Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
File:                     GVc7IITN9G7hzNKC36O49rfqcmw.mft (raw, json)
Hash identifier:          v1tnq0Wi0EaIpKwiIea3onh4xiGdsKNwlAw8h2bISrA=
Subject key identifier:   0C:52:65:1E:69:95:98:0B:F2:BE:26:49:8A:F6:A5:69:D7:B5:BE:1A
Authority key identifier: 19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
Certificate issuer:       /CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
Certificate serial:       0199FC8F6B38E482B0D63B5DD72731FBEFD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
Manifest number:          1421
Signing time:             Sun 19 Oct 2025 13:01:21 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:21 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:21 +0000
Files and hashes:         1: GVc7IITN9G7hzNKC36O49rfqcmw.crl (hash: S4up7PZu/wJJ3If4/he+mBbyhCRO8fUvgjxCLOmbF1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:6b:38:e4:82:b0:d6:3b:5d:d7:27:31:fb:ef:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
        Validity
            Not Before: Oct 19 13:01:21 2025 GMT
            Not After : Oct 20 13:01:21 2025 GMT
        Subject: CN=0c52651e6995980bf2be26498af6a569d7b5be1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1f:04:10:d1:4b:c7:ce:dd:5a:5a:5c:29:2c:
                    4c:27:f0:45:96:49:ff:80:53:db:98:30:de:a6:91:
                    36:41:a2:82:18:35:f4:2e:f3:56:8a:a1:c1:f4:4c:
                    e4:df:f8:18:8a:e6:e5:83:c4:21:48:a9:bd:31:a5:
                    32:dc:a9:f8:86:44:04:83:04:90:07:bb:6d:c7:cc:
                    db:45:16:64:56:46:91:ea:1b:06:25:39:72:8e:11:
                    bb:4f:ce:8c:22:4d:7c:06:af:ec:60:5e:99:64:e7:
                    4a:2f:b0:03:43:64:d0:7c:b5:9d:f0:70:8e:bc:d7:
                    fc:26:ea:17:8f:79:06:45:84:55:57:04:4a:4b:3e:
                    97:2a:05:cc:06:72:c5:d4:99:06:2f:d5:20:57:99:
                    09:64:93:e9:18:19:06:ae:ea:23:6b:c9:7f:71:4c:
                    ce:ac:de:f2:d6:5a:c4:74:35:e4:01:53:b9:6c:2b:
                    d2:59:e2:03:32:1a:79:f1:f4:13:f9:f2:7f:5d:5c:
                    21:45:48:16:53:1a:36:37:6d:8e:18:ba:32:d9:23:
                    4a:0e:08:ea:a7:0d:92:2f:c4:74:40:22:af:a6:9d:
                    48:80:cf:9a:f8:a4:d4:c5:97:f0:b4:81:ca:d1:b3:
                    9f:bd:a5:0a:4b:69:d5:8b:1a:93:33:b7:33:48:0e:
                    40:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:52:65:1E:69:95:98:0B:F2:BE:26:49:8A:F6:A5:69:D7:B5:BE:1A
            X509v3 Authority Key Identifier:
                keyid:19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:ff:9f:98:bc:b8:07:0d:f6:8c:6b:17:9e:7e:ac:6b:6e:e2:
         09:4f:1b:a8:55:0d:88:3e:f8:d4:2d:36:fa:85:ce:2f:60:69:
         ca:c3:2e:af:4a:8b:9e:8c:35:63:2e:7d:23:c8:07:2a:6e:c6:
         d5:33:05:1e:e6:24:96:69:46:4f:36:8d:2e:aa:60:1b:3c:22:
         55:0e:59:c9:f7:eb:13:b2:75:64:51:e8:63:fe:9a:37:92:03:
         df:78:64:74:29:3a:70:ed:6e:45:42:84:76:3f:16:06:e5:64:
         c0:09:d1:5f:0f:f4:d8:e7:16:73:00:83:a1:39:38:07:76:b3:
         f0:5f:54:0e:10:f3:4c:05:dd:e0:dd:c8:fe:8c:56:0d:a5:96:
         f3:68:14:e0:80:df:d2:b2:81:6f:41:60:cf:f7:9a:45:98:5f:
         b5:bd:bf:5c:cf:65:25:1b:75:f3:eb:62:05:ba:fd:10:4f:61:
         6b:97:5b:80:3c:8b:80:72:b2:92:d7:0e:25:9e:ae:ed:8f:79:
         ba:22:97:81:ae:ab:c9:79:c3:d6:f6:fc:38:a1:ec:f5:a7:25:
         5b:dd:35:e6:dd:53:31:f8:46:65:49:87:b1:54:c0:cc:c7:35:
         27:80:ff:2d:49:f4:c4:5c:d2:18:6a:ab:f5:cb:5c:3d:db:e6:
         20:83:19:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:25 2025 by rpki-client