Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
File:                     GsvdANJ7iovvyGbK83jxkCdoR2k.mft (raw, json)
Hash identifier:          Q6/ggookrlltU7aVgNwBmKY/XZHIujtV1BQaTL7o57c=
Subject key identifier:   42:EF:67:2F:4D:64:02:8A:09:13:69:2E:5D:D9:AA:0E:D5:62:81:88
Authority key identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
Certificate issuer:       /CN=1acbdd00d27b8a8befc866caf378f19027684769
Certificate serial:       0199FB457FAD26519A2FE2D566B489F589EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
Manifest number:          09F1
Signing time:             Sun 19 Oct 2025 07:00:59 +0000
Manifest this update:     Sun 19 Oct 2025 07:00:59 +0000
Manifest next update:     Mon 20 Oct 2025 07:00:59 +0000
Files and hashes:         1: GsvdANJ7iovvyGbK83jxkCdoR2k.crl (hash: 6HZiklY5vHxiuh1HyrV9wWLOa0/pF5paj4Q28U1UyaQ=)
                          2: JLeYM1Nb1WkxGedHLrl3D2YAcD0.roa (hash: kpcTVdbw29GtZxZaBOoPfJn9eSPlvRnFiHJuCzaGNU4=)
                          3: izbCDxefHi81Ceh8v70jil8PjrA.roa (hash: G81Vq+SeFhUUiPynuXGPGqpCxUEFG0haFucomHcGaT8=)
                          4: uvZ9FoblIzzQH1DQjOvcBhSKeZU.roa (hash: knG2zE+cphfPly9s92WP/7hjIDgEXmoUhOUrwgfF5vk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:7f:ad:26:51:9a:2f:e2:d5:66:b4:89:f5:89:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1acbdd00d27b8a8befc866caf378f19027684769
        Validity
            Not Before: Oct 19 07:00:59 2025 GMT
            Not After : Oct 20 07:00:59 2025 GMT
        Subject: CN=42ef672f4d64028a0913692e5dd9aa0ed5628188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:02:11:46:7b:bd:29:f5:9f:17:c4:8b:9f:03:
                    79:33:9a:01:4e:7c:c7:3d:88:c0:81:12:fe:bf:fb:
                    de:5f:68:0c:6e:a2:c7:3a:0a:55:42:00:5e:b4:13:
                    89:a8:b3:d3:4c:55:7f:a2:c5:14:d2:42:9f:fd:c0:
                    57:63:d9:ba:2a:c7:3b:aa:8c:9e:ca:8e:67:0d:80:
                    16:42:cf:0c:7c:4c:17:66:9f:64:ee:ef:10:c5:6c:
                    22:9f:44:72:ce:87:b4:7e:a8:3a:58:96:a2:e7:22:
                    bb:0e:6f:1e:5b:ad:75:0f:1a:53:16:4f:fb:c1:bf:
                    ad:0c:d6:3d:a2:44:04:4c:64:29:9b:38:f7:2e:c1:
                    1b:8f:33:6c:d5:7e:e3:d4:fb:5c:2c:a9:1b:b2:56:
                    e2:50:7c:2f:b1:c4:27:96:50:f8:62:7d:53:31:25:
                    99:2c:d7:c1:ae:d9:ba:f4:03:cc:76:02:fa:0b:91:
                    e3:77:ab:eb:cf:2b:12:8c:46:f5:b1:1f:c8:c8:26:
                    6f:f5:6b:83:b7:c8:3b:be:8a:e8:45:01:8d:cc:10:
                    ee:0f:39:7d:90:7e:97:f0:d8:76:f7:e8:44:be:66:
                    71:a7:9d:fa:79:82:0d:5c:19:27:82:9e:cf:2a:0d:
                    ab:a2:6a:1b:e6:09:6b:c9:3d:98:5e:21:7c:74:fe:
                    ca:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EF:67:2F:4D:64:02:8A:09:13:69:2E:5D:D9:AA:0E:D5:62:81:88
            X509v3 Authority Key Identifier:
                keyid:1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ae:da:60:b4:63:90:20:81:0e:2f:a0:61:cb:d8:55:45:25:
         57:67:31:72:48:72:e2:fd:1c:ab:7d:d1:60:a8:d5:e5:9e:31:
         d2:ca:59:dd:87:7c:e5:9e:4e:8a:50:51:ae:b0:25:25:8c:80:
         df:19:79:08:08:f1:60:66:65:ca:f5:23:f6:49:03:3f:a6:cc:
         87:ff:03:33:68:37:af:c8:57:ec:b0:e2:30:b1:45:90:58:7d:
         76:a1:f3:1f:7b:17:4d:69:60:5d:54:3b:83:76:46:6f:22:a3:
         8d:8b:2d:8c:16:0d:13:1c:bd:0d:01:cf:86:87:9d:46:f7:6e:
         0d:73:ce:71:4e:38:fc:b1:98:2a:3f:50:91:09:f0:51:85:79:
         87:0f:3a:21:56:6d:d3:e4:9e:fb:51:61:fc:7e:36:2c:26:81:
         e3:ce:cb:2c:b6:36:74:31:45:8d:f9:27:d6:e4:ec:a5:c9:d6:
         c6:f5:30:3e:c8:17:65:45:a9:d8:17:ca:09:34:f3:d6:ef:41:
         27:ac:0f:83:d5:77:20:c0:d1:2f:02:09:bb:99:ca:bc:dc:41:
         27:d4:9e:63:16:f8:bb:6e:25:9e:c6:23:ce:10:91:a9:9c:b8:
         99:9d:94:07:9c:de:e3:ce:52:fa:28:6c:63:50:ab:8f:35:2d:
         8b:6d:de:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:02 2025 by rpki-client