Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
File:                     GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft (raw, json)
Hash identifier:          xb8nfYjbBU+l4XqoUGJmgC9gu8geD+YZrSp/+xrYq14=
Subject key identifier:   A4:E4:43:97:95:13:FF:2F:1A:AF:D3:84:62:03:B9:58:1E:DB:C1:18
Authority key identifier: 18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6
Certificate issuer:       /CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
Certificate serial:       0198D515AE4D665AEA43CF82231FB05D0419
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
Manifest number:          0362
Signing time:             Sat 23 Aug 2025 04:00:24 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:24 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:24 +0000
Files and hashes:         1: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl (hash: 7BliVB2KA2KQzfuFNhAsHngNOEsteFAtyKRF179Xgzs=)
                          2: REh2fJFOUQT0aTDY9FX0qElIo2A.roa (hash: v403zz3pfGBhC2EeF1+1/Ixjaub1EklsKy+XOu6apXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:ae:4d:66:5a:ea:43:cf:82:23:1f:b0:5d:04:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
        Validity
            Not Before: Aug 23 04:00:24 2025 GMT
            Not After : Aug 24 04:00:24 2025 GMT
        Subject: CN=a4e443979513ff2f1aafd3846203b9581edbc118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e4:2d:b0:ed:3e:51:6b:21:49:78:00:9e:2d:
                    e6:16:62:d8:22:3b:f0:24:c2:11:76:ef:3b:08:f7:
                    a2:38:ce:22:21:52:c0:c9:20:27:c7:5b:6c:75:aa:
                    e5:b7:fe:71:bd:0a:e6:64:3d:6a:2c:51:8e:be:91:
                    b2:1e:a1:1f:51:13:1e:86:eb:de:3b:8d:40:cb:ac:
                    71:e6:38:1f:a6:de:d9:7d:1a:4e:ab:4d:ea:cf:bb:
                    d1:b0:a9:b8:f0:99:49:fb:e9:4e:52:8f:80:da:8c:
                    45:f6:2b:8f:63:d8:3f:03:2b:7f:7a:4f:36:d5:f1:
                    c4:dc:46:3e:7d:b1:3c:8f:6b:f3:f8:94:9f:a6:c3:
                    db:a6:36:60:5d:50:74:55:c6:84:ef:04:38:4b:0a:
                    c8:8b:44:57:ec:d5:c6:78:14:96:fa:43:9e:6e:78:
                    6c:38:9d:ca:00:83:18:1e:59:de:47:5f:e6:76:44:
                    5a:d4:0d:4a:4e:25:4a:37:01:da:b7:f3:89:d5:59:
                    58:34:2a:02:28:f6:95:db:b1:ef:bc:07:37:c7:b7:
                    cf:16:e0:20:2e:4b:1d:a0:66:98:10:67:71:bd:ec:
                    b9:a5:77:8c:b5:60:96:af:62:cb:76:df:c9:4e:d3:
                    a2:1d:9d:cb:7a:17:0f:d1:80:c0:01:96:4a:97:98:
                    94:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E4:43:97:95:13:FF:2F:1A:AF:D3:84:62:03:B9:58:1E:DB:C1:18
            X509v3 Authority Key Identifier:
                keyid:18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:b0:7b:2b:f2:b2:8b:63:48:cb:b8:9c:93:20:06:32:2b:0d:
         65:77:df:b6:55:19:9b:12:ee:43:90:7c:81:ed:f5:09:17:6d:
         de:a0:b9:d0:96:dc:99:2a:f9:56:a3:1e:44:17:cc:b8:21:13:
         10:a9:86:32:01:3d:32:2c:a5:cf:05:d2:3f:9e:00:51:b0:c5:
         32:be:24:8d:d0:af:44:d1:be:6a:8d:bb:a2:78:93:10:57:f2:
         d7:d0:4b:cf:c3:25:d7:0b:1e:c8:2a:75:85:ab:e4:62:f6:fc:
         b5:9a:d9:4b:99:d5:41:69:ec:ff:a1:98:e2:b8:35:3c:46:e2:
         67:d2:60:34:05:9d:d2:46:a9:05:d4:c8:c9:2f:be:b4:e4:d9:
         03:c0:92:26:61:fa:bf:46:bf:fd:c3:8a:11:3a:f8:29:fe:72:
         be:71:c9:47:9d:a0:31:3f:2c:3b:c4:6b:b8:65:2f:a4:3e:d2:
         de:e4:a4:fb:7b:b0:c2:d9:af:96:83:bb:4b:25:35:89:3f:8f:
         33:74:13:c0:bf:7a:78:da:9a:06:10:12:f4:dc:42:01:5e:fd:
         8f:6e:76:60:16:f7:27:fb:a2:3f:ab:89:43:8d:fe:2c:44:38:
         55:65:d3:45:9e:de:fa:f8:a3:e4:f0:0b:8a:e5:a2:27:73:f8:
         c4:93:e5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:14 2025 by rpki-client