Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
File:                     GJiU_9B_W6Edxlvzj9lexByK944.mft (raw, json)
Hash identifier:          zYpxmDV1NYr44VBrffshYrNRRNNgidOXW8xPm/59FTM=
Subject key identifier:   71:88:EA:8A:E4:D1:AB:12:DA:15:D3:04:E4:22:8B:78:10:43:E6:91
Authority key identifier: 18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E
Certificate issuer:       /CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
Certificate serial:       0198D54EB55377C44E18357A23C989F195A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
Manifest number:          1382
Signing time:             Sat 23 Aug 2025 05:02:41 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:41 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:41 +0000
Files and hashes:         1: GJiU_9B_W6Edxlvzj9lexByK944.crl (hash: Nxdk9IzpgWxFigk7kx8LAY3N2/D4Ih+8HE35XwpJMtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:b5:53:77:c4:4e:18:35:7a:23:c9:89:f1:95:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
        Validity
            Not Before: Aug 23 05:02:41 2025 GMT
            Not After : Aug 24 05:02:41 2025 GMT
        Subject: CN=7188ea8ae4d1ab12da15d304e4228b781043e691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:e4:2a:0f:ab:66:83:7e:1a:99:be:d4:64:
                    ac:d1:64:89:e7:d0:09:1c:30:62:90:e7:75:88:bc:
                    18:6b:19:a1:22:73:ab:2f:65:33:30:e8:6a:7d:60:
                    f4:33:1c:0a:f8:72:c5:0d:25:e0:46:81:76:77:27:
                    aa:c9:f8:f9:8b:61:bf:98:86:ad:14:51:18:80:64:
                    9a:ee:39:d4:a9:e4:a6:2e:4f:05:a1:ac:10:4a:4d:
                    99:9f:3c:b2:63:9c:c6:1b:50:a7:f5:16:1f:d8:b0:
                    d4:4b:fd:3e:2a:c8:10:d4:9a:a0:7f:f1:b0:eb:ce:
                    72:4b:31:e0:0e:fa:16:1e:fd:74:94:d0:bd:94:c0:
                    0c:41:0e:1a:56:1f:43:f3:44:5b:0e:51:d7:82:31:
                    62:6e:d0:cb:50:e5:ed:90:64:e0:08:ec:bb:68:d9:
                    a5:51:98:83:d6:f6:2d:e9:35:ee:4b:8b:8e:98:a2:
                    ea:8d:cc:c0:5e:f2:17:fd:1e:22:c0:63:30:dd:93:
                    c6:54:fb:52:f7:34:c7:bb:3b:81:4f:7a:54:fd:73:
                    bb:f4:9b:a5:35:7b:29:73:d1:28:79:b6:33:ff:97:
                    8f:34:12:53:48:84:ca:e3:06:74:08:ab:76:1b:0f:
                    d4:3c:5d:61:2d:1a:fe:6c:9a:65:d6:c5:cc:d0:0b:
                    4a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:88:EA:8A:E4:D1:AB:12:DA:15:D3:04:E4:22:8B:78:10:43:E6:91
            X509v3 Authority Key Identifier:
                keyid:18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:6e:58:a2:4d:5d:e6:ba:87:03:5a:49:37:94:8f:ea:a6:29:
         fd:c6:c6:1a:d3:41:be:d6:40:eb:c6:08:49:cf:aa:09:82:95:
         d7:70:f5:a0:b3:ba:1d:96:3c:1e:e7:27:9e:8a:34:64:66:07:
         14:55:71:bd:d8:a9:16:bd:dc:63:00:93:db:1a:03:26:32:82:
         b1:e2:69:63:62:95:10:b3:fc:61:72:da:23:c4:80:5e:bc:b8:
         51:cf:a7:35:a0:c1:cd:80:0b:e5:57:67:60:ac:2f:4d:0e:e1:
         d5:5c:ea:18:f8:a0:43:00:bb:b8:88:b1:13:2d:a3:e2:35:bc:
         b4:f3:91:ae:aa:f3:dc:d4:8c:c3:c0:0b:c3:b7:45:c0:33:dd:
         21:98:56:9a:5e:8e:87:8a:07:23:99:89:73:b7:5e:3c:52:ad:
         ff:e5:b4:5f:09:e1:e8:0b:a6:69:45:da:58:06:06:a3:be:cb:
         fa:e4:81:9d:f3:78:08:98:31:50:ba:43:50:e4:0b:86:48:3b:
         c8:40:a4:d5:81:97:84:53:88:3b:5d:58:f9:9b:88:8b:30:6b:
         c6:0c:8c:b6:01:64:7f:d2:b6:6d:48:83:ed:f4:88:04:1e:64:
         70:e9:70:bd:bf:6d:b9:20:e5:11:67:3e:9f:7c:1a:a4:1d:1f:
         83:d7:60:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:51 2025 by rpki-client