Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
File:                     GRk80M-5OVmJNY4DljEs-7HIj_4.mft (raw, json)
Hash identifier:          q1qmxjM4CXNpEqglsyMUHv2hZIXMn3DOKBLwe4PeHMs=
Subject key identifier:   25:97:72:E8:3E:EC:48:1C:CE:D5:3D:D7:1A:11:07:EE:E3:F7:A8:B3
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Certificate issuer:       /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial:       01983A28C52A8812F4BF658283534B2FEFEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
Manifest number:          1714
Signing time:             Thu 24 Jul 2025 02:00:06 +0000
Manifest this update:     Thu 24 Jul 2025 02:00:06 +0000
Manifest next update:     Fri 25 Jul 2025 02:00:06 +0000
Files and hashes:         1: 74EMPP9l4FNadbhJTDJBAwGpnuA.roa (hash: Vf9WV0EDM6GXmGxGgIYpcCCp22HohV+U7d9GHhHeAoc=)
                          2: 7pztvUDezwt3ZSHLohSTcy0jFYM.roa (hash: uP/w6/w3g1+AZjMv77F/dMcv4FObFdLOts1JHnWbc4w=)
                          3: GRk80M-5OVmJNY4DljEs-7HIj_4.crl (hash: FbIYCLNNi9pL5P38dJPOKrBkQexxVzl14rlOZ8BOK3w=)
                          4: O2A95fKA1A2XI5zokqy2M5EQluY.roa (hash: l7DaeRNWKyhpILryPmDUINT37G9okCmuQyW2gonVmu8=)
                          5: oerIe3XBauoH4wnjH-yQh4V4P1U.roa (hash: auHewUAAn3a0HGRSavJta0QusST9c8r9vsoZnA0C1aY=)
                          6: zUHIxAkqhuVrXtIsMeN7tKY7HZE.roa (hash: cQ/yK03SJQG4+rBQferJrZNKLLm0JzSn3bNUL+oU4KU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3a:28:c5:2a:88:12:f4:bf:65:82:83:53:4b:2f:ef:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
        Validity
            Not Before: Jul 24 02:00:06 2025 GMT
            Not After : Jul 25 02:00:06 2025 GMT
        Subject: CN=259772e83eec481cced53dd71a1107eee3f7a8b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:89:1c:09:b4:51:51:16:d4:96:9f:a0:c5:d6:
                    89:0d:ff:3a:d0:a6:57:95:7d:4b:9a:11:ab:c5:fb:
                    52:d5:44:0c:75:8a:a4:fc:0a:04:73:0f:3f:31:96:
                    68:e0:b3:49:21:67:7e:dc:5b:d5:97:2b:8c:bd:c1:
                    66:71:b5:b0:30:eb:54:03:7f:c2:0c:3a:dc:00:c2:
                    95:f7:f9:d8:27:bf:f7:ef:d6:5f:71:96:96:9a:58:
                    3c:4d:c4:e0:f9:c1:c5:11:62:d2:70:a0:ec:b3:d5:
                    2d:fd:fa:1d:85:5f:49:5d:23:cc:95:64:c2:f3:e6:
                    38:3e:26:c7:6c:c1:3c:78:44:bf:73:f4:83:e9:f6:
                    95:7d:bd:8f:5a:39:c0:a4:7a:c9:d9:7c:fc:79:88:
                    8c:95:4a:50:d7:4f:80:d1:11:98:fb:48:18:43:63:
                    d5:36:fd:4d:63:f8:6d:13:ce:0c:2c:e7:ec:f7:05:
                    3e:6f:9e:28:12:e7:ed:e1:6c:64:bf:de:bc:cf:ce:
                    9f:22:a3:d4:46:95:c8:54:60:f5:91:a3:8e:b3:0d:
                    7b:26:41:f6:d8:d7:82:8b:5a:60:ad:8b:66:09:4a:
                    6a:89:41:e3:15:df:9a:e3:63:14:f6:f7:e7:19:95:
                    de:dd:a5:51:8e:b5:36:45:bb:42:80:c7:db:50:a4:
