Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
File:                     GbsyomYvkFwNi_JH7ODbxnmha4Q.mft (raw, json)
Hash identifier:          vhoLzaSWXZ4DmrfWF8v1q9f2j2d3d68QfsyZl8XbjVU=
Subject key identifier:   D1:05:73:E7:BA:22:F1:90:E5:49:DE:A8:D3:74:2E:C2:5F:EF:DC:9D
Authority key identifier: 19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84
Certificate issuer:       /CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84
Certificate serial:       0197684E7ED9870AE3718227BB61589865BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
Manifest number:          02AD
Signing time:             Fri 13 Jun 2025 08:01:04 +0000
Manifest this update:     Fri 13 Jun 2025 08:01:04 +0000
Manifest next update:     Sat 14 Jun 2025 08:01:04 +0000
Files and hashes:         1: GbsyomYvkFwNi_JH7ODbxnmha4Q.crl (hash: xGTRWcnlAayeQR+dnZ2X7YMe26Vgo7aV7SXHkvfPVt8=)
                          2: rm-ctcMQkJoTJnbIDJV3c0v42nw.roa (hash: 0ZXTmxuKHi0QHBCAQY3aiWs6mf8IDw4nbeNjb8cUWcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:7e:d9:87:0a:e3:71:82:27:bb:61:58:98:65:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84
        Validity
            Not Before: Jun 13 08:01:04 2025 GMT
            Not After : Jun 14 08:01:04 2025 GMT
        Subject: CN=d10573e7ba22f190e549dea8d3742ec25fefdc9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e3:d4:12:75:55:32:23:8f:43:b8:0f:a6:06:
                    e4:2f:c6:a6:89:dd:74:a5:de:a6:cb:c9:f4:55:f1:
                    89:9b:0b:6c:89:4b:f5:f6:e2:e1:63:34:ee:64:5e:
                    93:70:4c:bf:fb:c5:e7:96:f7:6c:92:5b:e6:b7:99:
                    ab:e1:f4:2b:5c:f2:08:73:9a:bc:c9:5c:fd:19:e0:
                    df:24:ce:63:80:1f:4e:9c:3f:d4:88:87:09:6b:48:
                    63:8a:31:0f:f4:10:37:49:2f:94:b0:6c:fd:85:24:
                    1c:de:a9:2c:4c:49:ae:a3:37:23:71:c9:9d:6f:ae:
                    45:8d:8c:e7:96:6c:ac:04:05:4b:ec:b4:b7:ed:b9:
                    6b:7e:31:aa:39:22:38:ad:09:c2:b6:4e:c4:b3:01:
                    db:fe:07:e7:23:02:7e:b4:a8:d4:8a:1c:7d:cd:5d:
                    46:27:e5:7f:f4:6b:06:24:bd:dd:38:6d:37:80:83:
                    e9:c6:0f:b0:fe:aa:80:69:f5:05:f2:ec:df:98:c0:
                    24:32:dd:e9:fa:b9:6c:0c:10:4a:4c:4a:06:d1:9a:
                    35:c3:a6:6d:7b:37:41:15:5e:2d:2f:56:56:6f:28:
                    2c:40:99:a1:0a:15:c8:a0:ee:09:ef:9e:36:ae:29:
                    d0:0c:11:c5:d8:d6:e8:26:b0:8c:5a:59:3b:d6:e0:
                    6d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:05:73:E7:BA:22:F1:90:E5:49:DE:A8:D3:74:2E:C2:5F:EF:DC:9D
            X509v3 Authority Key Identifier:
                keyid:19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:c2:a3:b9:b2:15:fe:07:95:0b:8b:ba:85:77:13:e5:9c:07:
         41:87:a6:6d:4c:76:c7:a7:9a:d8:26:69:b3:a4:50:73:b0:1f:
         17:ee:43:77:24:b7:1a:4c:44:f5:21:9d:58:fe:8a:20:f3:45:
         2c:4c:aa:a8:b0:ed:c9:b6:f4:ab:77:11:9b:ed:1a:c2:29:a5:
         d1:59:cc:ed:60:b4:a9:84:73:b7:1f:2f:f8:ce:60:87:9c:33:
         c2:af:72:a5:2e:54:f5:8a:cd:32:2c:57:3f:48:0d:ad:e3:56:
         eb:9e:2e:9d:77:2f:c0:fe:3b:36:fa:9e:e4:c3:89:50:7d:c4:
         e9:41:80:f4:9d:17:71:49:6f:2a:df:39:fa:f9:c4:66:91:13:
         62:c3:6b:b8:c2:6b:02:c2:12:f8:e3:47:71:a1:4d:7f:f0:ba:
         a5:b6:17:a1:d5:aa:b1:d3:de:96:d5:2d:a6:42:24:84:d1:ed:
         a1:b3:62:02:7e:e1:d7:31:4b:aa:82:3d:69:ee:90:97:07:7e:
         b4:80:d4:b1:20:16:ec:74:aa:32:a5:c2:d9:09:af:a7:71:b3:
         cd:7b:ca:82:b6:c0:83:ae:c7:cb:aa:84:d8:7c:92:b4:66:8e:
         61:be:df:7b:f5:a8:cf:87:35:97:03:a4:18:67:fd:45:05:c7:
         f3:75:87:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:35:40 2025 by rpki-client