69:62:9f:df:43:91:cd:48:66:a8:41:1d:28:5b:
         e8:57:4e:d0:14:e0:7d:09:1b:48:2a:91:f1:21:69:4a:a9:7d:
         1e:36:2d:2c:4d:ff:2e:38:11:6d:33:1e:d2:6d:7e:dd:ac:94:
         1f:cd:14:4c:e1:8f:94:50:ce:38:0e:0a:cf:7e:0c:11:57:55:
         35:0a:f5:98:bd:fd:64:49:5d:81:da:ac:0e:e3:68:cc:36:5d:
         33:9e:99:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:01:23 2025 by rpki-client