Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
File:                     GMGsaILeCJMGD4CRfXuFjFww8GE.mft (raw, json)
Hash identifier:          ZpCWZ66BhQohXXUsIGew7XbGBpHC8bIQhG8u3671LnQ=
Subject key identifier:   99:8E:F8:FD:72:0E:3E:A4:B6:18:3D:72:BE:D4:53:1B:E3:C4:00:70
Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
Certificate issuer:       /CN=18c1ac6882de0893060f80917d7b858c5c30f061
Certificate serial:       01976929EB7296DE8375F5C47FFC25962E6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
Manifest number:          0A42
Signing time:             Fri 13 Jun 2025 12:00:44 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:44 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:44 +0000
Files and hashes:         1: 1-cZStwlj5eI6jlJCB1BXc15373o.roa (hash: I0GqFp4Dbfgnv5Z9j0gQ2jnYzCKu+2KsKw+2hj0yLI0=)
                          2: GMGsaILeCJMGD4CRfXuFjFww8GE.crl (hash: eDSm3rlz/GSj4BcNt/PJMfkaWQ4TC0/k2WKR/67WXw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:eb:72:96:de:83:75:f5:c4:7f:fc:25:96:2e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061
        Validity
            Not Before: Jun 13 12:00:44 2025 GMT
            Not After : Jun 14 12:00:44 2025 GMT
        Subject: CN=998ef8fd720e3ea4b6183d72bed4531be3c40070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c2:ae:81:58:f9:1f:c4:75:a3:0a:c3:a3:b9:
                    89:ae:72:fc:a0:4c:f5:d6:44:05:bf:93:83:01:de:
                    85:a9:e7:8c:75:be:36:e1:b4:c4:83:ea:ad:04:16:
                    57:8d:03:bd:c7:7a:14:a4:70:a7:08:54:10:7a:71:
                    98:b6:24:f7:f9:4c:14:f4:64:2c:e4:58:b6:cc:3c:
                    02:18:9b:37:12:57:6a:4b:54:fd:fe:d5:33:61:9d:
                    45:8c:75:11:ba:63:68:f3:27:be:65:c4:29:60:66:
                    10:b8:36:30:53:c5:c4:cd:cf:82:ec:ef:72:e4:02:
                    e1:c5:ce:8f:89:8a:d5:36:e4:ff:20:68:86:a1:71:
                    a2:1f:5f:58:f3:91:a0:c6:41:90:2e:47:1f:4b:7b:
                    37:b3:cc:36:00:7a:1d:35:f8:c8:0d:6a:8a:67:ff:
                    55:58:34:0c:d0:25:c5:da:57:74:b0:b7:02:57:e6:
                    d8:d3:88:9a:ad:a9:ca:7f:88:fc:f0:67:82:62:f3:
                    57:6e:cb:e0:9d:09:73:64:13:61:4e:2f:86:67:09:
                    a0:31:92:25:da:81:8a:16:a0:58:a8:3e:ca:7e:2f:
                    cb:09:16:99:14:19:2b:aa:e6:9b:43:ff:b6:0d:31:
                    54:48:13:74:d7:be:65:66:bf:a7:c3:c2:bd:e1:24:
                    48:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8E:F8:FD:72:0E:3E:A4:B6:18:3D:72:BE:D4:53:1B:E3:C4:00:70
            X509v3 Authority Key Identifier:
                keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:9e:5a:ea:d6:24:c2:01:40:0d:14:05:c3:e4:40:9d:fc:74:
         8b:5d:6e:66:fe:0c:57:78:f9:2d:37:8c:63:03:b1:a7:53:b1:
         cb:61:73:f1:72:6b:91:ee:47:df:04:19:28:9f:1a:2c:53:2c:
         1d:fb:ff:0c:dc:14:f1:10:33:45:99:37:e9:40:db:47:7a:39:
         4f:76:5a:77:99:f6:13:37:31:48:bf:37:ef:43:4b:b8:0d:6d:
         fc:73:f1:29:ad:39:9b:1a:0b:76:74:21:f6:e9:e6:e8:cf:ae:
         8b:5e:13:ef:03:29:8a:40:91:0f:10:09:99:ea:20:bb:27:ab:
         94:07:61:74:f6:f5:34:5e:3c:ed:4b:5a:4f:1b:f7:d3:49:71:
         99:01:bd:51:d5:ef:4e:ba:d6:62:1f:45:81:9d:7d:5a:5c:9d:
         e7:f9:9c:19:ab:5a:d2:99:d9:7d:b5:0e:bb:e1:57:b2:8a:b1:
         10:af:e5:ad:18:18:0a:c2:9d:02:fd:43:f6:24:9e:3b:bf:24:
         4b:29:c0:0f:01:77:e3:62:cb:84:99:9b:e7:08:15:4b:d9:67:
         9a:5f:8f:44:42:09:a2:76:66:b8:ee:19:91:99:c8:e1:22:f4:
         6d:60:86:1b:47:64:c5:c1:fb:ac:a3:c9:4c:88:f1:f2:b1:cb:
         8b:df:66:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:48:51 2025 by rpki-client