Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
File:                     GRk80M-5OVmJNY4DljEs-7HIj_4.mft (raw, json)
Hash identifier:          3TcXUWu6Fzil3PWWnplCMG5HB2W/KA7foQcOsvgVWdc=
Subject key identifier:   F8:03:45:70:1F:7B:22:6E:3A:68:5C:3F:56:89:CB:EB:A2:C1:13:34
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Certificate issuer:       /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial:       01976929D91DA7D3827AE21DE13B49D5FEA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
Manifest number:          169E
Signing time:             Fri 13 Jun 2025 12:00:39 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:39 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:39 +0000
Files and hashes:         1: 7pztvUDezwt3ZSHLohSTcy0jFYM.roa (hash: uP/w6/w3g1+AZjMv77F/dMcv4FObFdLOts1JHnWbc4w=)
                          2: GRk80M-5OVmJNY4DljEs-7HIj_4.crl (hash: clTc8tAHbvO+t02YRlXnuFEMfRO55xiG8vu2wWOnzUg=)
                          3: O2A95fKA1A2XI5zokqy2M5EQluY.roa (hash: l7DaeRNWKyhpILryPmDUINT37G9okCmuQyW2gonVmu8=)
                          4: __DG8yGKTfUA6389GGmGaK0u4Lk.roa (hash: u95HLPZpv4ehbrFFz+3buFaF1ssi8x25bu+46kL8kIU=)
                          5: oerIe3XBauoH4wnjH-yQh4V4P1U.roa (hash: auHewUAAn3a0HGRSavJta0QusST9c8r9vsoZnA0C1aY=)
                          6: xJHCniYXHzF6J8ijapZs7t1fNa8.roa (hash: +5+T94vuZxwreOKbI0t8y2mo2ffpO6fuW4mKH6dOkpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:d9:1d:a7:d3:82:7a:e2:1d:e1:3b:49:d5:fe:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
        Validity
            Not Before: Jun 13 12:00:39 2025 GMT
            Not After : Jun 14 12:00:39 2025 GMT
        Subject: CN=f80345701f7b226e3a685c3f5689cbeba2c11334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:be:bf:7b:14:11:ec:80:92:6e:6b:95:75:6f:
                    fc:0c:4b:f9:b7:80:b3:d0:27:bb:b1:15:b4:46:f8:
                    24:97:65:b3:85:db:01:1f:4c:79:75:83:f1:b9:44:
                    8d:3c:d4:20:93:3d:fb:8d:3a:88:66:ad:12:e6:71:
                    83:6b:42:94:f4:7e:be:ab:c7:90:23:77:d1:95:93:
                    08:43:1a:39:68:d1:29:23:6e:cc:87:d3:a9:10:ec:
                    27:ea:f2:64:9c:7e:93:44:b3:03:20:b5:9c:19:c4:
                    d6:5a:f6:61:54:81:da:fd:ad:a4:b0:f3:89:f7:e8:
                    56:03:68:0b:b3:55:70:f2:82:4b:25:3b:4b:17:3f:
                    08:40:b6:d6:ee:96:50:3b:87:dc:ed:d1:f0:02:72:
                    88:fa:44:21:fb:47:25:c2:bb:18:c2:f5:ca:e6:46:
                    7e:63:cd:b1:b6:df:9c:b7:3e:13:08:d3:9a:ea:03:
                    fa:e6:78:85:ac:74:b3:0f:35:a3:a5:d7:fe:b5:dc:
                    49:43:87:19:f0:b6:84:46:c1:fa:0a:b7:65:a4:a4:
                    ff:32:b6:59:55:61:5c:0a:4f:5b:87:2a:f3:76:b6:
                    b0:80:e8:cf:ad:c7:47:85:cf:76:6c:4b:07:d9:56:
                    4c:e0:ea:be:fe:cc:10:1a:12:7a:27:ad:40:bd:3e:
                    9b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:03:45:70:1F:7B:22:6E:3A:68:5C:3F:56:89:CB:EB:A2:C1:13:34
            X509v3 Authority Key Identifier:
                keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:29:13:af:f9:80:07:35:a5:0d:1d:9d:c7:6c:af:3a:d8:fd:
         18:c7:51:34:f1:f3:53:08:ad:af:de:34:dc:10:7b:e9:4a:b6:
         91:06:cd:98:38:9d:14:33:d5:d5:e3:aa:da:f9:09:72:46:dc:
         af:da:1a:dc:f0:f1:81:8a:6d:44:3c:99:10:db:31:6f:d7:d9:
         e1:9f:85:b2:60:1f:1b:a4:79:24:2c:05:9b:60:77:c2:cb:d2:
         63:55:e5:c7:78:2a:d0:cf:8c:98:7c:8b:fe:af:35:9b:63:13:
         7b:d6:b4:a7:6b:e4:dd:d5:76:40:03:65:29:f5:21:9c:e6:a1:
         5c:07:cf:e9:b4:94:63:fa:f5:db:d7:a0:46:18:9b:d7:e0:1b:
         f1:20:d2:ae:21:65:f8:c1:12:87:eb:53:01:dd:d2:d7:7b:67:
         4b:78:e2:2a:01:46:88:a8:46:9e:6b:c7:58:81:f9:9b:6a:a0:
         7b:87:af:19:ce:42:b7:a0:97:ce:63:75:de:34:df:63:c4:09:
         10:d7:48:c2:cd:61:01:9f:42:69:25:bb:3c:0a:16:04:84:e3:
         68:d0:04:4c:1d:53:fb:db:f6:1a:9b:37:16:c9:31:a3:77:e2:
         ee:17:b7:7c:e8:81:db:1d:72:95:e4:c4:8e:23:14:46:3c:13:
         8a:c1:f4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:23:24 2025 by rpki-client