Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
File:                     GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft (raw, json)
Hash identifier:          pU9NONYvxYlNWH3NdqafQ0SHM0OAhKV155F4ShyX4/Q=
Subject key identifier:   B0:0D:4E:F5:15:E5:4D:4B:A4:EB:2E:36:91:15:03:D6:42:C4:6B:58
Authority key identifier: 19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94
Certificate issuer:       /CN=195043a54e6233d22e56db74c9f78e2d6d1c9794
Certificate serial:       01976FD11C0B816A22AF4FE0F238B09E3163
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
Manifest number:          12FC
Signing time:             Sat 14 Jun 2025 19:01:04 +0000
Manifest this update:     Sat 14 Jun 2025 19:01:04 +0000
Manifest next update:     Sun 15 Jun 2025 19:01:04 +0000
Files and hashes:         1: GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl (hash: cVOmVfyC/HU6B1feEVLOSy3PUwRe+tMbaCKIiE7DN3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d1:1c:0b:81:6a:22:af:4f:e0:f2:38:b0:9e:31:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195043a54e6233d22e56db74c9f78e2d6d1c9794
        Validity
            Not Before: Jun 14 19:01:04 2025 GMT
            Not After : Jun 15 19:01:04 2025 GMT
        Subject: CN=b00d4ef515e54d4ba4eb2e36911503d642c46b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f0:e6:3f:14:66:31:fc:d0:23:e6:28:64:31:
                    8f:5b:77:45:01:e4:2f:91:f0:a5:be:bf:d7:44:ed:
                    0f:43:87:12:d7:0d:80:ec:d6:08:c5:65:c2:ff:bf:
                    c2:3b:7b:a6:63:89:01:b6:84:e2:b7:36:b9:9c:5e:
                    25:6f:d1:56:b2:81:19:8f:d8:ca:79:9d:f2:a2:79:
                    00:69:79:f1:37:19:3b:5e:fa:8e:c2:8b:37:52:98:
                    a6:52:42:9f:c0:f9:7c:e1:42:c5:29:64:96:6c:a9:
                    d6:4e:c8:21:e2:d5:47:1f:39:b7:b8:fd:1c:50:66:
                    77:4d:6b:fc:e1:ec:93:8a:ad:56:6f:08:e2:03:d9:
                    26:8b:33:e7:6e:a4:5d:f7:fe:30:b1:ef:bf:b4:a8:
                    9e:be:90:62:53:41:1e:3c:ae:82:8c:95:f8:e1:d7:
                    91:ce:f6:a8:c2:ef:be:7d:5b:cd:a7:06:4c:9f:be:
                    3b:f3:70:73:60:63:da:7b:a2:2b:9d:50:4a:ae:f9:
                    a4:47:1f:71:a1:da:74:fa:92:9c:da:71:c3:ac:e0:
                    9f:49:cc:53:4f:e2:7e:66:12:5c:4c:c6:a0:47:c0:
                    0e:e7:9e:07:96:ab:ff:94:bb:b5:76:98:26:b9:33:
                    ab:3e:f3:26:9a:4a:96:08:ab:ec:ab:f6:e5:af:88:
                    28:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0D:4E:F5:15:E5:4D:4B:A4:EB:2E:36:91:15:03:D6:42:C4:6B:58
            X509v3 Authority Key Identifier:
                keyid:19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:0c:8d:68:5a:bc:f8:f9:ba:89:73:53:ad:a0:b2:7f:07:0e:
         7e:f7:d3:77:c9:42:6c:f9:19:fd:de:9b:0c:66:03:24:28:5e:
         92:e2:5d:d8:d0:4a:05:98:39:d8:de:17:66:e6:10:91:ca:b8:
         d6:fb:eb:57:90:bd:e2:20:d4:ee:5d:7d:fc:bd:93:6e:a6:7a:
         e1:56:0e:96:02:d4:ff:fb:c0:8a:02:4c:b8:95:51:c6:0d:46:
         10:e6:7f:f2:49:24:8d:d4:9e:45:19:48:e0:c7:7e:e2:8f:7f:
         80:25:da:11:b0:8a:0c:1d:78:be:3e:5b:28:83:d4:f3:a6:55:
         eb:ac:fd:25:72:0e:97:d7:7c:88:4e:b0:a1:5d:9a:e2:72:1c:
         7b:b0:c5:7e:a6:92:86:af:b3:c9:4e:e0:74:08:b3:82:7e:1c:
         83:1d:0c:fb:0f:b0:ec:ea:d9:c1:05:10:a9:ea:84:97:d3:e4:
         81:ef:8b:e9:a9:e8:f8:25:f4:a5:6a:4a:5f:b2:f1:59:a5:a7:
         dd:84:96:31:32:93:13:61:c0:68:11:0f:ce:9b:a4:7a:f4:68:
         ae:79:74:68:70:ff:57:3b:fc:ab:51:28:d9:1a:54:d1:51:de:
         bb:38:0e:19:b7:9e:0c:16:1d:76:ee:6b:ff:1d:00:f1:30:59:
         9a:5c:8f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:45:39 2025 by rpki-client