Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft
File:                     Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft (raw, json)
Hash identifier:          DBme5Nma+Buo7gFiqGQK16meqyrlfImZ0wWMhSMwfWY=
Subject key identifier:   6A:E5:7E:F6:C1:72:33:AA:4A:CF:16:A3:29:37:8A:C2:8B:97:8E:B5
Authority key identifier: 19:CE:48:8E:FA:3C:18:4F:4A:CB:2F:C3:0E:B1:A7:1F:A1:16:F9:B4
Certificate issuer:       /CN=19ce488efa3c184f4acb2fc30eb1a71fa116f9b4
Certificate serial:       019848F717C64162CA76ACEF7AB19E12CBE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft
Manifest number:          0A4A
Signing time:             Sat 26 Jul 2025 23:00:09 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:09 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:09 +0000
Files and hashes:         1: Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl (hash: n/R24xLQUhBL/uscF3ecHfItHWOl3jvtTtCXJzwIing=)
                          2: vczBs4Goi10ecTWa3tK1YBxJ8fE.roa (hash: gc2DMvIse8l38XyQwNHPrj9Yz7w21wzufb/ypACqbDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 23:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:17:c6:41:62:ca:76:ac:ef:7a:b1:9e:12:cb:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ce488efa3c184f4acb2fc30eb1a71fa116f9b4
        Validity
            Not Before: Jul 26 23:00:09 2025 GMT
            Not After : Jul 27 23:00:09 2025 GMT
        Subject: CN=6ae57ef6c17233aa4acf16a329378ac28b978eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:2b:d3:19:0a:b2:4c:3d:bb:0a:72:8a:88:
                    7b:f9:01:4e:a1:54:cd:d5:bc:b5:82:bf:fd:10:a9:
                    7b:cb:af:d6:c0:76:37:0c:37:95:51:5e:54:21:00:
                    17:1b:5d:73:05:81:5d:73:7e:19:f6:8e:fb:26:b4:
                    35:1b:dc:24:2b:08:2a:04:d2:b6:1c:3c:f2:20:3a:
                    2e:72:e0:5c:71:bd:45:29:49:ab:d8:b0:16:16:5b:
                    b3:19:fe:c1:a0:45:74:c2:62:1d:c7:11:c3:56:0c:
                    82:b8:ae:e8:1a:42:21:24:88:7e:89:c4:dc:a9:56:
                    ea:3d:4f:67:ae:cc:fc:9d:fc:32:38:f5:53:89:83:
                    b4:e5:69:92:a8:3c:c5:85:71:c7:b9:2d:0b:82:71:
                    6a:0f:ee:97:7a:c9:80:3f:23:c6:9a:a0:00:d7:76:
                    9f:0a:19:27:3a:83:8e:07:04:91:a2:d2:5d:18:01:
                    2d:37:f9:3d:a3:18:3c:92:1d:e2:a8:50:cf:56:8b:
                    a1:ff:19:4d:9f:e8:7f:fd:82:97:19:70:42:d0:8f:
                    2f:27:b9:31:d8:87:85:27:7d:4c:59:38:b0:d0:64:
                    ff:a9:ba:65:23:3d:c9:6f:02:60:78:47:a0:f6:3e:
                    c4:2e:64:6d:9b:f7:2f:80:10:ac:01:94:53:15:d7:
                    7b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E5:7E:F6:C1:72:33:AA:4A:CF:16:A3:29:37:8A:C2:8B:97:8E:B5
            X509v3 Authority Key Identifier:
                keyid:19:CE:48:8E:FA:3C:18:4F:4A:CB:2F:C3:0E:B1:A7:1F:A1:16:F9:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0fef71-922e-4448-b37d-f740b9e1c480/1/Gc5Ijvo8GE9Kyy_DDrGnH6EW-bQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:ec:61:b8:cd:3d:b8:8b:7f:bc:0b:0f:0a:da:2b:ba:5c:80:
         5c:3f:5a:bb:8e:fc:fd:97:4d:62:d1:e8:2c:95:72:77:f1:d3:
         19:93:59:3e:bd:fa:58:70:1c:8a:22:64:1b:af:2e:03:fe:ec:
         5f:72:3b:a8:2a:4b:b1:e0:a4:c3:1a:fe:9a:7b:13:cb:dc:78:
         4e:54:d4:d0:96:38:4f:bc:4b:ba:94:5e:e3:74:01:a6:55:db:
         fd:b7:95:88:2f:fd:82:e5:4b:02:b2:7e:b5:76:27:bd:b5:16:
         3b:62:c7:a8:70:d3:dc:bb:cb:19:06:55:e9:c3:7b:40:75:f3:
         4d:3b:5b:c0:ae:af:e6:dd:1e:95:0a:78:29:f5:c0:b5:38:d9:
         94:af:db:c1:f8:f4:8d:46:87:4b:7e:af:00:5f:19:66:a1:56:
         46:9a:ee:d6:d6:55:8d:d0:f0:fe:00:bf:47:a7:e8:39:43:10:
         53:98:ae:69:67:70:0e:fd:a7:e0:da:63:ee:e3:c3:04:71:0b:
         5e:f9:cc:a6:e2:8a:4f:71:10:a7:f8:c6:60:ca:2e:3e:08:d8:
         28:2a:10:07:d2:14:6a:2b:9e:69:95:26:02:c2:a5:b9:e3:cd:
         57:60:5f:15:30:af:11:d7:36:38:9a:10:6c:98:28:91:c3:1b:
         29:b7:ce:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:24:57 2025 by rpki-client