Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
File:                     G8GZTqY9UNvItDrOytKEK03BV1k.mft (raw, json)
Hash identifier:          ooSLVecjfhDwPpz+XITfA8GpFzyPuSBX8TF4+Uzx50Y=
Subject key identifier:   76:B3:34:5B:F9:63:77:54:67:C0:4D:CE:49:39:EB:A1:F5:96:86:97
Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
Certificate issuer:       /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Certificate serial:       0197647113DCCE281989F2D9C3C670A291BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
Manifest number:          12D0
Signing time:             Thu 12 Jun 2025 14:00:21 +0000
Manifest this update:     Thu 12 Jun 2025 14:00:21 +0000
Manifest next update:     Fri 13 Jun 2025 14:00:21 +0000
Files and hashes:         1: 7LJ9xawxzsvCYv_ns8BJ_8ldo2M.roa (hash: f0+qr316tmp0FcJIZdHHGP/bQ0+RaN5V5m4qk2p7tRk=)
                          2: G8GZTqY9UNvItDrOytKEK03BV1k.crl (hash: kyLxbt8l5ueRz4qwtRdFncSEzE8YsmO55cX1VgH2VLI=)
                          3: PnNWpVBdWoAd7atmJEGFvS64Mws.roa (hash: tnccYlmQkpOSmjFbn8qMQEzLxuwoQXHA9SM9r5ZMjAk=)
                          4: VUW_CECBbTHdD7KnSWpCp7f6Uls.roa (hash: dGtVeAhKlKvD4goyS7nYKPSCr10+/VHRE76M3fcZW0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 14:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:71:13:dc:ce:28:19:89:f2:d9:c3:c6:70:a2:91:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
        Validity
            Not Before: Jun 12 14:00:21 2025 GMT
            Not After : Jun 13 14:00:21 2025 GMT
        Subject: CN=76b3345bf963775467c04dce4939eba1f5968697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b0:24:f7:f4:5f:a1:db:cd:45:9b:41:07:fe:
                    95:79:9e:c4:d7:4f:42:f1:69:c5:78:33:54:41:61:
                    6d:d8:e5:a4:4c:87:b0:f1:87:a0:45:5f:16:d2:a2:
                    fa:e4:9e:33:ea:b2:2c:17:9b:ad:65:b3:52:ca:da:
                    33:a2:e9:3a:ba:30:27:17:3e:e8:e7:a1:f3:0e:b8:
                    b7:60:0b:94:8c:f5:0c:53:ab:58:2b:ce:78:96:09:
                    52:75:d0:13:f8:44:e8:65:f5:35:10:00:0c:fb:aa:
                    b4:4f:70:2f:33:53:64:1d:1f:8e:02:fe:fb:ac:ff:
                    e8:18:9a:3c:ab:3c:88:37:5b:f6:50:6f:d5:e7:a6:
                    62:f1:d3:09:ce:9a:ac:b2:03:01:f1:18:5a:4a:a3:
                    c8:78:a3:4d:ff:29:32:b5:02:51:28:97:35:be:24:
                    96:d9:5e:05:18:bf:d8:3c:cc:4d:c3:c3:1b:23:d9:
                    53:1a:3b:27:d1:7c:5b:42:9b:ee:83:bc:e5:ae:72:
                    77:62:50:7e:fe:f8:27:fc:72:fb:6d:a1:e1:3f:15:
                    a7:45:92:f2:62:4b:3c:d4:39:4d:23:2f:32:41:0f:
                    4a:4a:ff:d3:af:3b:8d:da:1d:52:bd:7c:04:35:f7:
                    ef:d1:b3:70:b3:7d:e0:a1:b7:45:b8:11:ac:24:bb:
                    64:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B3:34:5B:F9:63:77:54:67:C0:4D:CE:49:39:EB:A1:F5:96:86:97
            X509v3 Authority Key Identifier:
                keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:13:b9:3e:53:9d:e9:c6:04:c2:1b:8d:50:a0:d9:c3:2b:60:
         b6:27:01:58:f1:9e:5d:6b:c6:14:9e:9b:83:b9:a7:de:4d:d6:
         a8:ca:9f:98:21:b8:4b:6f:c8:f0:d4:c7:94:10:51:5f:f1:8d:
         6a:88:f6:b5:08:38:40:cf:cb:34:46:fa:2d:16:6e:fe:6d:e6:
         44:76:dc:8c:75:6c:b5:57:42:f9:0c:1b:9a:e4:24:60:a5:98:
         8a:be:c9:21:cd:b6:69:71:80:82:bb:84:67:4f:30:fd:15:24:
         68:c9:64:63:5d:7a:cb:da:68:29:4f:a6:7e:5a:ad:a3:da:2d:
         50:e2:94:b5:aa:e3:b4:dc:1f:55:60:07:f1:ca:4d:03:bc:a5:
         3c:45:ab:2a:72:7b:e2:a7:8d:d6:a6:4c:1e:64:45:c7:65:de:
         49:a0:84:e9:81:55:eb:21:3c:94:4b:82:71:b0:ed:52:0d:16:
         e1:91:c5:01:9b:a7:83:56:e8:8f:2f:ae:64:78:ab:48:08:84:
         2a:a3:e6:57:ea:0c:a8:16:7e:56:cd:69:16:b4:6f:ba:15:f2:
         d0:8e:f8:d3:20:d7:ac:b8:d9:b9:34:98:5d:8a:6e:03:7d:85:
         8b:0e:75:dd:e7:e5:06:06:9b:ab:c4:f2:84:3c:c1:e3:57:2b:
         87:2b:05:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:16:19 2025 by rpki-client