Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
File:                     gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft (raw, json)
Hash identifier:          Kgq4EwcAgAA0XXBolaM6RXN7bdyIeTq5EIoL+AePs9o=
Subject key identifier:   1A:6D:70:FA:51:D2:30:4F:78:6F:EB:AE:F7:D1:84:9F:68:66:FC:AF
Authority key identifier: 82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69
Certificate issuer:       /CN=82468b53967545e28e9267ccbf0069d87b259869
Certificate serial:       0197B8C5F0825B8AA784617D6DCCE155AB34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
Manifest number:          1512
Signing time:             Sat 28 Jun 2025 23:01:09 +0000
Manifest this update:     Sat 28 Jun 2025 23:01:09 +0000
Manifest next update:     Sun 29 Jun 2025 23:01:09 +0000
Files and hashes:         1: 7bfhk4avMv3aXwEYlLbXhXoy75k.roa (hash: ahW1+x6JyHSj5mcCjtaoHK41xJuZSnTDOh9RfWnmSUA=)
                          2: gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl (hash: Q+AQRKpLFpfid8JYdgQRFlgZe+mKGHoL4qLwB9nGxFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 23:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:c5:f0:82:5b:8a:a7:84:61:7d:6d:cc:e1:55:ab:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82468b53967545e28e9267ccbf0069d87b259869
        Validity
            Not Before: Jun 28 23:01:09 2025 GMT
            Not After : Jun 29 23:01:09 2025 GMT
        Subject: CN=1a6d70fa51d2304f786febaef7d1849f6866fcaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bb:34:11:8f:a4:df:0d:62:76:6c:c3:93:c1:
                    a8:fd:d0:68:a3:01:b0:29:14:23:3c:dd:a1:cf:07:
                    f8:31:e9:e3:01:27:86:21:d3:07:a6:f2:70:f3:16:
                    b4:2f:61:51:d0:a4:99:6f:c9:c1:8b:11:cc:1b:cc:
                    45:26:ef:43:1f:64:c3:19:d0:2c:a4:f5:08:58:15:
                    53:0b:56:ba:81:e3:00:c1:a3:95:22:e5:a7:e7:07:
                    8c:80:b0:3f:fd:66:af:ee:ca:2d:1e:60:25:49:88:
                    bf:94:a3:fa:b2:54:e2:fd:a9:e7:cc:b8:67:11:9e:
                    72:1b:6a:22:88:3b:41:61:20:4f:77:11:c6:ec:e1:
                    6a:99:9c:7a:d3:8b:a9:a2:fd:54:b6:39:b7:ab:f5:
                    c7:2b:27:99:9c:c2:db:21:c0:aa:c7:09:5b:2a:bc:
                    fd:e4:49:d5:e8:78:3b:0c:c5:b9:a1:26:a6:a8:b6:
                    d0:8e:7c:35:ae:77:b6:d1:4f:ce:5b:cf:32:71:5f:
                    96:fa:43:15:1e:5d:01:33:24:ed:89:0c:e5:48:48:
                    f6:5d:51:b8:99:17:5d:45:ce:ce:f4:87:09:1d:f5:
                    e2:0b:0d:e3:b1:df:76:2e:2f:db:97:87:d2:25:5e:
                    a3:7d:00:9f:69:f5:46:20:54:f1:d6:01:02:7b:65:
                    60:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6D:70:FA:51:D2:30:4F:78:6F:EB:AE:F7:D1:84:9F:68:66:FC:AF
            X509v3 Authority Key Identifier:
                keyid:82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:12:7c:cd:77:d4:68:32:68:ba:5c:6c:e3:95:e1:1f:eb:e1:
         90:1b:57:ae:8c:82:38:08:e4:6e:3d:5e:ea:26:43:2a:1d:36:
         64:86:63:30:6a:a9:9f:b3:03:c7:70:7d:a2:20:43:9e:ae:5a:
         e9:fd:11:95:f4:a5:bc:56:72:27:bf:da:be:b0:e4:4a:a3:75:
         95:f3:20:dc:78:f2:90:30:32:55:b4:a8:d8:b2:22:0d:ce:ec:
         67:85:f2:8d:5d:11:e7:c3:59:51:7c:21:d6:eb:0b:7c:2b:a1:
         3d:f1:4f:c8:2f:7e:52:89:4c:9e:c0:65:57:19:7d:87:15:ad:
         01:0c:10:48:92:06:35:9f:bf:fd:35:2c:bf:4c:b3:e9:40:8f:
         89:e6:8e:1a:e5:91:62:1e:a9:6c:03:bb:77:c0:74:21:4e:c5:
         73:96:81:9d:c8:5a:55:56:21:e9:46:96:c3:81:f5:c6:bc:d8:
         7f:34:57:8a:e1:0d:29:3b:f7:e0:d3:c5:11:4c:57:47:c8:d1:
         5c:83:4d:d9:e4:54:5f:60:c5:e7:13:c7:a8:90:d6:1c:a3:d2:
         ef:7e:c5:74:06:16:3b:8f:5b:e4:52:8b:4e:b6:a6:e9:c6:7b:
         27:ec:e5:4b:3c:a2:40:25:b7:5c:5b:f5:c1:81:27:3c:2b:7b:
         e1:96:2d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:24:29 2025 by rpki-client