Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
File:                     GMGsaILeCJMGD4CRfXuFjFww8GE.mft (raw, json)
Hash identifier:          PPjPiP3YyjrQVzH6BudOR+9ZKGivj1O/c/4mVh16sZE=
Subject key identifier:   D9:8E:C8:E6:E5:E9:FD:C2:D7:F4:49:35:40:A0:05:5C:0B:AE:60:19
Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
Certificate issuer:       /CN=18c1ac6882de0893060f80917d7b858c5c30f061
Certificate serial:       01976B185EEEB9F8E47C72AF75A522F2F54E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
Manifest number:          0A43
Signing time:             Fri 13 Jun 2025 21:00:48 +0000
Manifest this update:     Fri 13 Jun 2025 21:00:48 +0000
Manifest next update:     Sat 14 Jun 2025 21:00:48 +0000
Files and hashes:         1: 1-cZStwlj5eI6jlJCB1BXc15373o.roa (hash: I0GqFp4Dbfgnv5Z9j0gQ2jnYzCKu+2KsKw+2hj0yLI0=)
                          2: GMGsaILeCJMGD4CRfXuFjFww8GE.crl (hash: AXdXVf7QXdnwwV90T5tHNHPC9efGQciiJd/sm9IAXZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 21:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:18:5e:ee:b9:f8:e4:7c:72:af:75:a5:22:f2:f5:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061
        Validity
            Not Before: Jun 13 21:00:48 2025 GMT
            Not After : Jun 14 21:00:48 2025 GMT
        Subject: CN=d98ec8e6e5e9fdc2d7f4493540a0055c0bae6019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b1:ba:c3:d2:a7:fe:28:f0:30:9e:da:3d:2f:
                    3f:d7:19:1d:2d:25:c5:05:ff:7d:e0:01:9b:41:9f:
                    d3:66:fe:d0:74:23:ab:ac:5c:44:b1:81:16:d3:b8:
                    17:d1:8d:ef:26:44:cb:e5:18:1e:b4:bd:fc:55:04:
                    7f:ca:f2:2a:ed:9d:54:5d:01:e7:84:27:04:42:31:
                    a7:ed:2e:9c:13:23:6f:18:19:b5:1c:3f:75:42:d0:
                    02:01:4f:35:46:b7:a5:55:86:09:3b:2c:12:7e:20:
                    05:55:94:97:31:3b:ca:df:6d:2e:02:fd:21:66:ca:
                    a6:1c:f8:fc:85:a9:cc:c7:47:d2:f0:00:62:27:8a:
                    3c:04:43:29:d0:b9:a7:5c:bb:e3:25:ed:89:9f:04:
                    ad:ea:18:ed:58:55:3c:27:7e:8a:2f:ec:49:b1:3b:
                    5b:0d:c8:89:58:3b:ee:66:5e:11:12:b1:9d:75:45:
                    f7:87:c1:de:29:83:ea:ab:e3:e2:f0:4a:ef:d6:fa:
                    98:7a:f6:45:58:d4:58:e3:86:8e:b0:9b:58:63:58:
                    1c:95:3a:78:7b:cf:f2:ae:95:79:63:36:e3:f9:61:
                    83:20:55:25:91:5b:58:3e:00:88:08:82:a2:e9:ae:
                    69:62:ad:e4:7d:1c:f6:ec:93:41:f1:16:79:96:3e:
                    9d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8E:C8:E6:E5:E9:FD:C2:D7:F4:49:35:40:A0:05:5C:0B:AE:60:19
            X509v3 Authority Key Identifier:
                keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:1d:58:ce:1d:8a:fc:62:c2:b0:c0:e8:ca:c2:10:49:1d:d1:
         6b:bb:6a:ed:2a:92:5d:6c:7c:a5:94:80:86:3e:a5:96:12:91:
         49:85:fc:a7:28:f9:99:f9:f6:70:78:6b:ea:3f:5d:f7:de:c5:
         56:df:81:3c:13:bb:e1:eb:59:ee:02:26:09:be:7d:c7:d4:15:
         62:5c:8a:eb:27:3a:41:32:ca:57:cc:48:e3:50:df:5f:ff:a2:
         74:75:66:45:b5:3b:f9:77:f7:26:50:36:a1:ca:58:1a:bf:40:
         ea:24:68:bc:e4:eb:06:5d:bc:44:74:40:62:65:d6:b1:82:1e:
         fd:7a:2d:e9:74:ef:a8:eb:a3:62:a1:f9:8a:c0:65:4f:b0:f2:
         36:77:41:4e:a1:6c:38:8d:56:91:bd:24:90:70:fb:58:82:39:
         16:18:f8:ae:9d:7a:f2:dc:b9:38:b3:23:22:5e:91:64:95:f0:
         eb:80:3c:1d:e0:46:69:5e:7e:5e:66:f8:72:36:e5:48:76:a3:
         8d:23:1f:6e:e7:f9:f9:56:85:0b:88:bd:61:68:cf:79:40:0a:
         3c:40:2d:f1:33:e8:9a:fb:20:e3:5a:14:d1:76:a6:69:9a:41:
         72:74:1e:30:3d:ca:ae:31:16:45:3a:07:6e:8e:aa:12:74:28:
         fa:26:99:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:49:30 2025 by rpki-client