Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
File:                     GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft (raw, json)
Hash identifier:          yirdy4S2azL88Gc6YNMRTca66iqWDGmrdhosHSp3184=
Subject key identifier:   E5:04:0E:32:2A:3C:0E:4C:7F:73:80:25:BE:E9:29:EC:CC:83:07:A3
Authority key identifier: 18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01
Certificate issuer:       /CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01
Certificate serial:       01988BB382622344D35A4A916D3D2F98C0BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
Manifest number:          101E
Signing time:             Fri 08 Aug 2025 22:00:54 +0000
Manifest this update:     Fri 08 Aug 2025 22:00:54 +0000
Manifest next update:     Sat 09 Aug 2025 22:00:54 +0000
Files and hashes:         1: GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl (hash: Yt4ogYCthmAjIeFdsW+zaIrw8RmOT8ePF1bsCi8MZ2Q=)
                          2: aveWHqfuaX_kG8WIp_xJcLumQBk.roa (hash: 3xccH6hLZrL399VCmO0jTOsOoPHpVJqnI9JkWpXbAog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:b3:82:62:23:44:d3:5a:4a:91:6d:3d:2f:98:c0:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01
        Validity
            Not Before: Aug  8 22:00:54 2025 GMT
            Not After : Aug  9 22:00:54 2025 GMT
        Subject: CN=e5040e322a3c0e4c7f738025bee929eccc8307a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:80:3a:97:5f:95:75:8a:84:82:7e:23:c4:6d:
                    c1:b7:ff:82:2e:6d:14:df:b1:bd:53:63:33:d9:e9:
                    eb:0c:ce:98:82:36:c6:98:8b:1f:b3:25:03:47:a4:
                    c2:a4:76:d4:43:43:7f:b6:fa:6f:30:6c:5d:e0:90:
                    4f:7a:3f:f9:29:84:5e:0b:2a:26:f8:a8:03:e7:67:
                    5e:df:9f:14:2d:4a:69:c1:a2:c6:4d:47:c8:59:ac:
                    f1:c2:6e:41:1b:a4:50:b9:fc:48:41:d3:6a:3d:40:
                    88:32:25:9c:e0:e6:8f:57:1d:52:d9:af:2e:8b:e6:
                    af:98:03:44:d4:b7:d7:1f:64:31:d4:0b:c1:14:bb:
                    f6:fe:fb:60:c6:d9:09:d3:fa:ef:76:54:04:8e:e8:
                    eb:fe:89:03:a6:58:04:8a:ad:61:94:8b:f2:19:2a:
                    ed:26:f9:a5:83:16:fe:cd:77:ca:5b:33:44:19:8d:
                    dd:6f:94:c6:2a:f0:2a:e6:f8:15:e4:7d:4c:53:13:
                    62:03:9b:50:76:b3:b9:57:7d:7d:d2:7f:11:b0:4e:
                    52:a3:f3:ff:4d:73:05:17:16:54:9a:b9:b5:83:17:
                    16:fc:18:4a:8e:f1:ff:86:9e:7e:53:60:23:71:0f:
                    7d:ce:5c:e0:ea:bf:f6:90:77:97:dd:8d:4b:8d:b7:
                    6b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:04:0E:32:2A:3C:0E:4C:7F:73:80:25:BE:E9:29:EC:CC:83:07:A3
            X509v3 Authority Key Identifier:
                keyid:18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:05:73:19:27:b1:e9:4b:d0:c1:2b:d0:e0:e4:81:09:76:57:
         ca:1e:64:6c:84:d9:41:74:ca:e6:b1:e5:a1:b1:c2:34:f2:30:
         0e:0c:e8:b8:b9:aa:8f:3f:ea:50:cb:e8:3a:6c:cc:31:e2:e5:
         cc:67:ea:d7:d2:66:4f:80:bf:bc:a1:7b:ea:12:1e:12:e7:2f:
         22:21:17:2e:27:0c:40:83:ee:dc:ba:e3:ce:c9:61:f1:b9:ac:
         c1:27:0e:59:47:c3:e7:64:0c:0d:74:08:48:ff:49:83:23:ca:
         ec:be:77:ea:92:6c:a5:eb:fe:4a:d9:76:a7:51:40:76:4e:85:
         ed:b3:be:c4:0c:05:d7:ce:b8:90:3a:15:5b:84:ea:d9:59:7a:
         7f:5c:61:88:37:ba:ba:d4:46:8d:5a:56:b3:de:c9:7c:e0:89:
         03:3f:3f:12:df:30:51:35:cc:66:4f:23:5b:b5:01:24:71:97:
         0a:f1:5f:95:a3:d5:9d:0a:0f:94:72:7e:f8:13:5c:65:43:23:
         8a:77:95:21:b6:84:ee:72:8b:fb:5e:03:91:39:64:ed:62:f9:
         7b:fb:75:4b:e1:a9:a6:f8:90:9f:a2:54:5c:08:cc:8b:52:35:
         7f:1b:e1:f7:93:77:55:fc:26:01:34:38:ec:26:11:93:01:02:
         92:62:72:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:52:29 2025 by rpki-client