Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
File:                     GVc7IITN9G7hzNKC36O49rfqcmw.mft (raw, json)
Hash identifier:          1Mk6EX+OQ2kHx614Ic+7QpV7XsafaioXtrmC8eukRvI=
Subject key identifier:   74:1A:2D:55:F0:C8:F0:F4:7B:0E:57:92:D4:62:84:00:A6:07:C7:13
Authority key identifier: 19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
Certificate issuer:       /CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
Certificate serial:       0198D515C6F31BA30BC926C816187F935C8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
Manifest number:          1388
Signing time:             Sat 23 Aug 2025 04:00:30 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:30 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:30 +0000
Files and hashes:         1: GVc7IITN9G7hzNKC36O49rfqcmw.crl (hash: 1kAQWKzfyR8GOymXGutCRZpv6urVeAuSFtWptEgib9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:c6:f3:1b:a3:0b:c9:26:c8:16:18:7f:93:5c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
        Validity
            Not Before: Aug 23 04:00:30 2025 GMT
            Not After : Aug 24 04:00:30 2025 GMT
        Subject: CN=741a2d55f0c8f0f47b0e5792d4628400a607c713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:de:df:1f:af:b0:93:2d:3d:6e:43:44:84:d3:
                    d2:6a:9c:86:cf:44:0c:8a:fb:e5:17:9a:eb:e0:83:
                    15:f4:83:7b:0e:89:25:93:6d:63:06:3a:c6:d9:31:
                    29:db:bf:e9:5d:5a:d1:2b:7b:dc:1e:ff:0f:f7:a0:
                    a2:69:c4:bd:18:46:11:d7:19:a8:12:39:f7:c4:a2:
                    cd:4a:92:21:f2:c0:5d:e4:7a:e4:ee:24:ce:d7:a7:
                    54:3a:ac:2e:6d:11:b4:3c:a0:ba:d0:b4:99:89:4b:
                    ad:32:bd:82:a0:ea:f8:cd:be:d1:24:11:4b:94:42:
                    98:f9:81:34:6a:61:06:df:78:32:59:1f:0b:df:3b:
                    85:e9:c0:b5:0b:62:af:f9:6a:e6:4b:08:4c:1f:08:
                    1a:4a:da:d8:d2:e0:b4:a5:48:de:6e:a8:9c:72:16:
                    ed:ac:98:bc:5a:77:18:96:be:e6:5a:13:5a:df:40:
                    b5:ce:73:e4:3b:e7:0b:00:e1:b8:df:15:14:49:a1:
                    fa:0e:1f:ba:9f:6c:d8:6b:5b:c9:e7:03:46:af:af:
                    5b:c9:45:fd:c7:03:ff:a7:4c:c1:44:30:dc:bc:45:
                    3a:80:03:91:35:6e:58:9f:45:04:4a:b0:2f:89:6e:
                    36:6a:69:8e:d2:84:e8:13:12:5b:e8:e2:1a:f4:21:
                    eb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1A:2D:55:F0:C8:F0:F4:7B:0E:57:92:D4:62:84:00:A6:07:C7:13
            X509v3 Authority Key Identifier:
                keyid:19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:bd:aa:5f:69:22:34:b7:21:3d:4c:e2:98:7e:7c:84:fd:4d:
         a4:90:1c:21:a9:4f:28:3b:75:ea:3a:12:d2:07:3b:69:be:fe:
         b8:af:c1:f7:8e:1e:49:28:ec:e4:c1:a5:10:ac:17:bf:23:da:
         be:b6:55:b0:6b:8a:ae:11:44:11:a2:0f:bc:12:52:76:6a:a0:
         77:05:39:eb:19:ab:0e:2e:13:3c:ac:fb:ae:ee:78:47:f1:51:
         ac:e0:fa:46:a7:da:b7:86:74:88:32:13:05:05:a1:86:63:f1:
         ad:ae:01:42:5e:5a:9c:33:6c:3e:a0:12:c5:99:6f:04:3c:ac:
         8f:f6:49:80:fb:a8:15:eb:d2:30:c8:57:cb:6a:12:d7:c6:31:
         e3:a3:79:a1:41:32:3d:ea:4e:bd:ab:e8:e2:66:8d:cb:af:c6:
         fd:31:5e:ce:ef:4c:02:b9:f5:20:5c:98:aa:06:6b:ac:c2:7f:
         1b:bd:b9:ee:20:ef:00:f1:4f:f8:b0:e5:79:e4:ac:64:26:c3:
         c1:50:15:4f:f6:ce:36:db:74:18:9e:53:36:fb:c2:cf:39:f8:
         55:96:68:cf:37:f5:85:c1:64:c9:18:ae:e8:71:aa:4d:80:9b:
         ec:95:f2:ea:98:f9:34:8d:02:51:9f:03:0c:fe:3e:31:7b:ac:
         30:59:84:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:55 2025 by rpki-client