Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
File:                     GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft (raw, json)
Hash identifier:          5KuTBFdxTGE2cWdENRyuTLabJK7vSeuI81dvEEG0ys4=
Subject key identifier:   8F:50:41:3F:BC:64:4A:75:AB:8E:D5:04:EA:FB:C5:D9:C3:48:4B:5B
Authority key identifier: 19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56
Certificate issuer:       /CN=19e3d11f72ddbed8361285b499b932191203b756
Certificate serial:       0199FBEAE81728BBFFAE2EA50FC70C63FA0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
Manifest number:          05D6
Signing time:             Sun 19 Oct 2025 10:01:39 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:39 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:39 +0000
Files and hashes:         1: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl (hash: q90Ki+ZcKe6pOrDHl6bhq6dSmQ15HoH89tSSln3VKVg=)
                          2: h_pQhnrE430cVPVrVeHdwNqGdWQ.roa (hash: jiL4T5HKXcvptd8nzfsvbD/UWOoD6EiqjHWGsrec+qg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:e8:17:28:bb:ff:ae:2e:a5:0f:c7:0c:63:fa:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19e3d11f72ddbed8361285b499b932191203b756
        Validity
            Not Before: Oct 19 10:01:39 2025 GMT
            Not After : Oct 20 10:01:39 2025 GMT
        Subject: CN=8f50413fbc644a75ab8ed504eafbc5d9c3484b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:93:2a:17:2b:cc:b9:8e:ed:b9:27:48:20:3c:
                    68:a6:99:0c:09:20:2a:3b:76:1f:79:b0:dd:5c:ad:
                    9d:33:b1:e0:4f:e4:8f:cf:2c:db:85:85:a4:1b:7e:
                    cd:52:3b:64:31:2c:8e:af:4f:59:ab:c7:10:df:1e:
                    2d:d0:25:d5:43:06:a9:78:a2:ce:1d:73:02:ae:fd:
                    fb:9b:33:c3:b0:19:95:f7:38:8f:1b:81:6e:26:19:
                    39:df:ad:2f:47:04:a0:1e:59:99:c9:bd:4e:cb:31:
                    70:da:5e:7f:1b:ca:95:3e:7c:a9:a9:c4:13:d6:17:
                    0b:ee:07:8b:3e:a7:4b:44:bc:f8:27:ed:29:6a:f7:
                    e2:f4:40:49:ee:57:eb:86:b3:3b:82:d4:7f:a3:93:
                    9c:5d:be:ea:17:18:37:b6:43:8c:4b:18:46:40:9e:
                    8c:4e:95:a2:36:93:47:3d:76:63:c0:89:fc:af:db:
                    c1:34:0e:fb:6b:06:ae:41:8b:36:b2:77:13:73:8d:
                    de:0b:5f:3f:4e:6a:76:33:3b:5e:5e:a1:5a:3b:19:
                    56:d8:7f:d8:0c:53:14:ba:9e:13:e5:ea:54:63:d6:
                    8d:16:fb:3f:f4:88:f3:e5:c8:26:f0:ec:6e:a8:43:
                    65:8d:12:47:6f:1f:f6:66:d7:96:ed:70:d3:23:65:
                    4b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:50:41:3F:BC:64:4A:75:AB:8E:D5:04:EA:FB:C5:D9:C3:48:4B:5B
            X509v3 Authority Key Identifier:
                keyid:19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ce:a7:2e:d9:73:d0:8f:cb:65:36:29:d9:03:99:77:bc:6d:
         d0:4c:a6:5a:c4:8e:e9:01:87:9d:50:7e:25:b3:6c:ee:71:86:
         3e:84:dd:18:1a:b5:bc:87:83:1d:b2:5b:71:c8:b0:97:41:22:
         6a:a3:fe:17:32:1d:af:01:38:0d:58:bc:3a:0a:73:62:ec:1a:
         ef:d0:31:38:04:e9:26:a7:09:60:ca:34:8d:e7:58:29:50:92:
         53:26:e1:5d:39:84:0f:5c:eb:a6:69:97:13:7c:97:0f:7e:c2:
         38:38:be:18:b1:73:7b:1a:5e:f2:f7:1e:0d:71:9e:d5:1a:75:
         c3:22:40:80:bc:a4:87:90:ff:62:17:f4:dd:b9:ce:e4:98:d7:
         32:6f:a6:0d:f6:ba:7f:ed:91:f2:b4:26:76:f5:3e:a9:19:be:
         0f:75:c7:15:2c:34:9b:d6:c2:08:3f:cf:63:b1:c2:53:2f:b9:
         ce:20:57:95:37:4a:e9:34:ef:2d:89:56:f8:e2:17:46:86:d4:
         99:5a:a3:0e:ce:23:2d:ae:25:fc:42:b5:28:e5:3e:d1:c1:69:
         9b:a4:8e:68:31:5b:23:7f:44:b3:81:63:f9:5e:7b:ec:74:ce:
         a0:4b:a2:e8:42:0a:32:38:3b:c5:3f:c6:e7:8a:80:40:ce:e2:
         af:ca:bc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:21 2025 by rpki-client