Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
File:                     GbLh_EALv53LIGat49v-XJ6rLn0.mft (raw, json)
Hash identifier:          Eo8dDRmfU4U3n+ePNegNh6SqV0Gw1tk/Z1OEq8oPAj0=
Subject key identifier:   11:57:B0:AD:FE:A8:AB:02:6C:E4:08:DD:28:00:5A:19:46:05:F3:BC
Authority key identifier: 19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
Certificate issuer:       /CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Certificate serial:       019747E77A770A730F3D540FF9D30E407CDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
Manifest number:          0E53
Signing time:             Sat 07 Jun 2025 01:00:41 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:41 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:41 +0000
Files and hashes:         1: GOyl6U-dGvVD0-jKWtZSd5lPcvw.roa (hash: UpOJI3oK6cWcuZSPYztLiL8Ogsz4qyqADulp7DywRZk=)
                          2: GbLh_EALv53LIGat49v-XJ6rLn0.crl (hash: qVx5dFjT32CX7YGpD9DDJJtqgOehjzWKhFMOwjczG6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:7a:77:0a:73:0f:3d:54:0f:f9:d3:0e:40:7c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
        Validity
            Not Before: Jun  7 01:00:41 2025 GMT
            Not After : Jun  8 01:00:41 2025 GMT
        Subject: CN=1157b0adfea8ab026ce408dd28005a194605f3bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2d:8e:cd:ee:c5:58:13:24:1f:c4:da:a4:ac:
                    5c:63:51:fb:fa:d6:82:8d:0f:84:9f:45:6f:f7:ec:
                    c3:78:85:4e:b2:90:b5:70:dd:fa:2c:45:d5:cf:3e:
                    1c:5b:6b:f0:c6:a8:83:bf:1e:02:c7:fa:9a:88:e4:
                    f0:e7:9d:b4:d5:7a:03:fa:65:51:f0:a0:84:e2:3f:
                    bd:78:0a:c4:0a:74:fa:b4:bc:e6:71:27:33:48:36:
                    92:f5:3b:a2:24:7b:1b:5d:b6:38:de:1f:ac:ce:c7:
                    d8:76:20:4f:f7:b9:a3:f7:02:20:bc:f4:c7:81:b7:
                    b0:c2:d1:7a:0d:9c:0f:c4:35:a5:72:2b:41:f0:09:
                    ea:32:1a:3f:ca:4e:c3:5d:ca:8e:75:16:fe:cc:72:
                    51:ce:69:40:98:d5:ec:6f:04:91:db:3e:e0:1a:82:
                    52:3b:b6:9c:44:10:9c:38:4c:b8:3a:8b:18:09:22:
                    f6:38:68:96:6d:33:00:2c:5e:51:de:dc:13:fd:03:
                    3d:c4:11:a8:26:74:9f:e2:88:4d:ed:5b:a4:1e:92:
                    5c:0a:25:a6:f4:1c:36:d5:81:8e:55:c6:d3:29:27:
                    b2:10:60:88:02:3f:f5:66:75:bd:1e:2c:ce:b9:ed:
                    dc:1c:f7:7b:bf:3a:c9:a2:30:e4:aa:05:d7:cf:0e:
                    76:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:57:B0:AD:FE:A8:AB:02:6C:E4:08:DD:28:00:5A:19:46:05:F3:BC
            X509v3 Authority Key Identifier:
                keyid:19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:29:56:84:b9:22:48:de:cf:e5:c5:89:98:d3:57:0d:18:15:
         15:a9:d6:6f:91:f2:05:33:da:f9:e3:d9:d0:b7:78:cd:0c:2e:
         27:13:b8:bb:ed:ee:6e:32:7e:f1:3b:74:f5:f9:a6:4b:e3:3b:
         71:ad:ec:3d:e9:f7:8c:87:fd:98:dd:27:d3:77:5d:0b:61:0a:
         06:04:a8:4a:6d:63:2e:06:9d:33:66:74:7f:c5:9c:14:a6:a5:
         c0:27:6c:f4:14:9e:2a:1d:db:d8:a7:f1:4e:c8:49:3d:2c:0f:
         c6:e8:52:49:bd:4b:6a:6c:8a:84:bf:7a:5b:1d:23:6f:b4:d2:
         98:a9:4c:62:0e:ee:d4:0a:69:00:8c:4e:f6:aa:0c:be:9d:bf:
         d8:9e:71:15:d4:09:75:d6:cc:f9:8b:18:02:de:0e:d9:fc:91:
         74:86:35:7c:6c:ad:65:b0:a5:44:13:3d:a2:0b:41:f0:3b:0e:
         15:44:26:40:4c:a1:d6:61:74:20:42:2d:7d:10:5f:83:6e:0f:
         9b:69:0e:30:95:45:47:2e:47:45:b7:6a:d7:ec:23:ee:28:c0:
         93:d9:0d:69:fe:ea:7c:98:79:5c:ab:a8:65:64:76:87:ac:de:
         67:d1:b2:be:8c:c3:9c:a1:f7:94:b1:ea:38:f3:7d:c5:9c:57:
         77:51:da:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:12:51 2025 by rpki-client