Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft
File:                     Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft (raw, json)
Hash identifier:          xea6JvXuAwOsJsX81DkLESlpD8P0VAzfXp7DXUJOxdQ=
Subject key identifier:   CB:6D:41:50:99:32:E3:A2:83:2B:10:54:0F:5C:B9:54:A4:3E:9D:60
Authority key identifier: 1A:F7:9B:F8:AA:B6:BE:01:49:D8:DB:5C:8A:0C:ED:BC:95:70:F1:6E
Certificate issuer:       /CN=1af79bf8aab6be0149d8db5c8a0cedbc9570f16e
Certificate serial:       01989448FE732727D529EC898D9426089260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gveb-Kq2vgFJ2NtcigztvJVw8W4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft
Manifest number:          010E
Signing time:             Sun 10 Aug 2025 14:01:08 +0000
Manifest this update:     Sun 10 Aug 2025 14:01:08 +0000
Manifest next update:     Mon 11 Aug 2025 14:01:08 +0000
Files and hashes:         1: Gveb-Kq2vgFJ2NtcigztvJVw8W4.crl (hash: 85ONhRLPUkUAHlG5V65EgIVqFOaib9+3SRC2tNjJOxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gveb-Kq2vgFJ2NtcigztvJVw8W4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 14:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:48:fe:73:27:27:d5:29:ec:89:8d:94:26:08:92:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1af79bf8aab6be0149d8db5c8a0cedbc9570f16e
        Validity
            Not Before: Aug 10 14:01:08 2025 GMT
            Not After : Aug 11 14:01:08 2025 GMT
        Subject: CN=cb6d41509932e3a2832b10540f5cb954a43e9d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:31:64:ae:00:d5:7c:b6:f7:26:87:0d:ae:d1:
                    16:87:84:7f:f0:2f:14:4f:48:1f:5c:b6:16:74:6a:
                    13:bb:be:09:b8:fc:e1:f8:2d:98:89:ea:49:a9:7d:
                    f1:f2:70:d3:a3:5b:7d:f4:c1:e9:cd:8d:4f:a7:54:
                    43:6c:86:23:f8:bd:35:11:3c:a0:3c:43:00:a4:ff:
                    8f:83:a0:2f:9f:48:90:4b:3e:94:24:7c:c4:de:eb:
                    63:57:43:07:df:cc:c8:81:32:2a:90:4b:94:1b:c1:
                    21:cd:8b:29:fa:48:84:72:1f:74:d7:bc:ef:a6:7f:
                    29:8e:b2:38:16:09:5c:bf:4a:33:2e:92:d0:49:67:
                    ed:20:7f:0b:91:cb:70:bd:7d:10:b4:65:58:57:d7:
                    57:40:c1:be:64:96:7b:50:06:9a:f7:ee:2a:e8:09:
                    ac:d7:e9:59:0f:29:54:7d:0d:e7:d2:26:d1:86:ab:
                    de:8a:0f:31:5c:fd:a9:92:59:75:b1:fd:0e:3b:44:
                    9d:1e:ba:f7:b7:02:f1:ee:d4:64:7b:ea:cb:72:e7:
                    03:bd:9b:e0:39:dc:22:4b:3e:f2:93:97:81:e5:e2:
                    7b:66:df:82:68:35:93:dd:a5:e8:05:a8:48:02:85:
                    d9:94:fb:90:dc:58:93:6a:bf:c6:db:ed:01:28:46:
                    01:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6D:41:50:99:32:E3:A2:83:2B:10:54:0F:5C:B9:54:A4:3E:9D:60
            X509v3 Authority Key Identifier:
