Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
File:                     GB5NYIFS_CRK__ui3HK4UbGbJSc.mft (raw, json)
Hash identifier:          +LDT8gKXTQCOOOzr5sc29TOVsh7qRKJa6uSXmMNNE0k=
Subject key identifier:   27:12:71:11:CF:91:99:31:FF:9F:9F:2E:4D:50:21:82:C2:EF:5D:38
Authority key identifier: 18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27
Certificate issuer:       /CN=181e4d608152fc244afffba2dc72b851b19b2527
Certificate serial:       0199FDDA4AA1A45E0E0E680A92199C0D534E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 19:02:45 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:45 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:45 +0000
Files and hashes:         1: 3SDO9hGSLXcvKio5nucfHtpBZqo.roa (hash: UySF852N3LzIIXg+WlqkSuDwnOKj/L9pAk/WjttqTkE=)
                          2: GB5NYIFS_CRK__ui3HK4UbGbJSc.crl (hash: w59MpAIEofx65vlzM1f+cNx0Srr4C7w26mUWtVxgD58=)
                          3: QYv8HyZwcR2EgwyDNXO4DNm4alY.roa (hash: 4y8aidT7cf46oC9Rb8MtLIG+06WpyEeua6nqGV7vmw0=)
                          4: t3Zx6p1wvn7jY8kHjzfJnnc7eNg.roa (hash: OLIfG4z0xwuSo4+uWrBPz+WPutgwTrYoDXIoHunSp5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:da:4a:a1:a4:5e:0e:0e:68:0a:92:19:9c:0d:53:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=181e4d608152fc244afffba2dc72b851b19b2527
        Validity
            Not Before: Oct 19 19:02:45 2025 GMT
            Not After : Oct 20 19:02:45 2025 GMT
        Subject: CN=27127111cf919931ff9f9f2e4d502182c2ef5d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:78:06:1f:ff:54:b9:2f:88:16:ab:22:92:69:
                    a2:6f:b9:89:9a:59:7e:cd:f9:d1:6d:d4:61:6b:e1:
                    e5:df:08:e8:32:54:b0:72:43:58:ae:f4:32:08:7b:
                    4c:47:07:bd:94:23:fb:ee:e4:35:e4:3a:68:c4:6e:
                    39:bf:ec:cc:e3:bc:48:c2:d5:42:80:f1:fc:33:61:
                    36:02:be:02:cb:87:0d:16:f5:e3:ea:17:fa:51:17:
                    d0:6e:5a:f5:09:9d:47:14:69:4d:9e:03:0f:96:f8:
                    e0:53:e3:ca:bd:dd:9c:f8:a7:75:c9:3b:cc:65:1d:
                    3f:93:33:c0:2c:cf:6f:a3:41:84:1d:0c:5c:de:c3:
                    4a:4e:43:57:d7:e7:ec:43:ad:44:c6:ab:14:0a:4b:
                    7e:1c:1b:d2:45:e2:a5:b9:23:4e:df:e8:ed:8e:a9:
                    b4:5c:fe:5f:bc:26:8d:4e:e2:c2:a7:1b:4d:40:45:
                    43:37:9e:2a:ef:49:21:e0:cd:76:59:ac:6f:97:67:
                    47:c2:bd:c0:6d:e3:48:22:fe:6b:6c:aa:c3:85:d7:
                    87:65:49:fe:9d:2d:09:ec:20:aa:2f:a8:a0:a8:b5:
                    e4:68:68:7d:a4:4e:8c:80:bd:ab:5e:3c:f2:b6:e5:
                    70:83:10:59:41:5c:20:1f:74:97:ef:7f:52:ec:9d:
                    8f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:12:71:11:CF:91:99:31:FF:9F:9F:2E:4D:50:21:82:C2:EF:5D:38
            X509v3 Authority Key Identifier:
                keyid:18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:aa:f9:d7:d9:27:15:f6:c9:d4:2c:80:ad:51:2d:30:6c:8c:
         30:dd:8e:4c:e4:5c:aa:3f:bd:d8:93:bf:81:54:d2:e5:40:79:
         1d:81:0c:17:cb:37:a3:f0:ad:f2:a2:78:79:b3:a6:f9:8d:7e:
         a7:d3:cf:70:e2:82:8e:a8:dd:0e:c9:9b:01:52:9a:3d:15:5f:
         9e:d7:4e:02:5a:2c:af:5b:6f:66:6d:6d:62:9f:23:84:5f:54:
         78:e7:71:b6:18:1d:b7:5e:64:32:2e:f6:10:bb:4b:ff:8b:87:
         1b:2c:a0:e3:d9:3c:f8:81:2f:48:27:7c:37:5a:b2:a1:e8:bd:
         95:08:ab:93:e8:fd:a9:75:8e:72:34:0d:b9:61:92:3e:0d:6a:
         73:20:45:50:5f:a4:ed:84:82:51:a7:ee:23:b2:92:92:e5:ee:
         c3:02:9b:f2:97:f2:0b:0d:cf:31:20:f4:97:32:ef:62:7a:59:
         43:a0:c4:98:4f:0d:35:d6:71:4c:47:77:ce:ac:45:d9:0a:8c:
         c8:d1:b3:d4:aa:19:c8:bc:8f:08:bd:7b:63:43:f6:d1:11:e5:
         b2:ea:f2:8b:9d:0c:3a:fb:e4:fc:9e:86:bd:d2:df:12:79:fb:
         36:3d:c3:17:83:c6:ab:27:6b:d1:b8:e8:ef:03:0d:04:7d:3b:
         82:ee:be:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:21:04 2025 by rpki-client