Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
File:                     GbLh_EALv53LIGat49v-XJ6rLn0.mft (raw, json)
Hash identifier:          4/LHAsgCaKQQVza+2pZ4+QpAYRRYxlEK3qzFEENU6Ys=
Subject key identifier:   B3:45:51:1A:34:D6:97:C2:38:7C:56:37:BA:C9:52:88:95:7B:EB:9A
Authority key identifier: 19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
Certificate issuer:       /CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Certificate serial:       0198D5BC0A59A9564DF6D163B28583979C91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
Manifest number:          0F21
Signing time:             Sat 23 Aug 2025 07:02:06 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:06 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:06 +0000
Files and hashes:         1: GOyl6U-dGvVD0-jKWtZSd5lPcvw.roa (hash: UpOJI3oK6cWcuZSPYztLiL8Ogsz4qyqADulp7DywRZk=)
                          2: GbLh_EALv53LIGat49v-XJ6rLn0.crl (hash: CD1vkQrD609vb5cY62GWDIh6fwOZ9xfMiR9hMQuikCg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:0a:59:a9:56:4d:f6:d1:63:b2:85:83:97:9c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
        Validity
            Not Before: Aug 23 07:02:06 2025 GMT
            Not After : Aug 24 07:02:06 2025 GMT
        Subject: CN=b345511a34d697c2387c5637bac95288957beb9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ba:8e:a9:23:87:3d:80:c3:86:43:09:51:64:
                    40:c2:04:df:75:13:99:6e:6b:65:2c:fe:e2:24:ec:
                    07:1c:e3:0d:28:1e:3c:64:a2:4b:ff:95:48:c4:b4:
                    14:56:ca:c3:bf:8f:47:4a:2b:ce:30:07:1b:a3:e6:
                    30:d6:63:8f:4d:01:01:b2:3d:a4:22:bd:21:c4:d7:
                    39:31:4b:9c:63:a5:bc:a8:d2:e3:78:23:57:3e:a7:
                    75:ef:ad:6c:a9:45:89:c1:fd:9c:15:c2:94:78:a3:
                    60:3d:e0:09:9e:8f:91:c0:3c:a6:77:6d:0c:52:cf:
                    4b:ca:b3:7a:3d:28:0a:3b:04:c3:79:20:c9:39:ed:
                    ee:cb:58:bb:54:44:8a:da:8b:4d:cf:0c:3b:44:85:
                    21:bc:5a:4b:ee:b2:42:02:ea:78:8e:f6:b8:c5:14:
                    eb:2d:81:bb:64:66:43:34:0c:13:e4:c5:1d:5b:e6:
                    3b:55:bb:dc:33:9e:0a:e5:7a:91:d0:fd:dc:38:85:
                    8d:01:42:3f:8e:35:df:b2:0d:f3:cf:04:31:b3:5f:
                    9a:01:18:6c:6e:ad:fd:63:39:d8:bf:fd:10:06:1a:
                    7e:cb:7b:32:2d:9f:16:c2:4c:82:7f:b3:e9:9d:2f:
                    23:97:de:7b:7a:78:27:cc:1d:5d:83:33:b1:0e:a1:
                    ae:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:45:51:1A:34:D6:97:C2:38:7C:56:37:BA:C9:52:88:95:7B:EB:9A
            X509v3 Authority Key Identifier:
                keyid:19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:00:38:ee:b1:eb:b1:eb:9a:8c:94:be:f5:2f:19:aa:f2:6b:
         41:ef:14:62:b7:54:6f:44:8c:7a:e0:80:e1:60:b3:9f:d2:28:
         be:fb:ce:01:eb:d7:ca:6c:3b:f9:00:6c:0a:dd:e7:e4:87:0b:
         1b:58:de:6d:8c:f0:e1:96:53:bf:67:5e:63:06:c5:ce:05:53:
         62:cb:7f:cb:a8:dd:34:75:9f:0f:0f:71:c5:dc:8e:1c:d4:33:
         45:7a:7a:f0:11:41:3b:89:90:2c:78:e7:83:fb:a7:72:9b:10:
         bb:6f:00:a8:67:e5:bf:2d:ed:40:e9:e6:a1:e7:55:74:7c:8c:
         2d:20:fb:a3:d7:5a:48:ce:1d:13:66:13:f1:83:04:08:af:34:
         b2:ee:64:a5:52:99:e5:28:f2:43:16:22:f0:92:45:a5:5d:03:
         cb:ee:41:c3:cd:ff:ea:56:41:24:ae:9c:d6:1f:be:f2:bd:be:
         06:ea:12:d9:5e:34:6d:5a:2b:46:79:40:eb:39:78:63:7c:7c:
         cb:81:85:61:3c:aa:00:dc:c1:0c:dd:5c:41:3b:21:6d:73:1e:
         74:ba:25:fa:52:aa:26:80:06:ae:f4:67:15:df:51:d3:05:e8:
         d7:f1:cc:ac:1b:59:77:44:34:46:ce:5f:b5:07:45:43:59:6e:
         f1:b1:d7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:38:23 2025 by rpki-client