Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
File:                     GB5NYIFS_CRK__ui3HK4UbGbJSc.mft (raw, json)
Hash identifier:          Tpeie80I1/OT6KsHipccSzYB6cPKH2R6oIH15YPIEWw=
Subject key identifier:   41:6A:14:E5:09:7D:D0:4D:B2:D1:70:3B:CC:E4:6F:05:E1:85:23:D9
Authority key identifier: 18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27
Certificate issuer:       /CN=181e4d608152fc244afffba2dc72b851b19b2527
Certificate serial:       0198A04D713ECBD07750499E27008FAB6185
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
Manifest number:          162E
Signing time:             Tue 12 Aug 2025 22:01:26 +0000
Manifest this update:     Tue 12 Aug 2025 22:01:26 +0000
Manifest next update:     Wed 13 Aug 2025 22:01:26 +0000
Files and hashes:         1: 3SDO9hGSLXcvKio5nucfHtpBZqo.roa (hash: UySF852N3LzIIXg+WlqkSuDwnOKj/L9pAk/WjttqTkE=)
                          2: GB5NYIFS_CRK__ui3HK4UbGbJSc.crl (hash: No2l2vjkEkAap3XsKfc32CtMEs4RsAhFGhG5NplYesE=)
                          3: QYv8HyZwcR2EgwyDNXO4DNm4alY.roa (hash: 4y8aidT7cf46oC9Rb8MtLIG+06WpyEeua6nqGV7vmw0=)
                          4: t3Zx6p1wvn7jY8kHjzfJnnc7eNg.roa (hash: OLIfG4z0xwuSo4+uWrBPz+WPutgwTrYoDXIoHunSp5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:4d:71:3e:cb:d0:77:50:49:9e:27:00:8f:ab:61:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=181e4d608152fc244afffba2dc72b851b19b2527
        Validity
            Not Before: Aug 12 22:01:26 2025 GMT
            Not After : Aug 13 22:01:26 2025 GMT
        Subject: CN=416a14e5097dd04db2d1703bcce46f05e18523d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4c:fe:74:44:9f:0f:62:1e:e1:09:af:bf:d2:
                    09:ae:53:7e:eb:3f:84:ad:d1:66:3b:2d:af:4f:ac:
                    59:f3:90:6c:d1:f1:cf:74:59:49:55:1b:aa:bc:36:
                    5d:c2:58:27:dc:a2:c2:49:e4:3f:22:73:f1:b8:e4:
                    87:80:ed:a1:ed:28:c7:fe:bb:b5:b1:36:5e:3c:6e:
                    53:f0:5a:81:72:13:b6:d1:8f:e8:a0:3c:0e:e0:f3:
                    e9:40:0c:80:4f:fe:c0:9b:9f:db:cd:2f:d0:c9:04:
                    0d:d7:a3:d5:67:bd:14:dc:b9:b8:c4:3c:37:f1:dc:
                    2b:9a:59:27:05:cf:61:f8:c4:76:bc:48:8f:0b:f8:
                    db:bc:fe:2c:b8:1a:31:88:2e:2e:cb:a6:9b:fe:5d:
                    9e:c7:3d:1c:d5:7b:7f:e9:11:c2:94:dc:6c:d5:6f:
                    fe:f9:99:04:ac:f4:72:d0:55:01:4f:85:c1:e0:c4:
                    1e:86:93:d9:95:11:0d:8a:d3:be:9c:f4:ba:c6:ef:
                    e5:0b:ff:1f:be:cb:9c:2b:d7:91:ef:e1:30:4f:9c:
                    da:65:cd:a9:e8:98:33:fb:8b:7e:e4:5e:0d:8d:58:
                    32:46:50:f3:ae:c0:75:4b:e5:3c:06:20:be:ac:03:
                    e5:29:ce:44:df:fb:80:b2:4e:b6:4e:b2:04:70:41:
                    66:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6A:14:E5:09:7D:D0:4D:B2:D1:70:3B:CC:E4:6F:05:E1:85:23:D9
            X509v3 Authority Key Identifier:
                keyid:18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:9b:49:b7:71:a1:54:e8:7f:57:a6:30:b2:6b:a7:b9:bb:3d:
         96:07:b8:04:b6:a2:25:7d:cf:dd:a3:4a:8b:50:7f:8f:e4:94:
         d8:c3:be:9b:a7:5e:a7:93:43:67:9c:ab:48:8d:35:67:e2:40:
         55:ca:90:13:88:ce:b8:70:cc:50:bb:ed:e2:e6:4b:71:a2:ad:
         69:c4:f3:a2:cf:77:e2:a4:39:97:4e:23:a0:35:14:83:21:b5:
         7b:0b:64:e6:9e:e4:12:4c:fa:1c:a7:72:27:da:85:82:a5:dd:
         c5:6b:dd:31:fd:cb:a2:68:d0:a0:97:c5:3b:4d:1c:cf:d4:73:
         65:43:63:06:d0:a8:a6:20:9d:2b:e8:aa:7e:13:94:3e:3e:24:
         01:24:4d:df:72:b9:e7:4f:28:6d:d8:51:f7:dd:b2:4b:8e:3d:
         42:e7:3f:02:17:c0:01:8d:da:9c:e7:8e:48:56:85:eb:25:32:
         3b:86:50:e9:0e:bf:56:c6:51:ee:7a:5f:60:0b:ed:a5:8e:36:
         56:2e:bf:53:3c:fe:1d:b3:9a:69:01:d1:c9:de:58:fa:f5:51:
         1f:89:0c:95:1e:51:0f:78:6b:59:49:75:53:51:84:3e:d6:8c:
         9a:df:a6:13:fb:90:52:51:ee:9b:5f:1c:a5:83:70:28:6c:c8:
         d2:99:4e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:32:36 2025 by rpki-client