Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
File:                     GVc7IITN9G7hzNKC36O49rfqcmw.mft (raw, json)
Hash identifier:          38d+JwCQUyfk5EF5uQPUVjpMKGTiRGJGOmsfj7yp1V4=
Subject key identifier:   72:BB:57:EF:69:58:D2:B1:FA:E1:3D:3B:2E:4B:76:87:C8:F3:00:5C
Authority key identifier: 19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
Certificate issuer:       /CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
Certificate serial:       019749313B7CCE1E08441489B7CC1BD9679E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
Manifest number:          12BB
Signing time:             Sat 07 Jun 2025 07:00:52 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:52 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:52 +0000
Files and hashes:         1: GVc7IITN9G7hzNKC36O49rfqcmw.crl (hash: zhAzpy6hjXcKexBgygGlOCp8raqR9rHvJJ9aPTnxE2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:3b:7c:ce:1e:08:44:14:89:b7:cc:1b:d9:67:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
        Validity
            Not Before: Jun  7 07:00:52 2025 GMT
            Not After : Jun  8 07:00:52 2025 GMT
        Subject: CN=72bb57ef6958d2b1fae13d3b2e4b7687c8f3005c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cf:5c:24:0a:ef:df:9d:dd:86:90:47:6c:6f:
                    59:48:60:de:66:e2:a6:d7:b9:5e:ff:44:51:7a:da:
                    f1:be:6d:e2:a4:cd:e4:8e:9a:59:c9:84:79:1e:25:
                    34:d7:cf:73:eb:0e:bb:4c:4e:24:69:ca:34:05:e0:
                    3b:16:87:c8:fe:d7:d6:22:0e:c8:0c:ba:bf:10:60:
                    62:9a:23:e3:25:b5:e7:82:b7:12:17:46:e5:fd:f5:
                    1f:86:bc:ac:ed:1e:2b:73:62:8c:c7:d5:43:32:42:
                    07:08:9c:35:83:7d:1f:c0:ec:39:85:d3:08:c4:ae:
                    50:30:1a:c2:fe:00:24:b8:8b:d0:03:e1:fc:9f:eb:
                    12:d9:0f:d9:a1:66:0f:04:98:3f:d3:41:a7:87:c5:
                    58:9e:6f:77:10:c6:d8:fe:a6:08:af:ed:30:74:a3:
                    e6:fa:cd:29:ca:35:19:b6:af:1a:96:a6:50:0a:88:
                    81:83:48:54:24:12:5b:34:b1:63:df:2b:02:1c:80:
                    10:ca:e2:a8:35:ab:d2:5a:bd:61:31:97:41:95:d5:
                    b5:0b:a4:bf:f2:dc:f2:0a:e5:7e:86:77:dc:b3:aa:
                    80:8d:65:31:76:9f:21:30:e2:6f:37:ce:5c:a8:ba:
                    51:1b:d3:9a:6c:96:10:42:f6:49:23:27:98:a3:df:
                    11:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BB:57:EF:69:58:D2:B1:FA:E1:3D:3B:2E:4B:76:87:C8:F3:00:5C
            X509v3 Authority Key Identifier:
                keyid:19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:28:71:d6:44:ab:c8:d8:db:90:63:43:2c:82:e9:ea:48:29:
         45:a6:25:89:fa:fb:8d:8a:c0:68:3b:77:2f:d9:60:00:0a:c7:
         d7:fa:02:f6:36:59:e7:23:69:5a:3b:51:9c:c7:3f:df:3e:fe:
         89:9b:2e:aa:fa:36:95:3e:e4:cf:17:28:4b:f5:ae:ac:30:f0:
         bd:56:9c:a3:46:f6:e0:b6:0f:f3:fd:86:a1:cb:b2:3f:52:52:
         04:9f:97:e0:23:c1:45:c2:74:7f:34:d7:f3:36:dc:bf:14:41:
         4b:b0:0a:c0:9b:16:40:76:bf:5f:9d:f8:7f:db:ce:42:6b:3c:
         62:60:a7:b0:61:94:38:d7:f2:5e:dc:7b:ba:e5:3f:c2:12:dd:
         35:c8:fa:27:d9:e0:84:34:15:54:06:bc:a1:d8:6b:31:56:7f:
         36:53:c1:57:9e:23:8d:9a:e1:3b:bb:a0:0b:f2:4a:7b:d9:d9:
         68:6d:b5:b9:03:e5:7c:08:f2:a4:22:d6:7a:f5:ba:8f:0b:6c:
         8b:cc:9a:f5:f2:8e:4a:95:fe:36:96:a1:0b:70:2e:02:31:50:
         8a:91:34:3e:b2:7b:81:a4:d5:82:ec:ea:6c:31:95:0e:1b:0e:
         87:fd:10:31:56:da:da:32:61:54:0d:2d:24:17:b9:63:02:16:
         58:87:20:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:58:42 2025 by rpki-client