Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
File:                     GRk80M-5OVmJNY4DljEs-7HIj_4.mft (raw, json)
Hash identifier:          q7fyVYkfBakgYkjbmfiExr/787MCCqCBQMzHs0t/u/Q=
Subject key identifier:   B3:3D:BB:D4:5A:10:AD:02:62:3C:A0:D2:A7:5F:24:11:FA:DA:E3:CC
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Certificate issuer:       /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial:       01974BFB227EDDD578903C164BF509947573
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
Manifest number:          168E
Signing time:             Sat 07 Jun 2025 20:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 20:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 20:00:38 +0000
Files and hashes:         1: 7pztvUDezwt3ZSHLohSTcy0jFYM.roa (hash: uP/w6/w3g1+AZjMv77F/dMcv4FObFdLOts1JHnWbc4w=)
                          2: GRk80M-5OVmJNY4DljEs-7HIj_4.crl (hash: L13rf/pFgCCrQk5YpKWOfXm0XiaddmmSVaGSqebmMv8=)
                          3: O2A95fKA1A2XI5zokqy2M5EQluY.roa (hash: l7DaeRNWKyhpILryPmDUINT37G9okCmuQyW2gonVmu8=)
                          4: __DG8yGKTfUA6389GGmGaK0u4Lk.roa (hash: u95HLPZpv4ehbrFFz+3buFaF1ssi8x25bu+46kL8kIU=)
                          5: eJm-19Bh2Ambaq-MNv3Pxg9UW_0.roa (hash: 6LBmmz4sGyKeCgr8AMJeGLLbfTlaX2XQWUf7eT4YNwQ=)
                          6: oerIe3XBauoH4wnjH-yQh4V4P1U.roa (hash: auHewUAAn3a0HGRSavJta0QusST9c8r9vsoZnA0C1aY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:fb:22:7e:dd:d5:78:90:3c:16:4b:f5:09:94:75:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
        Validity
            Not Before: Jun  7 20:00:38 2025 GMT
            Not After : Jun  8 20:00:38 2025 GMT
        Subject: CN=b33dbbd45a10ad02623ca0d2a75f2411fadae3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cd:2b:60:23:3e:32:48:17:c8:c2:44:28:67:
                    b1:73:c5:6a:a8:dc:fc:66:6b:a4:38:93:95:bf:b9:
                    a9:45:33:31:8f:eb:cd:09:1d:c3:a9:1a:57:06:61:
                    0a:b4:a1:e1:ae:59:6e:a9:1e:3c:ef:a8:6e:94:b0:
                    c8:de:2f:66:64:72:32:66:05:8a:78:91:4d:35:95:
                    ac:43:ea:e5:c3:79:e8:47:6c:7f:3a:a4:bf:a9:af:
                    46:53:b0:22:cd:65:24:56:8b:f6:e5:fb:55:39:31:
                    14:d5:9c:4f:82:f7:26:38:81:e9:4c:12:43:b7:9d:
                    59:da:04:9f:fb:38:c2:55:05:9c:cd:64:87:8b:13:
                    1a:99:a6:b8:4f:7e:09:5e:f0:f4:ee:ea:10:15:cb:
                    a3:30:16:22:2a:5d:33:bd:ad:b8:7f:42:d5:2c:f0:
                    7a:a8:ee:3f:1b:be:5e:94:f2:26:c6:7a:33:67:e3:
                    cb:74:ef:83:85:77:46:4c:3f:30:b8:a8:90:e1:75:
                    9b:93:22:f8:75:90:62:8c:69:06:1f:63:43:ff:a1:
                    cc:ec:ed:bd:e0:a2:59:7a:13:40:c4:25:d8:74:fc:
                    7e:7f:ac:e2:bc:45:b5:01:db:c6:14:b0:91:5c:c3:
                    eb:88:ff:2c:44:92:85:71:f0:0d:b3:8f:3c:a7:c3:
                    44:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3D:BB:D4:5A:10:AD:02:62:3C:A0:D2:A7:5F:24:11:FA:DA:E3:CC
            X509v3 Authority Key Identifier:
                keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:96:c6:5e:7a:b2:cd:83:79:6a:ed:4e:76:e5:c5:b3:16:74:
         65:52:22:d5:51:7b:7b:ac:45:0a:bf:d3:8a:c9:52:c7:de:08:
         18:77:0f:3c:11:18:eb:ac:fe:b4:73:a0:52:f1:50:c8:9c:89:
         2d:95:38:5e:d9:54:0b:94:c1:a5:e6:60:89:0c:3d:ca:01:00:
         59:ee:c9:e2:d7:e6:ea:13:82:5a:df:4d:80:b6:fd:02:22:a8:
         f7:ae:a7:0d:32:02:8c:0f:0b:9f:10:81:41:37:b2:ae:1e:68:
         0e:77:e8:db:23:42:de:34:4b:4e:d6:05:03:b9:1c:57:21:84:
         6f:81:3a:46:ad:8a:10:ce:bf:b9:91:f0:da:7f:37:d4:ce:1a:
         17:57:90:1b:2e:91:3d:65:fd:9c:5b:30:ab:4b:0b:d3:6d:8e:
         85:d7:61:66:63:29:f8:9b:51:93:c1:e2:f1:c3:d6:7d:85:0b:
         5b:ba:42:e3:4f:25:a9:66:50:12:09:c9:9c:c8:82:b3:a6:3c:
         52:38:3c:41:af:09:24:64:8d:04:a9:18:f5:7d:5e:80:fa:5d:
         3b:09:ba:59:b2:a5:6a:11:cc:93:ea:aa:80:4b:d2:df:e2:f7:
         3b:c2:83:ff:2c:c7:fc:68:6d:20:7d:69:c1:99:e8:d7:bc:33:
         2d:47:69:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:16:12 2025 by rpki-client