Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
File:                     GbLh_EALv53LIGat49v-XJ6rLn0.mft (raw, json)
Hash identifier:          Ekid3D/laXBOIy27KuQP9ViLM1NyTURBqbEqwCvDgQ0=
Subject key identifier:   63:67:8E:BA:EA:B7:8C:A5:D9:50:43:C5:D8:CC:2C:7E:AD:9E:80:C3
Authority key identifier: 19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
Certificate issuer:       /CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Certificate serial:       01985268740199FDEFD72E140B91B3445502
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
Manifest number:          0EDD
Signing time:             Mon 28 Jul 2025 19:00:33 +0000
Manifest this update:     Mon 28 Jul 2025 19:00:33 +0000
Manifest next update:     Tue 29 Jul 2025 19:00:33 +0000
Files and hashes:         1: GOyl6U-dGvVD0-jKWtZSd5lPcvw.roa (hash: UpOJI3oK6cWcuZSPYztLiL8Ogsz4qyqADulp7DywRZk=)
                          2: GbLh_EALv53LIGat49v-XJ6rLn0.crl (hash: qSKpE6dnwMjIOR4PNea0yXI2bAL8CYyBP89CaXDtOBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 19:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:52:68:74:01:99:fd:ef:d7:2e:14:0b:91:b3:44:55:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
        Validity
            Not Before: Jul 28 19:00:33 2025 GMT
            Not After : Jul 29 19:00:33 2025 GMT
        Subject: CN=63678ebaeab78ca5d95043c5d8cc2c7ead9e80c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b4:9b:5f:00:33:07:f8:1e:77:86:0e:8d:6f:
                    93:a9:8f:06:1d:77:af:bb:67:5a:96:98:5e:8e:2c:
                    36:38:44:29:2d:b9:c0:87:10:10:49:b4:a0:91:3c:
                    df:53:ee:c1:55:db:29:d7:d4:39:13:b5:73:34:24:
                    88:58:11:bd:d3:99:57:21:e0:63:2b:e1:2d:a4:08:
                    02:72:c4:e7:09:4a:f4:d7:70:14:82:ce:ae:a4:25:
                    65:02:f5:3d:e3:60:76:9b:4d:d7:f2:1b:02:a2:fe:
                    b9:cf:a8:10:98:9f:c0:19:38:3e:de:98:d0:8f:5b:
                    d4:a0:53:f8:03:b4:18:74:d5:50:22:7f:1c:f8:d2:
                    c3:b2:8a:4c:a7:7b:ad:c9:36:2d:57:0d:71:c4:3b:
                    21:23:05:e8:10:58:e4:c3:65:f9:68:b0:81:c3:a7:
                    f0:2d:94:c8:8e:2c:f7:aa:a7:7a:e2:a3:cf:08:cf:
                    cf:89:00:99:05:88:c4:0b:69:92:e2:8c:66:30:81:
                    2a:1e:65:01:c3:9b:24:de:90:5a:a3:ef:26:11:7b:
                    ee:05:28:8b:90:58:bf:3b:63:44:ec:5c:a4:0d:79:
                    0a:1a:ff:39:70:d2:00:56:df:39:08:cd:02:51:7c:
                    ec:00:6d:7d:99:66:40:a1:d5:df:91:8b:ac:19:86:
                    c1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:67:8E:BA:EA:B7:8C:A5:D9:50:43:C5:D8:CC:2C:7E:AD:9E:80:C3
            X509v3 Authority Key Identifier:
                keyid:19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:bd:71:4c:9c:f2:44:69:a7:93:78:bb:94:76:91:07:50:7b:
         e3:28:ce:4f:f2:62:47:7e:b8:ba:9b:d1:ed:12:de:f6:30:40:
         d3:c8:bc:e5:0d:60:f4:53:cf:fd:fd:ec:0b:7c:7d:59:25:21:
         ba:55:12:75:27:64:18:ff:ea:fa:68:46:49:78:f5:47:1a:f8:
         ed:cb:c4:2f:b6:cb:c0:b0:88:80:43:19:10:ec:f6:9f:95:6c:
         63:b9:bd:8e:f9:04:1c:a9:54:12:84:94:1a:9f:42:d5:0b:87:
         19:15:4a:08:09:43:dc:0f:a6:fd:0a:07:1b:b7:a6:c5:d1:5b:
         89:a9:f5:ad:bf:8d:de:ea:9b:7f:7b:b8:cc:c1:2d:fe:c4:1b:
         7c:63:d3:39:46:b7:c1:41:d1:45:b3:9c:36:91:0d:fa:86:ed:
         14:2f:8f:0f:02:13:b0:b2:e6:a0:b6:93:64:0e:cc:ae:85:92:
         d3:79:d6:70:76:3f:21:18:b9:ea:8e:49:c1:a6:8a:12:7c:23:
         57:c8:93:59:e0:37:e8:30:b7:ee:e8:c2:c2:70:aa:02:b5:6b:
         a0:3e:b3:0e:39:cc:64:00:35:4c:e1:a0:c5:3a:e8:a1:56:6c:
         d1:1c:c5:4f:d9:34:92:b4:d5:ea:ec:1c:d2:19:53:4f:67:2b:
         3b:e3:2e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:36:47 2025 by rpki-client