Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
File:                     GbZo5W_iW9bcU4AO4XdQYezAkgY.mft (raw, json)
Hash identifier:          r0m365/5nXrajCpU/mVSBUnsmcK08G1tmlynoOh1dJM=
Subject key identifier:   7E:D9:94:EF:01:DB:D0:3B:7D:14:39:A4:FB:AF:ED:C5:7E:9C:BA:4F
Authority key identifier: 19:B6:68:E5:6F:E2:5B:D6:DC:53:80:0E:E1:77:50:61:EC:C0:92:06
Certificate issuer:       /CN=19b668e56fe25bd6dc53800ee1775061ecc09206
Certificate serial:       0198296C992DCF3DF5A7CE28308B395CFC27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
Manifest number:          43
Signing time:             Sun 20 Jul 2025 20:00:39 +0000
Manifest this update:     Sun 20 Jul 2025 20:00:39 +0000
Manifest next update:     Mon 21 Jul 2025 20:00:39 +0000
Files and hashes:         1: GbZo5W_iW9bcU4AO4XdQYezAkgY.crl (hash: GffzUNL2bPs38b7DvHUalh9qfaRgEwjoJQise+V8b6c=)
                          2: RiL09rS6VjBEVN__JOM2U5RqEcI.roa (hash: uYgL/yhRbt5qevmx86ZZVWKBSugMaqO2EFz8Vo1U7Pk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 20:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:29:6c:99:2d:cf:3d:f5:a7:ce:28:30:8b:39:5c:fc:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b668e56fe25bd6dc53800ee1775061ecc09206
        Validity
            Not Before: Jul 20 20:00:39 2025 GMT
            Not After : Jul 21 20:00:39 2025 GMT
        Subject: CN=7ed994ef01dbd03b7d1439a4fbafedc57e9cba4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6c:f4:d8:b9:a9:6f:76:2b:b1:53:e3:4f:d1:
                    07:9c:a3:a9:12:2c:dd:b6:0a:b4:99:96:9c:06:01:
                    aa:dc:d7:72:41:f6:4d:2e:e4:7b:7b:49:fa:6c:eb:
                    a7:fa:00:26:96:6a:d2:45:5a:8a:2c:d2:e8:0b:09:
                    ef:de:b3:f5:0f:50:72:0b:66:f3:94:88:c4:c5:f8:
                    c6:88:3b:4b:9d:c9:f1:ca:4a:22:7b:66:c9:7c:bd:
                    7d:a6:37:d0:25:ec:d3:d2:a8:ae:f4:69:1d:91:3e:
                    68:6e:ea:e1:3f:29:e5:68:06:77:93:27:b0:4e:73:
                    bf:d4:9a:d4:0d:0d:2b:d5:27:04:63:b0:96:1c:fa:
                    ed:f0:d8:e0:a2:3c:38:f6:0b:d5:58:c4:0b:1e:f9:
                    43:4f:55:19:54:f5:8f:d7:e1:30:00:11:d9:5e:b4:
                    49:47:f9:eb:89:63:b9:5a:18:07:ec:5c:ab:ae:68:
                    84:ea:3b:51:0a:a8:2d:4a:38:d8:5a:f2:0c:09:cf:
                    b1:c1:8e:1a:07:75:e9:77:8b:7d:be:66:85:31:06:
                    52:d9:8c:53:68:88:b3:4e:a8:fa:d7:10:83:53:97:
                    be:8c:ad:4e:51:eb:36:4c:4e:f9:91:f3:45:9b:41:
                    b9:0d:5c:cd:36:ac:f7:ba:bf:52:fd:36:d3:8d:9c:
                    f2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D9:94:EF:01:DB:D0:3B:7D:14:39:A4:FB:AF:ED:C5:7E:9C:BA:4F
            X509v3 Authority Key Identifier:
                keyid:19:B6:68:E5:6F:E2:5B:D6:DC:53:80:0E:E1:77:50:61:EC:C0:92:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:df:7d:ef:3f:2f:d9:16:23:c9:f1:04:b8:6b:81:fa:5e:c2:
         c2:81:d1:b0:0e:65:63:45:1f:ef:db:7b:90:9a:fd:60:d4:68:
         23:15:b9:94:bd:c9:ff:71:87:ee:d1:d6:ad:00:95:97:cc:33:
         9e:b3:42:cb:d9:e8:58:fa:33:44:e7:61:cf:af:08:e1:69:90:
         25:b9:7c:41:18:33:9c:4c:d3:97:85:88:5f:24:80:2f:6c:c6:
         d2:98:bf:b0:e4:44:d5:af:ff:77:66:2f:4e:6b:1f:a0:8b:54:
         5f:d8:fa:ef:29:19:7d:50:e8:dc:de:ab:11:a0:91:d1:c7:6e:
         1e:07:4c:7f:7a:7f:02:71:e6:37:8b:07:fa:6f:31:0c:ab:52:
         24:8f:54:a9:74:a9:2e:4a:1e:35:03:6b:65:79:a0:3b:67:6f:
         2b:c9:55:b8:a7:0c:b6:6b:e5:9e:0d:84:5f:7e:08:5c:ff:f3:
         32:bc:53:63:46:75:28:8d:f3:82:95:93:bd:db:6c:76:a6:08:
         03:0f:f7:20:cf:5c:3f:57:6a:0f:57:ac:31:8b:b8:44:ec:e1:
         19:a4:3c:82:0c:c9:89:b9:c6:14:e8:69:94:7b:ad:ca:f1:3e:
         26:2d:d5:85:00:30:f5:49:25:d8:97:17:ca:5b:2f:de:8f:9c:
         5d:f0:be:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:23:46 2025 by rpki-client