Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
File:                     gsbbjg23mzF0_umfxqYFz1bfvck.mft (raw, json)
Hash identifier:          fML4XmGbB6hHxySBHH6ulE+/LoKfkzbzvOlcVZkQmtY=
Subject key identifier:   67:DD:2A:AC:92:0A:3E:66:8C:58:9F:E2:ED:D9:B9:C7:D3:72:D7:E6
Authority key identifier: 82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9
Certificate issuer:       /CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9
Certificate serial:       0198D65F360EC9057B7888B9611B1DF2E234
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
Manifest number:          07BD
Signing time:             Sat 23 Aug 2025 10:00:20 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:20 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:20 +0000
Files and hashes:         1: gsbbjg23mzF0_umfxqYFz1bfvck.crl (hash: CC2/eoTf+kXWByWRVrseZkCS7627huWpQbHisEwrDI0=)
                          2: x6jSUPrNwCyjzV69rEteWUbA8bw.roa (hash: 1zp500CT5AdJ87LI8ByrofonFUUOcrdgDO051AN4e6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:36:0e:c9:05:7b:78:88:b9:61:1b:1d:f2:e2:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9
        Validity
            Not Before: Aug 23 10:00:20 2025 GMT
            Not After : Aug 24 10:00:20 2025 GMT
        Subject: CN=67dd2aac920a3e668c589fe2edd9b9c7d372d7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:30:33:71:5c:d2:5d:cb:f8:9c:52:e3:29:fe:
                    1d:51:d5:09:72:76:b6:90:cb:ee:fe:b5:0f:82:0e:
                    f2:12:38:7a:4a:c4:60:77:e3:86:b9:47:07:20:48:
                    e7:82:bd:85:d5:a2:66:06:65:44:07:4f:e4:55:fa:
                    b3:8a:68:e4:61:27:8a:68:61:b6:04:c6:66:23:95:
                    de:4d:26:05:6a:1e:4d:cd:89:ca:3c:8f:03:6c:64:
                    7e:7c:e4:eb:b4:9b:39:b5:1d:34:9d:0e:ac:6a:26:
                    22:ae:ae:5e:1b:b6:85:6a:60:b9:19:41:77:08:fe:
                    98:22:a2:4d:50:d0:3f:54:5a:35:e1:e2:ef:f8:4b:
                    90:ee:57:e8:5a:82:dc:17:6c:2a:9c:c5:89:24:65:
                    64:e1:02:31:70:08:e4:06:5f:b8:ac:b5:e4:32:f5:
                    8e:90:2d:14:3b:d7:3a:b6:10:2a:fa:f6:44:c1:eb:
                    3d:43:10:6b:b8:61:8b:c8:a7:b3:79:e5:56:9b:d0:
                    6b:03:de:5f:b8:91:aa:24:8c:7b:81:b4:db:7b:52:
                    dd:3c:6f:15:93:cf:f6:d1:c1:ec:5d:2f:b6:76:d0:
                    74:a2:bc:38:37:de:3d:88:4e:75:f4:51:cc:dc:94:
                    bc:3b:11:c8:13:8e:6f:6d:85:5c:b1:e8:31:99:3b:
                    7e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DD:2A:AC:92:0A:3E:66:8C:58:9F:E2:ED:D9:B9:C7:D3:72:D7:E6
            X509v3 Authority Key Identifier:
                keyid:82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:8d:99:4f:bd:ce:b3:6c:a8:37:3a:1e:6d:e0:71:38:15:47:
         92:fe:c7:07:c1:28:92:19:8c:30:95:33:a4:c4:a1:d4:0a:36:
         e3:b5:84:61:a2:64:fa:f9:1e:9a:eb:06:c5:f9:b1:2b:06:f4:
         47:c1:4e:38:74:02:48:1c:9b:48:40:30:e0:42:f7:03:73:2a:
         58:4f:a6:46:e3:b0:2f:92:55:93:ae:59:29:9b:22:9d:d6:ea:
         3b:57:cb:17:48:ba:9a:92:ef:0b:64:9b:48:bf:c7:4f:23:c8:
         2d:13:a4:6b:e2:27:04:bf:e0:15:19:92:22:2a:2b:a3:ec:b5:
         fd:65:67:e4:8e:3f:f6:72:41:fe:18:9b:72:3b:fc:0a:8e:28:
         82:95:a3:3f:c4:5a:86:61:e8:6f:53:c7:f7:cc:c8:e5:0c:f2:
         32:ae:e0:28:56:5f:e8:32:2f:b2:a5:45:e9:e9:d1:58:f9:66:
         75:c6:bb:02:c9:c5:5a:a7:17:eb:b7:21:e5:83:be:2b:0d:9d:
         7a:e7:cf:42:7d:f6:af:62:e8:35:42:dc:c8:a4:7c:19:a2:41:
         5a:96:f1:63:8b:ca:95:5e:42:29:88:5e:fc:df:51:01:f0:23:
         02:2a:74:c0:39:0b:6a:2e:9e:e9:48:a9:93:5e:36:09:35:29:
         9d:23:88:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:34 2025 by rpki-client