Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
File:                     gcGu10qtBrG4XFumd5wWH0pSs8Q.mft (raw, json)
Hash identifier:          4fqfWpVIfeF71rAchZ6gH8H1I8n9zo+kv6gSCsIX94w=
Subject key identifier:   78:69:14:3D:A6:B8:A7:45:76:8B:43:3D:80:7C:BE:41:83:C0:90:E4
Authority key identifier: 81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4
Certificate issuer:       /CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
Certificate serial:       01984C2FD0560F72737DE5697C932042A594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
Manifest number:          1603
Signing time:             Sun 27 Jul 2025 14:00:58 +0000
Manifest this update:     Sun 27 Jul 2025 14:00:58 +0000
Manifest next update:     Mon 28 Jul 2025 14:00:58 +0000
Files and hashes:         1: EgJWkP_ATvd-WaK0hqp6IaIW95g.roa (hash: Qp/vVw2n2OIqo8aQ+vDa79aTq8YN8BxSb8x/nDkT+pg=)
                          2: gcGu10qtBrG4XFumd5wWH0pSs8Q.crl (hash: e3pkP7sQhkqyfwxlMzLoa1sw6IZGBu97nHZXcVDIAGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 09:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4c:2f:d0:56:0f:72:73:7d:e5:69:7c:93:20:42:a5:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
        Validity
            Not Before: Jul 27 14:00:58 2025 GMT
            Not After : Jul 28 14:00:58 2025 GMT
        Subject: CN=7869143da6b8a745768b433d807cbe4183c090e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0c:81:bb:01:e6:a4:82:ef:00:77:16:f9:f9:
                    c7:1f:ae:e5:3e:13:3b:3a:1d:03:6c:1e:ed:55:0a:
                    97:22:8f:40:00:03:59:99:c0:ec:7b:aa:90:1c:46:
                    38:e1:71:bd:56:f6:e1:96:9e:52:91:26:de:f1:10:
                    39:27:c1:76:af:c6:e0:d5:61:0a:32:0b:3e:c0:0a:
                    c5:7c:9e:74:c6:1b:f3:65:aa:21:f9:6c:5f:67:65:
                    fc:c3:ee:09:03:cf:8d:92:12:20:32:e3:58:61:f9:
                    0b:42:1e:4a:de:59:9e:bc:3f:78:86:d6:2a:7b:64:
                    00:f1:4d:8f:45:0a:3f:b8:17:16:b4:c0:32:40:e3:
                    1b:2b:b6:4c:2c:96:8c:58:bb:d9:2b:ea:95:c7:05:
                    b2:ee:ed:0d:85:41:81:79:32:84:4d:3a:ee:74:53:
                    28:b2:cd:5b:c2:76:bb:96:9b:78:a4:0f:40:21:a7:
                    3e:e7:c7:fb:ba:06:ec:9b:10:ca:ec:7f:3f:28:d6:
                    03:92:c5:fe:cc:84:58:ba:7c:bf:86:c6:32:37:41:
                    6d:a5:d3:21:1b:2c:1d:bc:36:7d:22:b2:a8:34:db:
                    ab:c8:d9:9f:56:f0:ad:e6:5b:0c:55:87:da:4d:10:
                    b9:a0:5c:fc:52:b9:65:6e:4a:2b:46:24:8c:2d:f1:
                    49:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:69:14:3D:A6:B8:A7:45:76:8B:43:3D:80:7C:BE:41:83:C0:90:E4
            X509v3 Authority Key Identifier:
                keyid:81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d9:12:d2:a2:f1:2e:a9:f1:da:57:8d:c8:7c:43:56:6a:6e:
         ba:10:9f:1d:be:73:c1:39:e5:ef:02:1a:0c:33:3e:9e:53:b8:
         59:b8:b1:78:e6:5b:cd:0d:df:ae:f1:2e:3c:ec:8c:8c:7a:b3:
         d9:00:b6:6e:6f:9b:89:62:0a:c0:25:b6:56:8f:7c:10:4a:d4:
         2a:16:36:00:c6:6d:13:e5:ae:ba:5d:37:57:9d:d9:71:a5:6c:
         da:3c:fe:a6:0e:d8:ac:28:d3:b5:70:a7:ec:d4:50:1d:3b:95:
         3a:42:6e:f6:a8:e3:80:2e:32:65:0d:b3:a9:75:0f:ad:ed:25:
         13:1e:f3:57:58:43:0c:cc:1d:9f:b3:c9:4b:f8:e9:70:7c:6c:
         6f:23:8d:95:a7:f2:cd:63:34:ed:29:e6:fe:5f:e4:53:3d:f6:
         47:a2:86:1d:da:1a:ad:c9:c0:82:25:9d:a3:38:f1:78:15:73:
         11:53:7c:50:85:10:f6:9c:83:f8:26:52:d4:b8:1a:cb:1e:25:
         87:35:f6:25:4b:c0:9f:f3:7c:20:f7:70:39:37:b7:cf:ba:8e:
         9e:f6:95:1f:c4:d9:fb:47:2b:b9:8b:99:7d:96:54:15:ad:61:
         56:d7:cd:e5:d4:58:f0:f2:e8:a4:2b:80:27:f7:75:52:85:ad:
         30:1b:72:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:33:55 2025 by rpki-client