Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft
File:                     GyN3Poe34e0LVeFQuncWsYJbPiY.mft (raw, json)
Hash identifier:          kh+DKMBNt8GWKjm/VXcuYHTLSVWXdIfBLRAqTjkc56A=
Subject key identifier:   32:49:7B:71:9F:82:FE:5F:EF:A2:F7:D3:84:67:8B:9F:4C:7F:A0:6E
Authority key identifier: 1B:23:77:3E:87:B7:E1:ED:0B:55:E1:50:BA:77:16:B1:82:5B:3E:26
Certificate issuer:       /CN=1b23773e87b7e1ed0b55e150ba7716b1825b3e26
Certificate serial:       01987B9C29344C986C8FEF0030E51D9ADFCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GyN3Poe34e0LVeFQuncWsYJbPiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft
Manifest number:          1359
Signing time:             Tue 05 Aug 2025 19:01:28 +0000
Manifest this update:     Tue 05 Aug 2025 19:01:28 +0000
Manifest next update:     Wed 06 Aug 2025 19:01:28 +0000
Files and hashes:         1: GyN3Poe34e0LVeFQuncWsYJbPiY.crl (hash: a30q/MAvvcIUgM7gEmxsPknxcZfytUp2GQW/DeHMEpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GyN3Poe34e0LVeFQuncWsYJbPiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 19:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9c:29:34:4c:98:6c:8f:ef:00:30:e5:1d:9a:df:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b23773e87b7e1ed0b55e150ba7716b1825b3e26
        Validity
            Not Before: Aug  5 19:01:28 2025 GMT
            Not After : Aug  6 19:01:28 2025 GMT
        Subject: CN=32497b719f82fe5fefa2f7d384678b9f4c7fa06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:27:15:fd:48:f6:60:3a:cb:f2:fa:6b:ca:81:
                    7d:9c:d9:99:f4:7a:c6:1b:4b:37:58:a3:9a:18:69:
                    74:6b:73:71:7f:c2:39:cf:f6:6c:91:78:b8:22:3e:
                    82:81:95:6e:6f:d9:d5:12:95:1e:86:59:48:06:bc:
                    b1:ec:52:09:b8:56:75:42:95:f1:d9:98:95:52:02:
                    f8:34:be:f6:a1:87:4a:07:97:d4:8c:bf:d6:a2:7d:
                    d1:66:e8:aa:01:74:d8:fa:14:93:5f:fe:10:b6:8a:
                    bd:b4:12:5b:25:1b:86:83:4a:f1:34:82:c7:ca:b4:
                    10:b7:58:f0:d1:79:66:c6:63:fa:b0:82:f8:85:1d:
                    13:28:8a:77:ed:f7:c5:07:8f:12:23:23:24:23:0d:
                    81:f5:2b:33:ad:2f:10:79:c2:b6:bc:45:7b:b6:08:
                    77:92:c3:bb:4f:63:38:74:04:2d:63:8a:09:98:ef:
                    91:19:f8:86:08:55:77:08:62:bf:c2:db:2c:87:fb:
                    da:8d:f1:83:88:73:7a:43:a2:68:f1:59:d4:41:7f:
                    53:66:cd:85:be:d1:c1:64:a4:c6:df:8c:45:6b:fe:
                    fd:36:35:64:25:be:74:33:95:46:b5:8e:6f:a5:b2:
                    e8:2f:06:ca:de:b3:18:53:0d:3b:8c:96:20:3d:60:
                    9e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:49:7B:71:9F:82:FE:5F:EF:A2:F7:D3:84:67:8B:9F:4C:7F:A0:6E
            X509v3 Authority Key Identifier:
                keyid:1B:23:77:3E:87:B7:E1:ED:0B:55:E1:50:BA:77:16:B1:82:5B:3E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyN3Poe34e0LVeFQuncWsYJbPiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a48846-885a-490d-8577-dc9ba431d57a/1/GyN3Poe34e0LVeFQuncWsYJbPiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:e6:b3:8a:06:7c:94:18:0a:d3:0b:b8:34:48:9d:5d:31:86:
         7c:99:a3:8d:46:4d:41:bc:b9:ea:11:56:26:c7:9b:b1:92:8b:
         19:37:8b:1b:67:96:cc:40:6d:94:e1:14:4c:62:bd:75:97:e3:
         a8:18:f8:ab:f8:a2:54:75:c7:af:26:fe:e3:42:68:ff:6f:ef:
         ef:78:34:49:3d:72:9d:4b:4f:24:0d:2f:cc:79:4e:7b:cf:37:
         c7:da:15:ab:a2:00:81:ec:01:1d:66:eb:8d:06:ed:24:6f:9f:
         b0:56:7d:47:72:92:4b:e8:45:fe:71:4f:bc:53:d9:14:1a:10:
         70:66:ef:5f:3a:21:e3:cb:bd:bb:56:74:28:cc:37:38:5c:c3:
         db:5a:e3:e7:9d:52:fe:ba:60:51:49:30:18:ec:33:c5:4d:d2:
         83:a6:85:d5:4b:db:b9:17:2c:3b:21:d7:8e:04:36:79:cc:6f:
         79:e5:ab:8e:28:3e:d1:b1:4f:51:02:d1:f4:8a:8c:55:6d:96:
         6e:42:46:81:f6:0a:43:e8:5e:08:ac:2f:24:dc:a9:c3:35:af:
         9d:95:ef:81:b9:1e:4e:2c:59:a0:83:f9:c8:ae:e4:46:28:00:
         94:2a:39:aa:9c:86:4b:8f:e7:b7:07:33:7d:b6:63:23:b5:41:
         8c:50:a2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:04:12 2025 by rpki-client