Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
File:                     GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft (raw, json)
Hash identifier:          NPVn3I6djIeaDhTeuIyP1oA79HabFbM6QxysGUQzKIs=
Subject key identifier:   21:CB:15:DA:CF:33:85:64:D9:0C:A4:7B:99:6E:10:B1:79:4E:9C:EC
Authority key identifier: 1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F
Certificate issuer:       /CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
Certificate serial:       01992858101ACAA69F4A26EF633C58D76CDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
Manifest number:          1607
Signing time:             Mon 08 Sep 2025 08:01:23 +0000
Manifest this update:     Mon 08 Sep 2025 08:01:23 +0000
Manifest next update:     Tue 09 Sep 2025 08:01:23 +0000
Files and hashes:         1: GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl (hash: yCrDV3D0Ql3GvPSo7PikLrVb0SyG0KpKZN4xEOhvXZA=)
                          2: TOBAVscU9VJTwLsUhLP0tAjAQi4.roa (hash: IKzhkAp3S93tfIC5ceCBznZ4xMgoDfcxElkoH29JQ+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 08:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:28:58:10:1a:ca:a6:9f:4a:26:ef:63:3c:58:d7:6c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
        Validity
            Not Before: Sep  8 08:01:23 2025 GMT
            Not After : Sep  9 08:01:23 2025 GMT
        Subject: CN=21cb15dacf338564d90ca47b996e10b1794e9cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b2:30:29:b1:a7:47:3c:14:90:39:47:7a:c3:
                    91:bd:3e:eb:af:c6:41:78:e6:e9:56:91:b6:7f:2c:
                    76:f2:85:b4:b0:fe:aa:c4:d2:c7:80:91:9d:34:3c:
                    dd:2d:fb:00:e8:54:76:b7:f2:21:5a:e5:0b:8c:82:
                    bc:7e:80:51:c8:7f:94:58:95:ba:16:e3:03:1c:1a:
                    c5:33:7b:be:e3:a3:34:85:8e:62:31:aa:0f:81:67:
                    4c:91:89:b1:22:54:9c:3e:32:96:97:70:e4:9f:c5:
                    f7:29:d9:5c:6b:99:8c:76:f2:11:e4:d4:61:79:41:
                    46:f8:11:c9:51:91:30:fe:85:ce:24:2c:37:82:cf:
                    60:39:88:0f:97:97:a2:6a:5d:56:39:bd:48:64:e6:
                    56:2e:92:c6:f2:4c:93:5a:1f:48:ca:7c:d9:0c:be:
                    06:8f:09:c4:00:9b:47:c0:6a:3e:38:06:fa:eb:64:
                    60:76:80:9b:f6:e8:1d:ed:2f:a9:dd:82:e4:44:f8:
                    40:d3:7c:ab:95:01:d2:58:1c:78:bf:5f:5e:6e:d9:
                    1c:a0:48:09:0e:da:c4:91:94:e0:dd:f7:f4:65:80:
                    ff:66:e1:f7:64:06:38:09:39:4f:d1:d2:9f:a2:ca:
                    29:fc:82:df:d3:f5:a9:f6:87:3d:2f:7f:b1:0a:69:
                    77:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CB:15:DA:CF:33:85:64:D9:0C:A4:7B:99:6E:10:B1:79:4E:9C:EC
            X509v3 Authority Key Identifier:
                keyid:1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:94:a9:d2:77:db:53:ef:15:df:50:f1:8d:bc:47:1e:2e:04:
         e4:52:2a:5f:26:d4:96:22:93:dc:1a:c3:8a:77:68:8f:e2:4f:
         77:fd:88:9c:ea:8f:0c:e0:b4:f8:3b:6c:e7:da:01:3f:19:a9:
         b7:ff:5a:7b:45:68:aa:89:7a:4c:28:ad:a5:07:34:4a:08:ea:
         ef:60:ab:c3:a7:7a:dd:ad:36:6e:9f:d2:23:41:4d:cb:4b:e4:
         17:39:84:bf:69:bb:da:02:ca:16:df:b2:fd:1a:12:34:34:5b:
         f9:12:80:1d:2f:46:be:1c:c2:01:10:08:3c:1c:51:98:1f:cd:
         bf:7e:db:5a:9a:e7:f3:ad:c3:a7:af:92:92:fe:2b:0a:bf:0f:
         41:17:cb:64:ab:10:cf:a3:b9:83:6e:8b:5b:15:d5:9e:58:6f:
         1a:83:c2:6d:49:33:5f:d6:07:0a:db:3d:10:b4:76:78:05:c0:
         9c:ef:68:07:d2:2e:1f:30:65:8f:79:45:c3:22:b9:e8:f5:bb:
         38:48:f7:29:64:ce:6e:51:bc:22:e7:28:2f:f5:b8:0d:f9:d4:
         68:65:c7:20:d1:83:93:f1:3e:db:50:fc:1b:ed:96:e9:23:b1:
         bd:2e:59:ae:a8:ef:b4:3e:38:a3:19:4a:9a:5a:26:55:7c:de:
         44:21:82:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 16:18:22 2025 by rpki-client