Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
File:                     GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft (raw, json)
Hash identifier:          gLbU+BRETISXaVzBSU5V0iY8inoPapXaKK0KQHCIlWg=
Subject key identifier:   11:58:39:B0:57:1C:B8:F7:7C:37:86:D8:8E:A3:FB:1D:CE:43:80:D4
Authority key identifier: 1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F
Certificate issuer:       /CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
Certificate serial:       019A19BDA5375F3E50EB0DF60BA41F13EA47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
Manifest number:          1684
Signing time:             Sat 25 Oct 2025 05:00:50 +0000
Manifest this update:     Sat 25 Oct 2025 05:00:50 +0000
Manifest next update:     Sun 26 Oct 2025 05:00:50 +0000
Files and hashes:         1: GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl (hash: CvDqoiZXBRk7He2+EmDvN/kwL4k2TtISXeGtwIPzy9o=)
                          2: TOBAVscU9VJTwLsUhLP0tAjAQi4.roa (hash: IKzhkAp3S93tfIC5ceCBznZ4xMgoDfcxElkoH29JQ+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:19:bd:a5:37:5f:3e:50:eb:0d:f6:0b:a4:1f:13:ea:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
        Validity
            Not Before: Oct 25 05:00:50 2025 GMT
            Not After : Oct 26 05:00:50 2025 GMT
        Subject: CN=115839b0571cb8f77c3786d88ea3fb1dce4380d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:f2:91:60:55:d5:f1:f8:10:44:99:92:7e:
                    c4:fe:0f:a5:5b:da:8c:97:13:ce:56:54:72:59:d2:
                    63:59:aa:98:a5:c0:df:59:24:74:b6:f3:87:e3:70:
                    7f:7f:01:a6:b5:7b:16:44:a3:26:c7:5e:7c:98:6c:
                    31:3b:fc:09:2b:f1:56:92:97:1e:ed:93:d4:a5:4e:
                    09:6d:6e:1d:d7:a1:a4:63:a6:c7:70:54:7c:c2:5a:
                    48:27:cb:2b:62:fb:9f:86:0a:80:b5:7b:f4:a9:0a:
                    f4:f6:b3:3c:5e:2a:8c:f7:c4:c4:f8:5d:9b:64:01:
                    2f:7b:5c:c8:81:77:99:be:be:a6:9c:92:52:89:c7:
                    39:0e:33:83:e2:63:fe:82:a3:bf:78:ec:92:e0:d7:
                    ca:33:67:13:24:af:52:0d:e8:7d:9d:58:13:91:3a:
                    75:6e:cf:f9:6c:eb:c1:ac:c7:75:74:e0:6b:b4:1b:
                    16:4d:1b:fe:8b:8a:f6:04:af:e9:7e:29:60:81:ea:
                    d7:71:cd:b0:3e:ba:cd:0e:31:40:9c:73:e1:16:a7:
                    81:46:ba:b0:59:f1:32:1c:18:83:9b:62:e1:9b:b4:
                    72:d3:83:9f:c6:15:de:d2:c3:c8:bb:75:f4:b8:e6:
                    fd:47:35:57:7f:c4:70:fa:b5:64:01:08:dc:ef:ef:
                    ba:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:58:39:B0:57:1C:B8:F7:7C:37:86:D8:8E:A3:FB:1D:CE:43:80:D4
            X509v3 Authority Key Identifier:
                keyid:1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:36:45:6e:ea:90:8d:42:5c:9a:4b:a0:82:a3:0b:50:d5:94:
         81:78:5d:f3:52:9a:d8:cf:7c:0e:10:f0:ba:f7:9d:84:4d:50:
         f5:9f:85:29:13:8c:7a:89:98:e7:69:b8:e9:9c:dd:04:c2:a7:
         0c:8b:54:fd:fc:d2:8c:a5:76:23:19:c5:e8:8f:a0:c5:e1:ad:
         fb:3d:9d:00:b8:89:f8:c3:d8:ba:b5:4b:91:f7:a2:2f:84:82:
         66:1d:3f:f0:49:cc:be:93:7d:fe:55:2d:3d:e2:74:40:a8:3d:
         3c:3f:9e:a9:84:0c:68:59:da:38:c5:a4:9f:f4:3c:02:3c:da:
         c5:f8:2c:39:d7:38:90:7c:61:a2:12:7a:3d:fc:ba:a4:a9:34:
         3c:03:35:6f:7f:5c:68:f8:51:28:75:d3:bb:9c:b9:9f:a2:64:
         d8:03:df:83:50:3f:f0:e2:92:cf:17:2c:52:19:c9:91:f4:c1:
         c5:8b:40:32:35:dc:08:5c:41:7d:00:c1:38:8c:f5:37:77:16:
         50:01:d7:1d:13:cb:9d:d2:b2:c9:7e:87:c6:74:3c:63:bf:ec:
         7a:3d:e5:70:39:06:6b:b6:80:89:80:6f:68:71:e0:cc:57:a9:
         d5:01:ed:3c:88:e8:ec:2c:46:a2:06:88:be:cd:65:ca:ae:80:
         1e:03:a1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:39:28 2025 by rpki-client