Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
File:                     GCJVGHajpiZZn0Z8eucJuBwU30k.mft (raw, json)
Hash identifier:          8rK7UPMej/NzXGR2m9EplSjk2bLaLSLnP7EUsVBnf5c=
Subject key identifier:   C1:FB:E9:6E:A3:09:D1:DA:AC:71:D9:5E:0A:06:2F:0F:61:2F:E2:C7
Authority key identifier: 18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49
Certificate issuer:       /CN=1822551876a3a626599f467c7ae709b81c14df49
Certificate serial:       0197BA7E0223752070E5A3BE1BD2B3FD272C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
Manifest number:          0E12
Signing time:             Sun 29 Jun 2025 07:01:49 +0000
Manifest this update:     Sun 29 Jun 2025 07:01:49 +0000
Manifest next update:     Mon 30 Jun 2025 07:01:49 +0000
Files and hashes:         1: GCJVGHajpiZZn0Z8eucJuBwU30k.crl (hash: onaHsZNE+nit7xu08o78wByQS89N/Qvn6McD/azKHS4=)
                          2: zPNwPn3PfVOL4wGom7HVDS4IKn8.roa (hash: zy7voOzOVbZPTN+jLWETC47nf/PEol3aN9sp5d/kZvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:7e:02:23:75:20:70:e5:a3:be:1b:d2:b3:fd:27:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1822551876a3a626599f467c7ae709b81c14df49
        Validity
            Not Before: Jun 29 07:01:49 2025 GMT
            Not After : Jun 30 07:01:49 2025 GMT
        Subject: CN=c1fbe96ea309d1daac71d95e0a062f0f612fe2c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:00:98:f3:59:cd:e5:1c:9f:aa:ba:b8:f1:d9:
                    0b:93:d7:92:fe:f9:79:c5:20:48:a5:a2:6c:c0:1b:
                    7a:1a:b9:2e:d4:66:7a:19:23:a2:99:12:8e:7e:82:
                    98:28:9e:b2:35:46:71:2f:c0:31:ca:3a:2c:2a:c6:
                    9d:7b:9a:ab:f6:5b:e5:4e:48:2e:61:f4:3d:03:48:
                    9d:a3:4e:76:fa:92:aa:18:ca:e3:ad:0a:eb:a5:49:
                    00:e5:2b:59:43:3b:a2:00:64:d2:c7:12:8d:eb:2e:
                    86:f8:f5:0c:f3:84:62:8b:77:5f:ad:ae:43:90:5e:
                    2e:76:53:bc:8a:54:68:84:e5:0e:52:65:4c:ae:35:
                    fc:fb:fb:6b:ee:a7:fc:15:92:51:23:0b:c2:63:0f:
                    ca:29:60:ec:f2:b5:c8:ea:94:82:31:a7:09:d4:e3:
                    7d:3e:10:cd:20:29:1c:1d:5c:cd:c5:c6:7b:33:11:
                    46:7c:07:35:32:33:c2:fb:92:3c:07:29:e8:3d:bf:
                    04:20:03:d2:1d:ab:03:07:e0:95:dd:df:ca:15:cd:
                    c8:f6:5b:f5:6a:19:f3:b5:6c:2b:62:fe:af:b4:5f:
                    90:26:59:fb:10:70:17:83:a9:d4:15:2f:82:2a:50:
                    1e:8b:07:0a:3b:9b:0a:b4:0a:00:be:ba:0e:c2:9d:
                    79:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FB:E9:6E:A3:09:D1:DA:AC:71:D9:5E:0A:06:2F:0F:61:2F:E2:C7
            X509v3 Authority Key Identifier:
                keyid:18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:53:d5:ef:cf:99:fa:9b:ea:61:c0:3c:af:bf:4b:ca:09:ed:
         76:29:f2:fb:4d:c9:d2:60:ff:d4:e9:a7:72:c8:ae:1a:f6:a4:
         1d:a5:76:0b:4f:69:1a:1d:fc:34:a5:c9:f5:7a:1c:cb:27:7b:
         c8:cf:b2:20:eb:b9:45:7b:56:79:ec:e3:08:43:54:b9:9b:dd:
         8e:0a:1b:a9:7d:c6:50:8a:7d:2d:ad:fe:6a:b6:c1:16:68:d3:
         c7:a9:bd:97:63:a8:7d:a9:15:95:a2:8b:5d:35:ef:00:55:11:
         b0:86:15:89:aa:00:3c:21:cb:c8:3e:18:61:6a:eb:12:bd:b2:
         c5:4b:7a:2f:3d:33:41:2a:e7:40:e7:7f:61:a3:01:d7:3d:b8:
         a5:d6:f2:70:3c:28:37:12:a2:d0:c1:ad:4c:76:a2:74:77:c4:
         eb:9f:bd:c1:ef:0b:aa:20:27:dd:c4:4a:d2:96:af:ea:ef:65:
         25:b0:95:1a:b8:6c:51:60:f0:78:2b:8e:84:0f:33:cb:61:92:
         e7:1f:d2:3d:c8:19:87:92:0f:b4:97:21:3b:69:fe:e6:9a:73:
         2d:d3:03:fa:3b:d3:61:0f:9c:ef:b0:93:c7:9f:f1:9f:93:54:
         55:69:aa:e1:c2:a6:f8:35:aa:92:b3:f2:b4:e4:fd:07:76:1b:
         4e:89:ad:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:26:11 2025 by rpki-client