Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
File:                     GlBzFFuSbpppBeupGOIetM8crhA.mft (raw, json)
Hash identifier:          +IN4HiADVmN2lZuIaeZSKfSwVyYTfc5tylKs0Cxpy+k=
Subject key identifier:   10:1C:F7:54:AB:A0:B7:1F:B5:00:17:8C:52:63:6D:C3:A7:C1:75:2E
Authority key identifier: 1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
Certificate issuer:       /CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Certificate serial:       01984C2F25CB889CBA651451A29A7D1F4C0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
Manifest number:          1601
Signing time:             Sun 27 Jul 2025 14:00:14 +0000
Manifest this update:     Sun 27 Jul 2025 14:00:14 +0000
Manifest next update:     Mon 28 Jul 2025 14:00:14 +0000
Files and hashes:         1: GlBzFFuSbpppBeupGOIetM8crhA.crl (hash: s/1bLEQC76wQWcjtZydDICLys9ARcrV7fgn+KE1zIS8=)
                          2: dMt5taNEKL2LVthFtJfZ1Mz0Tog.roa (hash: EAYDIktNqR1sTvpYHnGCV+A2c1ts/mG6hnIfZ1QhWYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 09:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4c:2f:25:cb:88:9c:ba:65:14:51:a2:9a:7d:1f:4c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
        Validity
            Not Before: Jul 27 14:00:14 2025 GMT
            Not After : Jul 28 14:00:14 2025 GMT
        Subject: CN=101cf754aba0b71fb500178c52636dc3a7c1752e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:37:f3:e8:7c:f1:e3:fc:ad:51:83:54:00:48:
                    6d:b6:48:47:f3:68:db:cc:61:58:08:21:de:9d:f8:
                    21:08:7c:4c:ea:25:17:30:9a:7a:49:b9:15:ef:23:
                    47:56:3c:2d:e1:0b:4e:49:c8:0e:2a:30:5b:7a:95:
                    a5:74:78:60:f2:c8:57:c8:cd:0e:e4:89:ef:9f:6b:
                    98:74:d0:7d:55:5f:67:9a:1c:df:57:6e:bf:2d:12:
                    c1:cd:96:4c:d2:3f:76:e3:1d:68:90:01:77:e3:09:
                    8a:fd:b9:e5:ec:a9:53:d3:97:7c:2b:e1:87:7d:8e:
                    61:56:4f:25:39:f4:ce:fe:fa:00:c5:52:4c:4f:12:
                    e7:cf:cf:66:d5:f7:3e:ad:57:73:b6:7d:48:af:50:
                    fb:24:93:93:0c:fe:32:10:ea:74:b8:b1:81:7c:0a:
                    9f:52:31:a6:1a:05:88:14:77:81:7b:df:19:e8:92:
                    1b:05:a3:f1:e2:fe:1f:d1:b9:51:d7:57:95:15:f2:
                    7d:32:d9:d1:1f:e7:a6:2d:d8:2d:d0:f5:87:96:db:
                    b7:f6:0d:17:00:87:c8:d5:26:09:3e:ce:5e:c6:a9:
                    1f:08:3a:9e:ce:5d:6d:fb:fc:15:f0:03:ef:2d:cf:
                    a3:ac:ae:6c:38:d3:2a:9e:26:da:25:01:25:8c:9c:
                    66:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1C:F7:54:AB:A0:B7:1F:B5:00:17:8C:52:63:6D:C3:A7:C1:75:2E
            X509v3 Authority Key Identifier:
                keyid:1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:e9:bd:28:47:11:f5:02:17:65:9b:b9:c2:e8:d5:b4:84:ee:
         bf:d5:a2:95:21:d7:37:13:b2:66:ec:5c:df:bc:fe:ac:93:19:
         fc:59:59:b5:9c:f3:3f:a1:94:ff:28:f3:4b:ce:63:da:db:c2:
         93:a1:09:21:2c:0d:5d:f7:8f:ce:39:9c:48:09:11:8c:a2:48:
         e1:32:17:f9:49:66:09:59:82:1b:b0:3b:fe:01:7d:5f:79:37:
         34:69:43:5e:ae:11:8f:ca:0d:ca:dd:82:51:58:c7:a2:2b:86:
         8c:e7:2d:82:7b:c6:b3:c8:e9:48:37:e1:b6:37:ef:e6:72:ed:
         cf:fd:71:47:99:55:69:c7:94:ee:ef:a0:0b:9e:98:8d:e9:48:
         a5:a2:3a:e6:08:40:eb:78:e8:6a:37:8e:b4:d3:af:c0:28:5e:
         2d:bf:2a:70:5b:ee:9e:67:16:16:da:95:c3:48:c0:c9:4a:4e:
         14:7f:9e:3a:5c:9f:f9:1f:99:88:ed:b8:5e:5e:6a:dc:f2:19:
         18:01:f2:45:90:10:6f:6d:66:5c:bc:f5:27:5f:22:14:2e:f4:
         04:22:dd:e4:04:9b:e3:1f:fd:e5:e1:7d:aa:6d:91:9d:2f:36:
         7d:ce:dd:95:e6:02:74:8c:2e:7d:8c:f8:27:51:88:d7:f4:df:
         0d:35:b4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 18:18:36 2025 by rpki-client