Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
File:                     GODpo9IM-sbL48z3SrV4SndoKTM.mft (raw, json)
Hash identifier:          6woZ1khHoLcd1IKp/uhUAkE0d2mZL7yf1IKjV357vMg=
Subject key identifier:   D4:2C:EA:2A:63:50:DC:D2:C2:72:97:45:2C:99:31:80:34:23:1A:2D
Authority key identifier: 18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33
Certificate issuer:       /CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
Certificate serial:       0198D4A81242A04F034596D674AC81A5CB0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 02:00:41 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:41 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:41 +0000
Files and hashes:         1: EgUed3OS5r6UcW0VzyUQOqijGyE.roa (hash: fxzBB+2/n6aM1AwbZDhuW1COKGh5iBae7DMl/0iQ9A8=)
                          2: GODpo9IM-sbL48z3SrV4SndoKTM.crl (hash: vIuWqaTeAtvGGupALr6e3KecGZEBwVB0v6Xrvmkie8M=)
                          3: eWWR4vM0w5SZ0sBVPl9f9xfpWlM.roa (hash: 0jDZKCUWokK8TsjPgI0+fTiqYEgYJ/hp0vG/qzmnqKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:12:42:a0:4f:03:45:96:d6:74:ac:81:a5:cb:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
        Validity
            Not Before: Aug 23 02:00:41 2025 GMT
            Not After : Aug 24 02:00:41 2025 GMT
        Subject: CN=d42cea2a6350dcd2c27297452c99318034231a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:eb:38:30:a5:6f:7d:1e:94:7c:39:d6:73:82:
                    47:3f:c9:b2:f2:24:b5:75:93:5d:df:24:6b:ce:19:
                    7b:64:92:e0:76:6b:bf:30:01:7e:23:35:f6:47:17:
                    11:4c:94:8f:1c:db:4e:46:d0:ae:c8:cf:79:8e:2f:
                    83:67:d4:7c:fc:5d:8a:b3:06:db:8c:b7:9c:3a:12:
                    a0:7c:c5:79:b4:41:65:80:c3:16:af:c7:c5:1f:67:
                    f6:80:80:b9:5c:b6:16:3d:ff:80:79:97:4f:5f:f2:
                    60:e2:23:fb:68:d1:08:0c:c3:04:9c:8a:e3:4e:aa:
                    a7:59:41:c8:41:3b:61:07:4d:38:ee:e0:b7:b0:62:
                    1a:85:21:d5:c8:cc:da:ac:bf:67:1b:f9:18:6b:c5:
                    a1:90:ef:aa:03:69:e5:54:b5:0b:7b:3f:96:c8:5b:
                    1a:e3:51:e2:35:c6:f2:4a:d9:13:3d:a1:97:3b:0c:
                    fa:fb:e4:26:c7:ad:2b:a6:dc:bc:a4:59:88:36:42:
                    60:68:e3:01:32:d0:28:3a:a6:7b:f3:6f:aa:95:68:
                    96:9c:7f:fc:7f:d7:ca:9b:cb:30:71:c8:86:e0:00:
                    77:15:ae:fd:cd:00:eb:9b:06:7e:ec:6c:f8:38:34:
                    81:da:ea:b9:15:2a:98:2f:e6:15:1e:a2:b0:e7:ca:
                    06:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2C:EA:2A:63:50:DC:D2:C2:72:97:45:2C:99:31:80:34:23:1A:2D
            X509v3 Authority Key Identifier:
                keyid:18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:8b:d5:4b:f2:65:fb:87:13:5a:2f:a3:7c:09:a9:90:23:3c:
         c0:15:54:67:c2:59:b3:87:70:de:cf:f3:17:de:ec:54:9c:05:
         b3:f7:80:9f:36:07:36:74:e5:00:ef:b8:fd:b0:f3:ca:95:49:
         8e:29:36:62:68:ad:ab:cf:74:0f:28:70:ba:7e:c6:41:1b:bf:
         7d:ef:96:f7:ac:6d:bd:06:0f:03:be:f5:1f:ca:df:04:02:69:
         b9:39:a1:2d:6d:9f:b5:b3:49:56:f1:bf:1b:0d:d0:0d:8f:44:
         9e:ce:12:df:8e:f9:27:ad:7e:74:c2:a6:a5:bb:d7:a4:40:7f:
         3c:37:8f:06:c3:07:52:6b:49:6e:27:2e:3a:90:26:4b:b5:25:
         b6:d5:17:a6:87:7d:09:4c:a5:83:11:d2:19:11:93:0c:bb:c5:
         eb:cc:a4:f2:71:99:35:10:32:77:f6:e8:51:8d:2e:a8:4b:89:
         ac:0e:dd:11:11:17:11:0e:dc:94:88:e2:c7:21:47:dd:38:d6:
         43:69:74:e1:7d:6c:89:93:01:07:82:f8:31:b6:80:ce:ca:d3:
         d3:7f:79:4f:0b:bd:57:ff:7f:cf:c3:bc:20:56:9a:27:f8:a5:
         99:ec:e3:61:84:0e:91:a7:07:e0:11:e1:76:f7:35:7f:47:7e:
         0f:e3:e7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:44:32 2025 by rpki-client