                    b4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:97:72:E8:3E:EC:48:1C:CE:D5:3D:D7:1A:11:07:EE:E3:F7:A8:B3
            X509v3 Authority Key Identifier:
                keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:26:03:2e:e4:d7:67:b4:77:74:5a:b9:9f:bc:81:6c:af:5d:
         3a:a9:2d:f1:77:30:09:60:51:d8:06:ce:c5:69:15:9b:b5:77:
         ee:da:1d:b0:06:68:3d:e6:e6:96:13:ca:4f:d4:c8:9f:9a:ea:
         19:95:6a:65:fe:d1:8e:2f:cc:9e:e9:43:38:8d:da:97:36:b5:
         5d:e2:dc:d9:4f:68:84:6c:f0:93:9f:56:db:05:ec:cb:03:86:
         83:c2:c3:9b:6a:7c:bf:46:32:8a:b5:b2:01:97:25:a1:92:1e:
         17:f8:93:b9:80:27:77:a5:96:00:d1:5d:e7:38:9b:a2:74:e7:
         45:b8:91:58:78:5f:22:e5:e2:a9:4f:22:27:53:5b:91:37:a6:
         67:52:f7:6f:a3:95:55:51:84:c9:d0:5d:ec:92:91:03:24:17:
         51:6d:bd:32:66:c1:30:e2:3e:9c:b9:d0:4c:f5:20:09:65:a0:
         8b:57:66:74:c3:20:22:56:17:51:63:1b:a4:40:ff:a8:f0:c1:
         ff:7a:01:18:ad:4c:c2:40:6e:be:ec:ef:f3:72:d4:65:fe:b5:
         07:b5:c5:89:31:30:29:7b:ec:d0:49:11:46:e1:be:df:c0:5d:
         70:c8:4a:b1:72:2e:89:bb:82:66:2b:8f:46:12:1d:37:1f:ff:
         dc:cf:81:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg6KMUqiBL0v2WCg1NLL+/vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MTkzY2QwY2ZiOTM5NTk4OTM1OGUwMzk2MzEyY2ZiYjFj
ODhmZmUwHhcNMjUwNzI0MDIwMDA2WhcNMjUwNzI1MDIwMDA2WjAzMTEwLwYDVQQD
EygyNTk3NzJlODNlZWM0ODFjY2VkNTNkZDcxYTExMDdlZWUzZjdhOGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYkcCbRRURbUlp+gxdaJDf860KZX
lX1LmhGrxftS1UQMdYqk/AoEcw8/MZZo4LNJIWd+3FvVlyuMvcFmcbWwMOtUA3/C
DDrcAMKV9/nYJ7/379ZfcZaWmlg8TcTg+cHFEWLScKDss9Ut/fodhV9JXSPMlWTC
8+Y4PibHbME8eES/c/SD6faVfb2PWjnApHrJ2Xz8eYiMlUpQ10+A0RGY+0gYQ2PV
Nv1NY/htE84MLOfs9wU+b54oEuft4Wxkv968z86fIqPURpXIVGD1kaOOsw17JkH2
2NeCi1pgrYtmCUpqiUHjFd+a42MU9vfnGZXe3aVRjrU2RbtCgMfbUKS0aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWXcug+7EgcztU91xoRB+7j96izMB8GA1UdIwQY
MBaAFBkZPNDPuTlZiTWOA5YxLPuxyI/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1JrODBNLTVPVm1KTlk0RGxqRXMtN0hJal80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wZDY4ZDQtYWRiMy00ZmY5LWI3OGEt
NGVmOWQwN2M0NDA1LzEvR1JrODBNLTVPVm1KTlk0RGxqRXMtN0hJal80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8wZDY4ZDQtYWRiMy00ZmY5LWI3OGEtNGVmOWQwN2M0NDA1
LzEvR1JrODBNLTVPVm1KTlk0RGxqRXMtN0hJal80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSYDLuTX
Z7R3dFq5n7yBbK9dOqkt8XcwCWBR2AbOxWkVm7V37todsAZoPebmlhPKT9TIn5rq
GZVqZf7Rji/MnulDOI3alza1XeLc2U9ohGzwk59W2wXsywOGg8LDm2p8v0YyirWy
AZcloZIeF/iTuYAnd6WWANFd5zibonTnRbiRWHhfIuXiqU8iJ1NbkTemZ1L3b6OV
VVGEydBd7JKRAyQXUW29MmbBMOI+nLnQTPUgCWWgi1dmdMMgIlYXUWMbpED/qPDB
/3oBGK1MwkBuvuzv83LUZf61B7XFiTEwKXvs0EkRRuG+38BdcMhKsXIuibuCZiuP
RhIdNx//3M+BDg==
-----END CERTIFICATE-----
Generated at Thu Jul 24 03:29:53 2025 by rpki-client