                keyid:1A:F7:9B:F8:AA:B6:BE:01:49:D8:DB:5C:8A:0C:ED:BC:95:70:F1:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gveb-Kq2vgFJ2NtcigztvJVw8W4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a72453-fea1-4a70-a54b-911d34f014f3/1/Gveb-Kq2vgFJ2NtcigztvJVw8W4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:4d:ed:fc:d9:d1:ba:e4:cd:aa:ac:b3:82:c1:5c:fe:f2:f2:
         17:93:82:88:20:ab:7b:f1:64:40:43:bd:9a:07:69:83:c1:b6:
         2c:11:82:e2:4d:38:de:10:ef:77:29:c4:cb:3e:ca:8a:69:fb:
         53:45:f8:15:97:e2:4e:aa:ad:13:ee:27:05:9a:70:f8:40:9c:
         b6:a4:f5:14:e7:71:db:17:a4:81:33:c3:ed:bd:9d:de:1d:cd:
         59:51:fe:4b:6d:40:5b:dc:40:bb:51:1f:55:dc:63:1f:b0:ff:
         89:8c:b5:0a:fd:6e:39:3f:b0:23:ef:76:e3:ae:40:0e:b0:64:
         69:3e:a7:a3:1c:5c:05:e5:60:cf:9d:d7:fa:2f:df:81:17:4e:
         2c:e6:fb:ea:2d:32:fc:99:47:06:01:69:89:d3:6b:78:2f:64:
         fa:98:24:34:44:39:7b:ae:cc:f0:31:74:4a:09:cf:f2:2a:d6:
         2d:de:cc:37:69:73:d8:79:a4:93:57:2c:83:32:e9:44:18:c4:
         64:36:56:a6:7f:27:16:e8:73:dc:ed:ba:e5:ba:0e:53:2e:03:
         d7:9e:51:c8:3d:24:47:c3:00:dd:75:39:e8:86:d7:51:9c:13:
         fb:cb:bd:29:6b:38:e5:33:41:17:1f:65:95:27:63:5f:42:59:
         08:ed:e7:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUSP5zJyfVKeyJjZQmCJJgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZjc5YmY4YWFiNmJlMDE0OWQ4ZGI1YzhhMGNlZGJjOTU3
MGYxNmUwHhcNMjUwODEwMTQwMTA4WhcNMjUwODExMTQwMTA4WjAzMTEwLwYDVQQD
EyhjYjZkNDE1MDk5MzJlM2EyODMyYjEwNTQwZjVjYjk1NGE0M2U5ZDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzFkrgDVfLb3JocNrtEWh4R/8C8U
T0gfXLYWdGoTu74JuPzh+C2YiepJqX3x8nDTo1t99MHpzY1Pp1RDbIYj+L01ETyg
PEMApP+Pg6Avn0iQSz6UJHzE3utjV0MH38zIgTIqkEuUG8EhzYsp+kiEch9017zv
pn8pjrI4Fglcv0ozLpLQSWftIH8LkctwvX0QtGVYV9dXQMG+ZJZ7UAaa9+4q6Ams
1+lZDylUfQ3n0ibRhqveig8xXP2pkll1sf0OO0SdHrr3twLx7tRke+rLcucDvZvg
OdwiSz7yk5eB5eJ7Zt+CaDWT3aXoBahIAoXZlPuQ3FiTar/G2+0BKEYBAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMttQVCZMuOigysQVA9cuVSkPp1gMB8GA1UdIwQY
MBaAFBr3m/iqtr4BSdjbXIoM7byVcPFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3ZlYi1LcTJ2Z0ZKMk50Y2lnenR2SlZ3OFc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzI0NTMtZmVhMS00YTcwLWE1NGIt
OTExZDM0ZjAxNGYzLzEvR3ZlYi1LcTJ2Z0ZKMk50Y2lnenR2SlZ3OFc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzI0NTMtZmVhMS00YTcwLWE1NGItOTExZDM0ZjAxNGYz
LzEvR3ZlYi1LcTJ2Z0ZKMk50Y2lnenR2SlZ3OFc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfk3t/NnR
uuTNqqyzgsFc/vLyF5OCiCCre/FkQEO9mgdpg8G2LBGC4k043hDvdynEyz7Kimn7
U0X4FZfiTqqtE+4nBZpw+ECctqT1FOdx2xekgTPD7b2d3h3NWVH+S21AW9xAu1Ef
VdxjH7D/iYy1Cv1uOT+wI+92465ADrBkaT6noxxcBeVgz53X+i/fgRdOLOb76i0y
/JlHBgFpidNreC9k+pgkNEQ5e67M8DF0SgnP8irWLd7MN2lz2Hmkk1csgzLpRBjE
ZDZWpn8nFuhz3O265boOUy4D155RyD0kR8MA3XU56IbXUZwT+8u9KWs45TNBFx9l
lSdjX0JZCO3nLg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:51 2025 by rpki-client