Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
File:                     glLEw3Iyf9wsF7SVuFiRp23kJRA.mft (raw, json)
Hash identifier:          RB8wUFoyrBeJbonUQ8wGbiZ2MpJ30CTiq3h2J9pdkJ8=
Subject key identifier:   30:C5:91:F7:A2:61:D8:0B:11:80:6A:71:F8:D2:6E:8D:DD:E1:2D:C2
Authority key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
Certificate issuer:       /CN=8252c4c372327fdc2c17b495b85891a76de42510
Certificate serial:       0198D5F14B7DB089B4CB9CA406159E2A9955
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
Manifest number:          0510
Signing time:             Sat 23 Aug 2025 08:00:17 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:17 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:17 +0000
Files and hashes:         1: glLEw3Iyf9wsF7SVuFiRp23kJRA.crl (hash: aO6CPpRPYrWTshSFfdOzVudkwUQ5+1cpxPcwEyBiu6E=)
                          2: tst0w9cbQNBfGvPhKg-7OP38PnA.roa (hash: NVrr4ZTIkz7EDzRzMrcUZG5YrSaOVHFht37jEZIQKGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:4b:7d:b0:89:b4:cb:9c:a4:06:15:9e:2a:99:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8252c4c372327fdc2c17b495b85891a76de42510
        Validity
            Not Before: Aug 23 08:00:17 2025 GMT
            Not After : Aug 24 08:00:17 2025 GMT
        Subject: CN=30c591f7a261d80b11806a71f8d26e8ddde12dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:95:ae:7a:10:3e:ed:7c:35:8c:f1:0f:29:47:
                    55:b2:7d:50:90:3d:5c:1b:bb:c0:a6:56:6b:a4:93:
                    b8:f5:24:0e:92:c0:99:15:39:ea:4e:be:1e:e5:de:
                    d7:3d:ef:8b:c2:d0:dd:82:2d:38:4c:f0:27:df:e8:
                    e7:bd:6a:ef:39:5c:a7:3e:f0:e2:7c:a6:52:81:21:
                    6f:dd:dc:4d:d9:9a:53:47:56:98:5a:d7:0f:58:8c:
                    02:e9:5c:ad:e8:f2:d2:f8:af:0e:7b:f0:29:70:98:
                    36:21:d9:45:48:06:cf:f1:bb:e1:4b:78:7c:15:45:
                    0f:6e:7b:fc:32:a2:2f:1f:f4:3e:8c:8b:f8:42:cf:
                    d7:9a:83:ac:74:a2:c2:04:82:b6:36:15:15:2f:3d:
                    99:f0:4d:17:6c:5f:a7:a4:dc:f8:16:15:6f:25:c0:
                    88:3a:9e:fc:07:98:0d:00:85:54:18:ac:b9:ea:93:
                    04:23:60:0f:ef:ae:2b:81:b9:f8:21:68:ce:d8:65:
                    73:67:3e:6d:78:8c:4f:3b:0b:de:10:6f:f1:58:35:
                    c3:36:d7:97:7e:b6:a2:89:68:a0:5c:f3:44:ec:d3:
                    69:5e:97:f7:ad:21:a0:4a:1d:5f:f5:e3:f1:9e:2e:
                    d1:5d:bb:cb:2d:b1:3b:7e:f4:1a:bb:3a:8c:33:d4:
                    3f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C5:91:F7:A2:61:D8:0B:11:80:6A:71:F8:D2:6E:8D:DD:E1:2D:C2
            X509v3 Authority Key Identifier:
                keyid:82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:4d:0a:4a:5f:20:20:02:a2:fa:92:cc:03:fe:28:6e:96:01:
         3c:6a:99:b0:5b:a7:0f:75:ba:27:d5:6d:d8:31:4b:0d:24:9f:
         ce:4b:2d:bc:e4:2f:b2:79:a8:cd:29:2e:d3:e5:39:61:3c:2e:
         3c:0d:9a:5f:08:20:a3:f0:2d:83:48:d3:30:5e:83:70:6c:f9:
         5e:46:e2:c5:aa:14:45:39:d6:55:34:3a:f0:92:15:f5:6f:c1:
         ce:0f:76:d7:91:e2:da:83:4a:c0:ee:0b:7a:2e:a2:c7:75:fb:
         73:0f:c0:fe:a9:07:d8:f5:8c:1a:78:88:0a:e3:f9:06:0a:a1:
         9b:88:9e:37:86:20:3f:41:83:73:80:2e:ff:ef:b5:11:09:48:
         81:db:74:6b:97:dd:ce:4c:5c:d7:c4:8b:67:1a:57:44:34:78:
         74:a6:33:c8:28:0a:f3:da:19:0a:5e:6c:ea:2c:82:19:c8:5c:
         88:93:a1:c4:2f:74:7d:52:35:7c:ca:f4:d1:1b:32:16:93:74:
         34:e0:87:62:5c:5b:0e:14:52:c2:78:83:8e:39:ca:2e:dc:cb:
         db:c6:a6:33:cd:9a:01:a2:18:d4:9b:71:0e:1a:d7:35:88:46:
         b4:42:7f:52:65:fd:8e:79:f2:8c:f2:68:87:4b:0c:78:9c:a3:
         07:0d:3d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:28 2025 by rpki-client