Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
File:                     GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft (raw, json)
Hash identifier:          e2cXsT8kW++dftK17q3Ys9GiMnQvHSdC8g1PNtvvvnU=
Subject key identifier:   26:38:F6:98:53:C9:CB:4A:07:1E:3C:1D:F0:FD:23:5A:B3:9D:D3:59
Authority key identifier: 19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2
Certificate issuer:       /CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2
Certificate serial:       0197B745143E97B108AF35AEF07EB9FEA445
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
Manifest number:          1455
Signing time:             Sat 28 Jun 2025 16:00:47 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:47 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:47 +0000
Files and hashes:         1: GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl (hash: mew6yqogBWF0AkzYZL4RgvKhqS4GBQVP62mz0fTg85I=)
                          2: T6BmY5F3A76c40Avg5lTJbK0mkw.roa (hash: v+5wW5iBlMaLk7U/wCyygoAJ3jQnHxe9Wti6cfnchrc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:14:3e:97:b1:08:af:35:ae:f0:7e:b9:fe:a4:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19f5e04b6555f1e2c92d7a41ac106a75dea928a2
        Validity
            Not Before: Jun 28 16:00:47 2025 GMT
            Not After : Jun 29 16:00:47 2025 GMT
        Subject: CN=2638f69853c9cb4a071e3c1df0fd235ab39dd359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1d:f6:56:c0:17:b2:71:98:9c:d5:5f:83:35:
                    7f:b4:06:e0:a5:88:bb:72:e4:45:0a:41:77:e8:9c:
                    df:4f:8e:86:b6:96:21:87:21:cf:08:40:b3:c6:bf:
                    e9:37:30:74:7b:30:f8:67:29:81:d5:7c:e2:31:0e:
                    62:57:43:de:49:5c:d0:7d:10:16:a0:8b:ad:06:b6:
                    07:ab:0e:88:62:f6:dc:3d:a9:17:9c:8d:ab:fc:0c:
                    6e:60:bb:f0:59:09:56:2b:df:73:ea:2a:d1:1c:9e:
                    c6:5f:e5:88:10:43:b2:54:92:a7:ec:b3:d8:fc:36:
                    92:28:51:bc:a0:27:4d:8c:e8:7a:9c:2e:9e:ac:ac:
                    53:17:eb:7b:26:0a:d8:d1:aa:cc:7e:c1:fb:95:72:
                    bc:d8:e4:37:a2:66:4c:b7:57:36:91:8b:1c:cb:14:
                    a8:0f:dd:df:99:1f:24:13:d9:a5:db:23:f1:88:be:
                    88:be:b9:20:6f:dc:19:72:5c:86:68:7c:39:37:d7:
                    0c:38:96:6e:53:8d:1c:2e:5f:dd:a3:96:55:f2:95:
                    a9:72:d6:d1:57:ab:2d:06:90:cb:4f:68:1e:e6:1c:
                    c5:a5:52:54:ed:d8:ab:e5:14:63:f2:2d:60:a7:5f:
                    88:be:d8:8a:07:70:92:ce:80:d7:6e:ff:07:95:be:
                    1a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:38:F6:98:53:C9:CB:4A:07:1E:3C:1D:F0:FD:23:5A:B3:9D:D3:59
            X509v3 Authority Key Identifier:
                keyid:19:F5:E0:4B:65:55:F1:E2:C9:2D:7A:41:AC:10:6A:75:DE:A9:28:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfXgS2VV8eLJLXpBrBBqdd6pKKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/GfXgS2VV8eLJLXpBrBBqdd6pKKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:48:10:67:b2:95:e6:64:aa:02:3f:dc:fc:ff:55:e5:d9:e5:
         ed:ba:e8:e2:44:9e:cc:e6:99:2f:93:ad:59:90:07:a2:12:79:
         41:19:63:f7:1e:e3:c4:3a:43:77:a9:fd:f2:c9:6a:a1:5a:1e:
         7d:dd:77:3b:bb:93:6d:46:42:f6:5b:47:ef:38:15:b9:85:98:
         bf:84:e3:9c:18:07:1b:51:c8:f0:26:b2:63:a0:13:78:43:c6:
         d6:f6:c0:23:83:bf:27:c8:a4:53:4d:bb:f7:8c:1e:47:71:32:
         99:77:44:37:0a:34:99:9f:db:20:77:3f:fc:8b:a0:1c:7e:18:
         85:fd:87:7c:0a:69:39:54:90:d5:97:5a:5e:92:8a:7b:a6:9e:
         1b:52:af:37:3f:48:88:70:22:18:06:95:4a:f5:1c:61:3b:c4:
         da:d8:83:01:a4:15:17:4d:58:eb:a6:14:b0:74:f1:3d:85:db:
         e3:74:59:91:aa:de:ee:d6:45:3e:68:39:f3:b7:7a:de:f7:e6:
         83:c6:4e:5e:55:48:4c:91:6a:6f:19:08:59:45:b6:d2:f9:e8:
         83:9b:2b:98:ee:92:09:86:eb:76:91:c4:51:7e:92:8e:f5:25:
         bc:c4:1c:e5:18:26:da:fb:bd:b8:92:82:34:3c:e2:44:5f:24:
         24:a0:c9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:31 2025 by rpki-client