Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
File:                     gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft (raw, json)
Hash identifier:          dBBh0RgM2pZ1a3uCm4lLS+6o0zT3O0j+5DLka/ERWBQ=
Subject key identifier:   CB:E6:8F:82:47:6D:1E:45:78:F8:4B:8B:9A:59:CD:25:C5:99:F5:2D
Authority key identifier: 80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E
Certificate issuer:       /CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
Certificate serial:       0198432C31B5F228EA1C69F968E6A5CAF1D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
Manifest number:          0511
Signing time:             Fri 25 Jul 2025 20:00:26 +0000
Manifest this update:     Fri 25 Jul 2025 20:00:26 +0000
Manifest next update:     Sat 26 Jul 2025 20:00:26 +0000
Files and hashes:         1: gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl (hash: YqiwCszUsNaREl6rDR8qk30cADP9Pn2tNJmtV/FM7ig=)
                          2: kwCip9bpks_MxIN5r8NE5b6pcCA.roa (hash: ZeSOKj/aYYMZXd7Dug4q1iZDEoHYeGkqnVSfcCaU2uA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:43:2c:31:b5:f2:28:ea:1c:69:f9:68:e6:a5:ca:f1:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
        Validity
            Not Before: Jul 25 20:00:26 2025 GMT
            Not After : Jul 26 20:00:26 2025 GMT
        Subject: CN=cbe68f82476d1e4578f84b8b9a59cd25c599f52d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f7:31:96:47:d4:9f:2d:84:c9:29:28:c5:b3:
                    61:15:16:2e:43:fd:bb:b5:31:39:de:18:34:a9:2c:
                    ff:88:d9:f2:f8:ea:38:65:20:08:4a:06:6a:98:5d:
                    6e:97:b4:cd:bd:26:cc:ae:8d:84:2d:bf:17:7c:4f:
                    0b:d1:15:86:1c:12:b2:c4:b4:88:d2:7c:71:0d:c3:
                    ca:c2:4e:f5:e8:a9:67:a3:ec:93:5a:05:fc:82:bf:
                    80:2a:e4:74:f8:18:0d:94:fe:f2:0f:ae:b3:2b:53:
                    1e:b3:31:3f:08:f4:ae:c6:52:fd:c9:b2:74:bc:c7:
                    c7:4d:d5:6c:0f:d5:ca:0a:1e:79:53:27:4a:26:d4:
                    c7:80:14:d4:57:e1:88:96:f2:92:66:6b:07:19:d5:
                    05:c0:8b:c6:f7:36:2b:79:1d:f3:5b:61:f3:88:28:
                    b1:4a:5c:7f:97:3f:e4:0c:7c:4c:96:cf:70:ba:24:
                    01:74:a9:eb:70:8a:ad:00:b0:ea:a2:8f:a4:3b:a5:
                    e6:70:e6:09:2a:59:c1:1d:b7:5b:3c:f2:6e:3a:2f:
                    b0:5e:00:77:1b:8a:69:89:17:59:a9:7b:b7:03:73:
                    f5:7d:cb:08:d6:05:93:04:39:e3:85:07:fb:7c:b6:
                    96:94:9d:48:0f:44:7e:11:98:90:16:84:ae:d9:d4:
                    e1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E6:8F:82:47:6D:1E:45:78:F8:4B:8B:9A:59:CD:25:C5:99:F5:2D
            X509v3 Authority Key Identifier:
                keyid:80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:2f:cf:8b:43:72:1b:07:50:f9:80:65:12:e6:c3:e9:84:47:
         b9:dd:6d:e2:6a:6c:0c:aa:25:1f:9f:e0:46:54:91:f9:a9:c9:
         69:70:43:29:39:f5:10:b3:b3:73:cf:ae:cf:ae:0b:13:4d:34:
         d7:6a:9c:75:c9:90:76:c9:07:74:22:db:93:b1:19:43:0c:b4:
         d8:a5:44:19:04:e5:9f:e1:e8:6c:17:9c:00:7b:47:d4:73:ff:
         cd:b2:0c:30:be:68:3a:65:bb:84:11:97:72:b9:c1:92:36:dc:
         07:a4:3e:64:d2:fd:4a:2d:4f:c0:91:4d:13:11:d3:f2:e7:62:
         ae:6c:ef:5b:34:3a:53:ac:67:d5:ae:c6:25:f9:1e:b7:09:46:
         9b:f9:8a:3e:a7:8e:85:34:85:37:cc:eb:5c:90:34:b6:ec:34:
         5a:a4:c2:53:42:61:ea:47:4e:6a:94:6b:f4:40:38:bd:6d:2e:
         4b:8c:e5:bc:65:5a:cf:f9:fe:6f:d3:bf:89:10:3b:af:be:68:
         58:e8:e8:2e:d2:c6:3b:4a:01:c8:d5:c6:67:be:6c:4d:f0:08:
         69:0d:ed:84:81:56:c8:32:f6:54:ec:b8:f8:7b:56:a2:10:c5:
         9a:34:0b:39:f0:dc:eb:53:0b:d6:4d:df:8c:92:6f:28:f4:cc:
         65:fa:6f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 05:37:21 2025 by rpki-client