
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
File:                     GCJBwqTNGwi_W6VBLUkcScjrh40.mft (raw, json)
Hash identifier:          uviboKnmuUDWm7xRvajZc3MQ0Rt45tOojGPq7jw9WTk=
Subject key identifier:   8C:6A:6B:7E:D2:21:53:32:35:31:7F:EB:4D:F5:3C:E7:CD:E5:87:D4
Authority key identifier: 18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D
Certificate issuer:       /CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
Certificate serial:       019A4E4F4DDCA1DD4A451834BC3375FC24B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
Manifest number:          03F2
Signing time:             Tue 04 Nov 2025 10:00:11 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:11 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:11 +0000
Files and hashes:         1: GCJBwqTNGwi_W6VBLUkcScjrh40.crl (hash: liPgkkAL9EBCbWmJ6EdZLjzlwJypkX4s1gKu991LeIo=)
                          2: _uaKTHKtfWhbGfsoaUqVE21BcaI.roa (hash: ZcgIbRy8eNOQQ+FS3+GJOt3y/shZQUFy7iI8KMgc4tI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:4d:dc:a1:dd:4a:45:18:34:bc:33:75:fc:24:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
        Validity
            Not Before: Nov  4 10:00:11 2025 GMT
            Not After : Nov  5 10:00:11 2025 GMT
        Subject: CN=8c6a6b7ed221533235317feb4df53ce7cde587d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:30:7f:a6:d4:99:b9:ac:1c:39:20:c3:85:fa:
                    4a:cc:f7:6d:2f:10:38:b7:03:bb:3f:17:45:3c:11:
                    5b:fc:80:f0:75:5f:2f:86:51:9b:77:77:60:75:1b:
                    8c:59:f4:3c:65:98:1b:4b:41:18:e1:4c:3c:25:0b:
                    e4:91:1c:00:62:62:fb:a8:53:53:ae:78:0d:ef:9b:
                    c6:51:f3:2c:1a:87:95:10:2a:c2:6a:1c:cb:0d:da:
                    a2:1d:4b:17:82:b3:f3:46:88:21:83:13:b8:af:23:
                    9b:9b:80:88:35:e8:f0:09:50:29:cd:ae:d7:88:6d:
                    0c:25:ed:77:d8:fa:d5:c5:cd:f5:cf:53:b2:99:b7:
                    bc:37:f5:97:a6:ae:e9:1a:f5:43:bf:88:7a:0e:fc:
                    ce:4b:56:8b:be:44:33:01:27:ee:9c:e0:3e:45:4b:
                    5b:30:bf:37:cd:59:7a:37:dc:eb:dd:da:5d:fe:10:
                    6b:74:94:9b:2b:fa:02:ad:11:7d:d2:a9:5f:3a:c5:
                    f9:5d:6c:4e:1e:4e:25:11:ef:3f:e5:0f:5c:20:cc:
                    6c:6a:3f:31:ed:59:b2:72:15:d3:59:27:88:22:42:
                    93:d6:2d:63:4f:7d:62:53:6f:19:6e:8d:72:14:7a:
                    23:55:6e:4d:9b:78:4e:ca:d3:d5:d7:79:79:09:2f:
                    28:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6A:6B:7E:D2:21:53:32:35:31:7F:EB:4D:F5:3C:E7:CD:E5:87:D4
            X509v3 Authority Key Identifier:
                keyid:18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         32:b6:cc:97:06:d1:69:63:a1:9a:2e:ae:d8:13:8d:19:0d:27:
         3f:dc:29:1e:8c:80:d5:a7:c6:ea:e1:b2:65:9b:60:e0:7f:f7:
         a4:79:f8:b2:18:c6:a3:e2:eb:0b:c2:ed:09:ea:c1:0c:a8:29:
         46:a3:62:a3:e1:3f:c1:9c:0c:37:bb:61:e9:0a:8d:3d:9b:b2:
         3a:10:14:28:91:37:76:9f:bc:d8:7a:54:3d:0f:2c:b8:64:57:
         8a:95:b8:7a:0e:58:27:a2:cc:b4:b7:97:aa:a8:63:3f:9c:6c:
         44:cb:93:2d:3c:35:9d:f1:70:64:9d:3b:64:db:49:ea:2b:59:
         11:67:40:78:12:62:77:dc:bc:7e:1b:b3:03:3f:7a:3d:dd:af:
         c7:68:29:40:9e:94:a5:eb:e9:19:7c:a9:9a:8a:80:ef:c1:7f:
         fb:10:0e:fb:4e:f5:c5:b2:1c:9c:ae:c6:ee:76:07:1c:8e:27:
         3a:b1:dd:f4:aa:93:b1:ee:64:0d:e3:98:49:a3:0a:70:11:b5:
         c8:d3:e3:a1:cb:04:d5:d4:f9:f9:9a:63:26:dd:3e:cf:f7:39:
         1c:73:bb:4b:be:73:e4:cb:34:45:53:9e:77:08:34:5e:11:37:
         c7:dc:0b:da:db:d4:5c:53:55:ed:07:fa:67:27:94:1c:cc:f1:
         6f:8e:27:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:42:00 2025 by rpki-client