Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
File:                     GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft (raw, json)
Hash identifier:          JXW3DS17UGA0k+h2KgjKC32Eu/TVNVGFA1LU7lw++bI=
Subject key identifier:   BD:9C:35:1A:B2:09:D5:4D:BC:FD:F5:51:39:41:BA:F7:FA:A7:BF:0C
Authority key identifier: 19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91
Certificate issuer:       /CN=194e32a82e98f22d939ff9984455813be2ba6a91
Certificate serial:       0198D515EC406AFA80DF896CA5EE942A6D48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
Manifest number:          0167
Signing time:             Sat 23 Aug 2025 04:00:40 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:40 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:40 +0000
Files and hashes:         1: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl (hash: ndtAF/t45Atmbhvwsh0UFb0dCDC/6qB4YprH80o7/tg=)
                          2: UfSgUAAlY9L-pxjy9r66ZUMHciI.roa (hash: lfZloxngOlvdGd9PgYcQqf9/LWwVeSvhKaVHeCHu4Rc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:ec:40:6a:fa:80:df:89:6c:a5:ee:94:2a:6d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194e32a82e98f22d939ff9984455813be2ba6a91
        Validity
            Not Before: Aug 23 04:00:40 2025 GMT
            Not After : Aug 24 04:00:40 2025 GMT
        Subject: CN=bd9c351ab209d54dbcfdf5513941baf7faa7bf0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d3:5b:40:e9:36:78:a5:7f:c9:18:5a:dc:95:
                    ff:a6:3f:1b:0b:bb:1a:d9:80:41:33:38:71:73:e4:
                    7a:a7:9c:a5:7d:5e:b3:6f:ae:30:85:10:a1:49:5e:
                    54:40:d7:16:2b:26:ca:65:d7:b6:8f:02:6d:32:e0:
                    38:66:e9:a0:45:ea:b3:f6:c6:1b:15:04:b6:c7:f0:
                    0a:ad:10:d6:79:6b:76:fe:75:50:84:34:94:f8:d5:
                    cd:6b:53:5d:21:8c:58:40:3b:dc:a7:02:a6:5a:0b:
                    7b:65:c2:09:61:31:13:42:68:77:33:01:32:34:73:
                    5d:02:56:db:8a:ac:5b:2d:0e:37:2d:ca:aa:34:68:
                    47:88:4a:5f:f8:f8:13:10:52:75:a2:f6:3e:6d:a3:
                    4b:b0:83:84:21:c6:6c:14:0c:15:c1:80:df:39:03:
                    18:9b:5c:77:b1:9f:bf:7f:bf:4e:3b:c2:22:02:a6:
                    90:6c:8a:a8:34:9f:2d:0e:7b:63:3c:f9:75:57:60:
                    a4:66:0a:82:93:d7:81:61:4d:2a:ba:92:b3:bd:35:
                    b6:ec:3c:93:e3:97:43:6e:de:5f:7c:ac:92:7f:e5:
                    bc:8c:7f:5f:b4:d8:ee:26:7e:c9:c2:c2:8f:25:66:
                    3b:68:91:b3:61:ea:f3:d4:e3:23:97:c6:e2:58:f6:
                    63:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9C:35:1A:B2:09:D5:4D:BC:FD:F5:51:39:41:BA:F7:FA:A7:BF:0C
            X509v3 Authority Key Identifier:
                keyid:19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:7c:f9:f6:f4:d0:b1:ef:e7:d5:8e:68:1d:a2:17:aa:94:22:
         26:a7:48:d6:ad:60:78:49:07:10:7d:00:0a:bd:7d:43:82:4e:
         ab:6a:57:b4:31:f6:42:6f:e3:02:b0:f2:4a:de:8c:c9:84:58:
         16:c7:ec:70:40:56:37:15:5f:2e:93:ab:18:b1:a7:26:cf:98:
         59:a2:9b:cd:79:20:d2:4e:e6:19:1c:4d:62:fe:4b:49:92:9d:
         3b:29:28:1c:df:b1:5a:8a:52:73:a0:c4:5b:5e:52:89:83:e2:
         01:04:73:d9:c9:ea:e4:f9:a4:2f:0d:37:39:f2:09:af:61:30:
         e1:cd:71:66:04:5b:51:7b:49:4a:5f:a4:83:3c:6d:77:58:95:
         9b:65:fc:4d:04:de:20:d8:fe:f0:9b:1e:cb:04:29:ab:49:9b:
         f7:54:aa:a1:ff:bc:03:f3:8b:d5:0d:99:ca:79:18:10:25:6f:
         74:c4:f1:12:3f:40:f8:23:aa:48:7b:a2:71:85:29:84:99:0b:
         3f:da:0c:75:6a:fd:2d:b8:7a:80:10:48:3b:19:d5:57:1a:ed:
         66:0f:5d:d4:5c:a2:2a:57:89:a9:8e:b5:ba:7f:58:18:04:82:
         5c:38:21:c3:5d:af:aa:34:5c:49:58:b3:30:d8:3c:e0:3d:44:
         6c:1f:ca:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:43 2025 by rpki-client