Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
File:                     GUoR_la49HpaFBUDK3f_n7CC4D8.mft (raw, json)
Hash identifier:          sZRZfhIWv5+TEB3rFxVp5GinR51gjkZ1OEtH7Cb7xGQ=
Subject key identifier:   22:95:D2:AF:C0:D5:07:B9:7F:E3:B2:EF:46:E7:81:DB:32:FE:EA:8F
Authority key identifier: 19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F
Certificate issuer:       /CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f
Certificate serial:       0199239F09199F66CF0739B50E99EA696C76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
Manifest number:          1130
Signing time:             Sun 07 Sep 2025 10:00:49 +0000
Manifest this update:     Sun 07 Sep 2025 10:00:49 +0000
Manifest next update:     Mon 08 Sep 2025 10:00:49 +0000
Files and hashes:         1: GUoR_la49HpaFBUDK3f_n7CC4D8.crl (hash: Gyh/Mc5HV8+8W98g+AdaMLMYpODViBLnEY3ngqAdozY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:09:19:9f:66:cf:07:39:b5:0e:99:ea:69:6c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f
        Validity
            Not Before: Sep  7 10:00:49 2025 GMT
            Not After : Sep  8 10:00:49 2025 GMT
        Subject: CN=2295d2afc0d507b97fe3b2ef46e781db32feea8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:28:35:7e:07:31:16:38:7e:fa:38:ee:4f:10:
                    e3:1b:0f:81:55:3a:04:3e:ce:6e:1d:47:d0:fb:aa:
                    c6:a7:90:08:ae:98:41:ed:6d:22:b3:48:b9:68:ab:
                    c0:10:b4:64:d4:74:d5:22:92:70:4a:df:5e:20:89:
                    96:bd:11:29:d1:70:09:68:29:f8:c2:c1:0b:6f:5a:
                    c8:aa:e2:d6:c5:f1:ec:4c:c2:8e:2e:37:17:8d:82:
                    f1:df:88:f8:f8:e5:63:74:98:70:6f:8e:87:3a:c8:
                    40:0b:46:56:96:83:a2:c6:90:3e:28:08:76:e8:a6:
                    22:42:07:7d:b7:b3:c3:47:0b:14:11:ab:4a:f5:a4:
                    b4:55:f4:d9:71:16:64:b8:61:82:42:58:f5:f7:54:
                    4f:83:ca:ec:90:d4:b3:78:fb:2a:8e:e9:ed:b6:20:
                    05:76:3f:e8:93:bf:b0:18:8d:d3:7b:ad:b8:95:1b:
                    e1:26:37:5d:90:88:89:f1:fb:2a:15:ee:57:9b:f6:
                    6b:50:c8:db:93:10:f4:6b:1e:21:26:08:97:c6:fd:
                    58:03:65:9e:ae:78:66:f0:9f:cd:10:d0:80:13:ca:
                    36:03:55:37:02:99:d5:4d:f4:ac:11:ef:65:d6:19:
                    ee:2d:63:d2:29:2c:de:10:75:4a:4d:34:9b:5a:bf:
                    37:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:95:D2:AF:C0:D5:07:B9:7F:E3:B2:EF:46:E7:81:DB:32:FE:EA:8F
            X509v3 Authority Key Identifier:
                keyid:19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:4c:0e:fc:b4:16:c7:a7:bd:74:4d:53:87:4d:21:1a:af:0b:
         e7:cf:48:b1:11:8a:bf:f2:96:aa:7d:11:54:77:b7:d4:62:70:
         cb:ec:48:54:36:7b:ad:f3:5d:d8:b3:3f:15:6a:89:44:7e:e6:
         fb:19:84:6b:09:d2:ec:76:b1:df:07:77:fa:8d:01:6b:c7:11:
         17:91:da:25:a1:ad:e6:c0:4a:42:d3:d3:ee:ce:e8:ee:63:7c:
         17:ce:56:fd:d2:29:41:36:6d:bd:80:d7:94:ac:ff:23:6e:ac:
         77:f3:12:f2:ca:17:60:01:d3:21:ec:08:23:77:3f:5c:46:ce:
         c0:91:7f:22:4f:4c:f2:7e:cc:20:ed:e0:b3:e9:81:0b:50:25:
         a4:47:e5:26:50:4a:01:a7:e0:be:7d:23:9d:b6:af:f6:22:4c:
         56:0b:4a:77:a0:e9:12:b0:82:3c:27:77:a9:92:20:a6:8d:fa:
         10:d6:6d:1c:49:19:e3:b5:e5:26:b3:b8:98:13:65:68:e4:96:
         86:99:ba:75:74:66:fd:f7:70:f3:7a:95:b5:49:88:0d:da:52:
         7e:8b:a4:9c:44:16:6e:20:32:b5:df:a0:0b:26:ed:32:8e:28:
         c1:ac:b3:d1:f7:5d:f6:84:df:93:9b:fe:83:88:6c:2e:57:e1:
         50:cc:cd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:17 2025 by rpki-client