Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
File:                     GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft (raw, json)
Hash identifier:          FLw9aQL/LEGL99wEw8oJUcx0lKOBIUGmbKWvBpfazvg=
Subject key identifier:   8F:04:7E:C3:66:ED:23:D5:27:C3:3A:22:F5:6A:C5:12:4D:E7:0C:8B
Authority key identifier: 19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB
Certificate issuer:       /CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
Certificate serial:       0197488CBD746B0465A210A66F64CAE23E15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
Manifest number:          1478
Signing time:             Sat 07 Jun 2025 04:01:12 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:12 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:12 +0000
Files and hashes:         1: GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl (hash: 16P3eSVXuILzP8Hl/YFyMl7JvSFa+Qgh+vjqJuDQehY=)
                          2: o1l5BPG8TRspXIfZdrd0blYAUfY.roa (hash: 5xBU1dsBZ1CJDSiFKF5L8bb4B1rGVOEs++4FXuZA5ys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:bd:74:6b:04:65:a2:10:a6:6f:64:ca:e2:3e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
        Validity
            Not Before: Jun  7 04:01:12 2025 GMT
            Not After : Jun  8 04:01:12 2025 GMT
        Subject: CN=8f047ec366ed23d527c33a22f56ac5124de70c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6a:ec:04:ee:c0:95:a4:db:c0:df:7d:53:dd:
                    57:75:52:bf:d4:45:e3:0b:b2:7c:c3:5d:cb:b2:19:
                    01:c7:9e:de:ad:e2:8f:d7:dd:90:0e:47:76:8d:68:
                    5e:ec:a5:40:af:0f:2d:aa:e0:53:8e:ee:74:3a:62:
                    07:e8:58:42:70:e2:3e:ef:f9:61:f0:99:21:c5:bf:
                    db:a2:08:b0:e7:b9:36:3d:04:93:e0:cd:2d:f5:5d:
                    1f:b6:3e:93:f7:53:1f:01:79:c6:5c:f9:92:54:ba:
                    62:bb:b3:f5:bd:85:31:91:e5:73:c2:af:9f:20:ad:
                    36:41:0d:c2:26:0e:a4:85:8d:98:42:ee:a4:d2:48:
                    9f:07:86:5b:7e:ea:87:8e:55:ff:a2:2d:34:d4:0d:
                    eb:4b:f7:95:ea:f1:21:6d:aa:e0:55:19:b8:0b:58:
                    bc:94:6c:96:27:88:17:85:9e:30:67:eb:e6:c5:4c:
                    3e:58:7e:2f:70:84:be:e0:c0:e6:d7:24:4f:3c:58:
                    9e:64:49:c7:b7:df:2c:d3:15:d1:7b:55:e3:0f:e5:
                    8f:7c:fa:e7:e2:c4:3f:a3:cd:4c:b5:88:ed:a9:c2:
                    35:4f:af:43:d5:b8:43:a9:4e:b6:78:6c:29:6c:fa:
                    a4:11:f4:2b:5b:de:d5:5b:cb:b7:be:6c:11:89:1f:
                    ab:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:04:7E:C3:66:ED:23:D5:27:C3:3A:22:F5:6A:C5:12:4D:E7:0C:8B
            X509v3 Authority Key Identifier:
                keyid:19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:98:0b:9a:81:70:24:8b:be:2b:7d:f5:9b:6c:ad:2c:f5:cb:
         7e:4b:ab:70:2d:ba:f0:5e:88:51:a4:f3:34:d2:6c:e4:5d:1d:
         3a:8a:25:af:fc:b9:fa:c4:06:e2:df:35:cf:09:89:6a:7c:f1:
         0e:0c:1a:e6:79:f1:29:9e:ea:6f:25:bb:c4:0d:8a:85:45:47:
         92:c9:5a:f4:d5:05:2d:bc:91:e2:9d:ed:98:a8:83:cf:10:65:
         14:cf:bb:39:1c:83:56:51:58:9c:b3:6b:1e:27:71:a4:68:19:
         9d:dd:30:e8:f4:86:d8:75:4c:5b:89:f6:87:1b:77:16:2f:bf:
         95:2f:5e:90:c0:50:5b:ae:6b:5e:90:90:4b:3a:ef:b3:ba:6f:
         cd:f3:3f:2d:8f:e1:33:31:02:38:2f:69:c7:46:7f:05:a9:73:
         21:4b:ef:42:df:41:43:71:84:dd:fa:84:2f:ac:64:f4:17:98:
         f5:ea:99:71:77:d7:89:df:ca:68:93:95:c3:88:18:00:05:c8:
         17:cb:64:91:2d:76:f9:8c:fc:f2:05:e2:90:82:41:d8:10:f0:
         d3:38:41:42:68:5d:0f:8c:a8:f4:4e:4d:ed:a1:b8:18:36:03:
         50:99:b5:13:85:ce:1a:65:ad:af:e3:09:0b:73:fc:a9:07:cd:
         2e:37:6c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:16:21 2025 by rpki-client