Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
File:                     GVc7IITN9G7hzNKC36O49rfqcmw.mft (raw, json)
Hash identifier:          W7sd6y14lAvBcqe9Xf2xuBS3iWPvWcRRo9xk6YXSr5w=
Subject key identifier:   E3:16:A6:4D:AE:D4:B4:D0:A7:45:E6:A7:02:EF:A6:10:2F:C6:3B:A3
Authority key identifier: 19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
Certificate issuer:       /CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
Certificate serial:       01989D1560A92C67B0127F5BD07E8FE8B4AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
Manifest number:          136B
Signing time:             Tue 12 Aug 2025 07:01:20 +0000
Manifest this update:     Tue 12 Aug 2025 07:01:20 +0000
Manifest next update:     Wed 13 Aug 2025 07:01:20 +0000
Files and hashes:         1: GVc7IITN9G7hzNKC36O49rfqcmw.crl (hash: ewKsyJWpNKUkJlDd+Dzq+H71PHGhpB4jV+pCNERhtG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 07:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9d:15:60:a9:2c:67:b0:12:7f:5b:d0:7e:8f:e8:b4:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
        Validity
            Not Before: Aug 12 07:01:20 2025 GMT
            Not After : Aug 13 07:01:20 2025 GMT
        Subject: CN=e316a64daed4b4d0a745e6a702efa6102fc63ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0d:76:3d:b8:e3:81:3f:61:81:65:21:89:b9:
                    bb:9c:0f:2a:31:af:ac:19:d8:5e:29:36:f8:a5:52:
                    74:29:70:1d:c8:a7:7f:68:52:70:55:72:93:54:56:
                    e7:7a:fd:e2:53:79:d6:ad:be:c2:98:52:0f:08:d2:
                    21:31:64:05:69:84:57:62:cb:e8:f0:ba:d6:4d:04:
                    03:67:d1:aa:2f:94:49:73:0e:89:24:aa:36:95:fa:
                    03:ed:ba:d9:19:1b:dd:4e:44:a4:51:de:f2:e3:7d:
                    80:8b:6f:b2:19:eb:ff:64:92:eb:0b:8b:eb:ad:6c:
                    3c:3a:53:13:8c:e7:11:c9:60:ea:75:e5:7c:a3:2d:
                    9a:17:ad:ec:b7:80:d9:b3:01:02:df:c8:e2:60:8e:
                    5b:c8:fc:4b:4a:bb:9e:27:ea:68:50:df:eb:97:61:
                    b0:8c:0c:b3:4d:97:62:96:04:49:96:5d:bd:95:27:
                    1a:cc:47:c7:1e:ee:01:6b:fc:ad:58:56:a6:1b:fc:
                    66:82:80:e7:0e:cd:f4:92:da:36:ff:53:bc:4c:86:
                    71:db:3a:d4:72:40:3a:05:05:2a:18:b7:a5:8c:73:
                    74:d2:a4:ac:04:c5:be:1f:b7:99:e2:ff:c9:65:02:
                    b0:61:86:f4:06:a9:ae:6e:08:c4:d4:f7:86:9e:ad:
                    52:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:16:A6:4D:AE:D4:B4:D0:A7:45:E6:A7:02:EF:A6:10:2F:C6:3B:A3
            X509v3 Authority Key Identifier:
                keyid:19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:53:96:26:24:04:dc:c9:0e:ea:6f:6c:cd:56:b5:d5:31:34:
         9a:92:8c:fb:79:73:90:7b:dd:19:bf:7d:ac:6e:3f:33:62:f1:
         ce:eb:e1:f2:ce:d8:c7:65:6e:1c:21:9c:ef:19:43:dd:60:e9:
         98:33:6d:87:4e:97:79:3b:34:01:5a:f5:1a:ad:c2:df:d7:a5:
         81:00:04:d4:d9:15:38:60:ab:cd:15:95:e0:4e:21:0a:dc:15:
         eb:e9:67:fc:f6:30:20:4b:58:06:7c:d5:89:8a:60:a7:ae:2c:
         0b:8a:ff:76:11:2e:24:54:86:1f:96:76:fd:97:a3:a2:e5:70:
         19:29:c7:9b:51:bc:45:f4:0c:df:3c:57:65:1a:e4:5d:70:b2:
         d9:d2:a4:9c:fc:be:48:5a:41:07:d9:a5:f0:79:73:e1:38:54:
         ad:5b:93:3b:ca:fc:5f:43:1d:53:23:9f:dd:8b:80:33:0f:cc:
         9d:77:0d:46:0f:ab:ab:b9:44:89:4f:76:7d:47:be:5a:86:40:
         2d:64:c0:ca:bb:91:ea:dd:eb:ee:74:5d:69:63:a7:ac:71:97:
         3c:98:6c:cc:85:1c:c0:be:b9:0d:90:ad:95:5f:09:fc:7b:a5:
         82:fb:8d:0a:19:92:16:c5:c5:d4:d1:69:bc:38:b8:eb:f4:aa:
         0b:2c:9f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:44:30 2025 by rpki-client