Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
File:                     GJiU_9B_W6Edxlvzj9lexByK944.mft (raw, json)
Hash identifier:          fLhGBHdc4ep1qlns8c+sGXaTt0Cb/1KQq23y0K8iORg=
Subject key identifier:   93:76:23:9C:DA:01:37:2A:FE:43:F2:7A:E6:6E:1B:85:39:3F:33:46
Authority key identifier: 18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E
Certificate issuer:       /CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
Certificate serial:       01977D8C5534E92AFD2776096ACA9F41B8A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
Manifest number:          12D0
Signing time:             Tue 17 Jun 2025 11:00:38 +0000
Manifest this update:     Tue 17 Jun 2025 11:00:38 +0000
Manifest next update:     Wed 18 Jun 2025 11:00:38 +0000
Files and hashes:         1: GJiU_9B_W6Edxlvzj9lexByK944.crl (hash: cdOj3Y/4AX62Oz7gIjIufaGgrSjbKweRmPkqmUJq/dc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7d:8c:55:34:e9:2a:fd:27:76:09:6a:ca:9f:41:b8:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
        Validity
            Not Before: Jun 17 11:00:38 2025 GMT
            Not After : Jun 18 11:00:38 2025 GMT
        Subject: CN=9376239cda01372afe43f27ae66e1b85393f3346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:46:03:c2:1a:02:d2:74:07:e0:1f:93:96:27:
                    c2:af:99:2f:80:c6:2c:14:bc:93:cd:ed:7b:53:4a:
                    cc:e7:12:fa:2d:a4:9b:bc:ab:80:2f:35:95:4b:d8:
                    40:ce:bc:43:af:0c:9c:c3:31:4f:ce:f1:6b:a2:7f:
                    73:25:6e:6e:3e:04:99:2b:94:c2:e1:97:a4:d7:b4:
                    ce:5d:95:73:2d:7d:75:82:f5:05:47:ed:ac:7d:c9:
                    16:a6:b1:0c:c5:0c:52:9c:88:cd:91:fb:a4:f9:39:
                    5f:f1:f4:d4:05:bc:3d:74:e5:10:5b:a6:ac:9b:e8:
                    7e:3c:f7:e9:b6:3e:75:37:a3:00:6d:e3:cd:f2:39:
                    e0:81:63:05:9e:0f:c4:1d:fd:52:7f:10:3f:91:a2:
                    71:4c:ed:15:b8:50:92:a2:04:bb:41:6f:3c:c1:c3:
                    db:75:76:96:c5:bb:05:f3:62:0a:08:1b:a6:95:6b:
                    b2:4b:9b:8e:0e:fd:15:fe:ab:22:95:96:30:22:31:
                    bc:90:9e:d7:ee:a2:d9:01:ed:cb:c5:8d:2b:02:a2:
                    da:9d:bc:e1:e6:bf:5e:ff:bb:e5:77:18:6d:54:d9:
                    87:c8:5e:a9:a9:f3:1b:19:35:32:0f:f3:e5:19:fd:
                    72:a1:9c:e1:51:4a:b9:e0:b0:0d:87:86:8e:65:1b:
                    f7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:76:23:9C:DA:01:37:2A:FE:43:F2:7A:E6:6E:1B:85:39:3F:33:46
            X509v3 Authority Key Identifier:
                keyid:18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:3c:92:ae:8b:72:e8:f8:8d:84:8f:07:19:c4:a6:11:8e:7e:
         de:ba:bd:79:7a:b4:18:74:80:6c:ab:0b:5b:66:ea:4b:46:e9:
         e5:cf:06:d1:e5:36:47:fc:bc:78:b0:98:a9:a9:f5:ed:fc:ea:
         58:36:18:ce:ee:ec:6c:82:e5:5c:c6:f1:79:33:7c:a7:fa:a3:
         76:e7:c3:b1:21:71:e8:bd:9e:8f:6b:d0:83:40:f0:23:56:ec:
         3e:fc:ff:a9:d0:35:21:74:c6:34:00:be:e7:db:ca:09:3f:8e:
         75:09:0e:76:b0:cf:5a:db:7d:42:c3:66:50:b3:39:81:5d:8e:
         00:fa:04:4b:5f:46:1b:85:38:d6:b3:59:9d:d3:ee:2c:68:e4:
         91:0d:a6:1d:61:57:94:d4:c2:3c:90:ea:27:4f:2c:3d:5c:59:
         65:02:84:e3:14:98:d8:e8:52:5e:34:92:52:ff:15:d1:ce:d9:
         15:07:7a:28:a6:6b:e6:dd:2f:1f:e5:fa:89:23:40:d1:ca:d4:
         1b:c0:bc:ad:a9:fa:8c:58:88:93:41:24:e4:40:a5:2a:47:92:
         24:42:65:4a:98:9b:4e:fc:b5:e0:c7:27:59:e6:6a:bb:29:57:
         23:79:74:5b:fd:5f:95:b3:22:b3:06:3f:9a:98:54:7e:80:d5:
         a4:ae:06:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:08:51 2025 by rpki-client