Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
File:                     GsBs8snpV1N0OXNPBYSoIEp7gxE.mft (raw, json)
Hash identifier:          ZVMUDgGevJWZb2s/WsNtyxEzrUKfGGgyKpLGaVcGTc0=
Subject key identifier:   29:CC:BA:9A:2A:51:00:4E:67:A2:48:7D:41:42:BE:F4:3F:BA:DC:D3
Authority key identifier: 1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11
Certificate issuer:       /CN=1ac06cf2c9e957537439734f0584a8204a7b8311
Certificate serial:       019840CFE47D8DF5B721D3297ED7806219BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
Manifest number:          158E
Signing time:             Fri 25 Jul 2025 09:00:22 +0000
Manifest this update:     Fri 25 Jul 2025 09:00:22 +0000
Manifest next update:     Sat 26 Jul 2025 09:00:22 +0000
Files and hashes:         1: GsBs8snpV1N0OXNPBYSoIEp7gxE.crl (hash: pU/YL2UzCcI73UGF+L+4KH3JjdHiPZKjHD9QfhTgxLw=)
                          2: td5of2c-zNIx95LtRN04mtFJYAg.roa (hash: rMhWdT4I0hK2RGp5gGoiamCjAXi8+XSWiM4KXZ7JjMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 08:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:40:cf:e4:7d:8d:f5:b7:21:d3:29:7e:d7:80:62:19:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ac06cf2c9e957537439734f0584a8204a7b8311
        Validity
            Not Before: Jul 25 09:00:22 2025 GMT
            Not After : Jul 26 09:00:22 2025 GMT
        Subject: CN=29ccba9a2a51004e67a2487d4142bef43fbadcd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:78:98:99:8d:20:80:4f:5f:a3:f2:ea:ff:5d:
                    bc:d7:df:24:24:09:23:2a:77:89:c0:d8:43:86:61:
                    ba:06:77:f1:b2:34:fd:46:26:61:d5:bf:27:d4:c6:
                    37:d0:11:99:14:ed:95:f8:91:b5:8b:a3:c7:08:94:
                    5e:03:15:82:6c:38:ac:a2:6b:93:d1:11:35:b6:27:
                    7e:e9:6d:95:66:27:11:46:e3:10:fb:e1:e3:82:1f:
                    bb:d1:b3:79:c1:41:57:87:c2:62:4a:3e:3b:54:ac:
                    90:1b:e6:66:2c:68:db:20:73:5c:2f:b2:d2:e6:72:
                    1e:ee:54:5a:8f:d2:b8:8c:a2:1a:cd:11:ce:47:8d:
                    6d:b8:49:b8:44:d5:e1:57:69:80:8c:00:d2:90:f8:
                    f1:ad:57:d4:5f:e4:c9:e2:4a:14:d7:14:ec:78:34:
                    a1:b7:8d:7f:2b:51:b7:7f:01:4a:cf:5d:94:9c:16:
                    c2:6d:2f:13:97:2d:4f:5c:23:ee:9b:e3:c7:74:ca:
                    e2:9d:cc:6d:88:1c:83:87:42:c1:75:96:6b:a6:12:
                    fc:d8:c5:15:41:60:19:0f:65:ed:92:19:9f:88:a2:
                    11:70:18:ae:55:ad:9f:59:aa:02:ee:32:84:e4:97:
                    4b:71:ba:c5:7b:96:12:03:bd:5b:3b:f6:e6:ad:f6:
                    b8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CC:BA:9A:2A:51:00:4E:67:A2:48:7D:41:42:BE:F4:3F:BA:DC:D3
            X509v3 Authority Key Identifier:
                keyid:1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:12:24:bd:57:49:0e:42:75:60:5c:9a:e6:c7:4f:79:67:4d:
         ce:57:e7:45:7e:25:cb:3b:e5:e0:71:0c:39:d2:6a:7c:bc:fe:
         3a:05:67:d3:51:a8:1e:66:38:71:d1:70:0a:b8:d7:1b:0e:16:
         19:b9:b7:07:cd:2f:9f:08:56:66:5c:34:94:bd:25:c9:d2:ce:
         97:10:58:e2:21:ce:9c:14:d2:f4:f3:bf:87:2f:81:58:f4:88:
         52:92:96:ab:56:0f:f2:df:00:23:b2:bf:51:1b:ba:3d:b4:54:
         62:56:05:84:0c:3f:71:89:bf:6c:65:12:18:6b:be:2d:99:2b:
         9e:f9:d4:b4:23:ff:99:3a:ca:5b:7d:3e:5c:3c:05:a6:75:95:
         d1:45:9f:f8:00:50:29:ce:81:98:b5:ac:05:05:1d:8b:b7:cf:
         41:eb:1f:e3:81:85:3c:7e:c9:7c:f9:16:30:2a:e7:81:d2:70:
         26:b6:c6:75:4e:ca:df:99:64:06:31:9a:1b:1e:4d:48:c7:f5:
         3d:0d:ea:09:bc:f7:3a:63:1d:18:f3:4e:81:71:81:06:00:a6:
         76:05:87:c7:75:e7:99:ed:31:81:91:81:8f:48:58:8b:96:b9:
         3b:50:7f:2d:19:19:79:c6:dc:e2:9f:28:6e:62:13:b1:60:6b:
         c9:35:ed:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:46:22 2025 by rpki-client