Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
File:                     GftWrckHHV6f2itmlDi5K_hj5Y8.mft (raw, json)
Hash identifier:          UkXT+IVFpNx5Giv1nMd+D8SNwk93M3kapdSvcfO8vo8=
Subject key identifier:   27:36:10:27:A6:80:BB:C0:38:E0:0E:F2:E0:24:10:97:AD:9D:D0:9D
Authority key identifier: 19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
Certificate issuer:       /CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Certificate serial:       0197B5C4BD727994D973751F1EE9B4CDE857
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
Manifest number:          10CB
Signing time:             Sat 28 Jun 2025 09:00:58 +0000
Manifest this update:     Sat 28 Jun 2025 09:00:58 +0000
Manifest next update:     Sun 29 Jun 2025 09:00:58 +0000
Files and hashes:         1: 97TEoE2zAQxZI3sREml1jxvx638.roa (hash: 88Edm2WqicmrATpjZjEgq8BI+OITrMBwRffegS2fN0U=)
                          2: GftWrckHHV6f2itmlDi5K_hj5Y8.crl (hash: t5LSo6pcAWYlcC8VPqBK8iuLtqyDmNPlcZw7CkoWhw0=)
                          3: q9SsxYbRIp9e4XDgj9J3VkZ0CgM.roa (hash: vHSPBUTKHvDa0CMaWz0/b1NLlD2hxXAs+Bnl2Vh/Iqc=)
                          4: ssy_2Rdm-NB6qlZB6S5XdjkNovk.roa (hash: M4nmdu5lLDUg1zn32w5JxWA1YF5KBgjR54KBKiRLUIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:c4:bd:72:79:94:d9:73:75:1f:1e:e9:b4:cd:e8:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
        Validity
            Not Before: Jun 28 09:00:58 2025 GMT
            Not After : Jun 29 09:00:58 2025 GMT
        Subject: CN=27361027a680bbc038e00ef2e0241097ad9dd09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3d:bf:ca:92:9f:1f:7c:7b:a2:40:fb:8d:89:
                    54:6c:79:00:c8:49:f8:3b:a4:4d:3c:f2:04:18:38:
                    65:29:0e:ee:3b:12:ab:7a:ac:ac:48:ba:e1:2e:31:
                    ee:2c:bf:8d:08:02:7c:ea:73:ef:d9:9c:66:dc:d0:
                    68:ff:a3:86:6a:fe:81:53:5d:45:ff:f7:e1:fb:82:
                    48:26:35:65:1d:13:af:c5:8c:b1:25:29:a0:d7:c3:
                    03:12:21:52:b3:e3:7d:9f:0f:73:8b:da:04:f7:e2:
                    cb:69:7c:8f:a4:c4:45:77:3d:d7:a7:25:db:52:1f:
                    d7:65:ff:8f:22:5e:48:d7:cd:b0:10:95:ed:7c:60:
                    a8:4c:e3:b8:a5:9c:d6:36:7c:fc:7d:1c:4d:11:e8:
                    9a:eb:06:d6:4a:d9:a3:55:6a:be:cd:9f:02:7b:c8:
                    b5:da:8a:68:6c:ff:0a:50:ea:ef:27:a9:eb:97:51:
                    78:14:68:4a:39:07:c4:e4:59:ec:46:5f:13:06:27:
                    61:fa:6f:b0:30:0c:f0:ff:37:a9:0c:ed:40:75:ba:
                    fd:92:5a:3a:59:8f:e0:db:42:06:a9:ee:3c:ec:f3:
                    ac:b1:f1:13:05:5e:bf:18:37:36:1e:5a:18:52:7b:
                    66:d4:97:62:2c:7b:25:1c:52:a2:df:db:90:20:72:
                    db:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:36:10:27:A6:80:BB:C0:38:E0:0E:F2:E0:24:10:97:AD:9D:D0:9D
            X509v3 Authority Key Identifier:
                keyid:19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:3f:1b:c8:3b:ad:17:a1:18:31:02:e0:5a:b7:59:59:da:8b:
         5a:ae:2f:70:17:eb:16:56:fd:0f:82:1b:19:ac:ea:22:6a:13:
         cb:b2:34:a1:e5:09:fa:46:46:a0:ce:f2:e8:ef:78:9d:c6:62:
         3e:3c:3f:30:73:5f:ac:40:9f:17:e6:aa:00:ec:4d:90:bb:42:
         7d:0e:46:78:e7:20:21:82:2f:21:a2:4e:97:8a:f7:59:7d:92:
         c9:b4:57:21:cf:fa:a0:3c:16:b9:5f:3a:71:96:66:d2:fc:d8:
         35:f0:f2:9e:cf:42:64:03:f8:17:05:31:fe:f9:bb:1c:52:26:
         37:25:7c:26:ff:59:3a:d5:f2:12:98:67:37:ba:fe:8a:09:fb:
         c6:e7:5d:05:c5:8b:31:5c:bc:ab:fb:57:77:c4:8a:71:1d:3b:
         34:69:1e:be:0f:60:68:33:22:5a:33:0e:ff:9b:77:9e:0b:9f:
         a1:58:a7:8b:cb:29:c2:f7:e9:a7:3b:12:07:d0:f8:fb:43:97:
         42:55:28:b7:40:e0:77:02:b2:97:70:93:9c:4e:f8:95:5d:f9:
         9d:86:01:82:7b:8f:ce:07:43:24:2c:07:8e:97:a8:31:b0:3b:
         24:41:2c:e4:47:ed:f2:da:64:30:87:af:c0:b6:0f:fb:1f:a0:
         6d:e5:11:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:08 2025 by rpki-client