Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
File:                     GTWdi0RPJzSynpueCQG-CLAPQOM.mft (raw, json)
Hash identifier:          mNgQYnL26RzDN3xQn+f7sQAGlZQxYyEXAckmv0eHJ1o=
Subject key identifier:   5E:05:59:82:70:63:A4:38:C4:90:4B:C9:D4:72:34:2E:D8:5A:1B:63
Authority key identifier: 19:35:9D:8B:44:4F:27:34:B2:9E:9B:9E:09:01:BE:08:B0:0F:40:E3
Certificate issuer:       /CN=19359d8b444f2734b29e9b9e0901be08b00f40e3
Certificate serial:       01987ED3798A7B74FC814F26EB6C1AE25518
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
Manifest number:          119B
Signing time:             Wed 06 Aug 2025 10:00:45 +0000
Manifest this update:     Wed 06 Aug 2025 10:00:45 +0000
Manifest next update:     Thu 07 Aug 2025 10:00:45 +0000
Files and hashes:         1: GTWdi0RPJzSynpueCQG-CLAPQOM.crl (hash: 3IMkClr5cYwVMkWl9/ki7am8x9ItnhQwXWgprk7Qs1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 10:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:d3:79:8a:7b:74:fc:81:4f:26:eb:6c:1a:e2:55:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19359d8b444f2734b29e9b9e0901be08b00f40e3
        Validity
            Not Before: Aug  6 10:00:45 2025 GMT
            Not After : Aug  7 10:00:45 2025 GMT
        Subject: CN=5e0559827063a438c4904bc9d472342ed85a1b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9d:13:80:e1:08:51:3d:02:cb:56:af:f0:c9:
                    9f:23:40:fe:e0:30:0b:c1:fc:75:f9:27:51:b1:a0:
                    10:aa:75:2b:49:82:72:33:a4:66:54:6d:15:39:f1:
                    20:04:90:2e:fe:5b:91:5f:1c:da:46:3b:8d:0e:9b:
                    c4:63:e1:52:68:4d:01:85:0f:b5:b6:53:c9:70:4c:
                    49:cd:86:41:05:f7:40:e0:08:56:42:3a:a4:0e:05:
                    70:57:0b:03:e6:d5:50:91:cd:e6:0d:41:a0:d9:16:
                    0a:b1:fd:74:b4:31:d4:df:db:76:3e:13:8b:78:c6:
                    86:17:4e:82:2b:93:3d:f9:f5:11:a5:a3:ea:25:ad:
                    80:65:44:c3:16:e7:fe:8b:74:79:1a:f0:1b:a5:73:
                    b1:22:65:0d:d9:3d:e7:20:ec:c2:48:5e:17:2a:e2:
                    ab:99:67:e8:05:e7:07:e8:35:93:2d:66:2a:c3:f9:
                    2c:74:09:f5:e9:0d:3f:c8:ed:9f:9d:14:06:b4:d3:
                    81:1e:7c:31:6b:7d:ae:07:d3:29:00:9b:5d:86:83:
                    79:7c:12:93:8a:79:4b:9f:99:01:8d:55:a9:4c:79:
                    1b:1d:fd:60:ac:27:3a:f7:36:ef:bb:38:3e:bb:df:
                    49:64:6e:da:a0:f6:9d:64:10:70:ba:e2:0a:5a:69:
                    97:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:05:59:82:70:63:A4:38:C4:90:4B:C9:D4:72:34:2E:D8:5A:1B:63
            X509v3 Authority Key Identifier:
                keyid:19:35:9D:8B:44:4F:27:34:B2:9E:9B:9E:09:01:BE:08:B0:0F:40:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:a3:e9:83:09:61:f8:b9:90:40:33:06:c2:62:60:99:69:bf:
         1c:80:fa:03:ea:c4:b1:90:e4:9c:02:37:16:db:30:7f:00:e4:
         46:41:93:b6:25:da:b4:ae:b4:4f:35:67:bf:d6:3b:83:77:a2:
         d0:8a:d9:03:90:e1:8c:9c:ec:99:27:09:68:29:9c:09:85:cf:
         d7:6e:49:fb:70:31:ad:23:1e:e8:9a:bc:ba:f8:40:b0:37:86:
         0c:a3:81:f4:cb:7f:18:32:24:29:93:bd:d4:85:71:a5:d0:99:
         61:b7:57:8c:a4:25:15:23:1e:d6:e9:7d:d7:80:91:77:8b:f5:
         78:fc:6f:8d:81:51:4c:d1:3a:19:e1:4f:f1:fd:a9:e9:f0:d2:
         ad:45:ea:29:02:4f:7f:58:ac:65:41:b9:92:8b:b3:60:20:db:
         f8:fe:ad:17:02:b1:d9:d3:d2:3c:04:89:3e:ea:93:c4:aa:1f:
         e7:dc:55:34:6f:47:73:2c:98:77:a6:ee:4b:73:8f:f2:18:f4:
         cc:1c:dd:b3:1f:cb:ff:52:91:d4:92:01:25:53:60:32:7d:ae:
         bd:ae:63:65:67:03:04:bf:36:5c:eb:b0:68:12:c4:7a:8e:9b:
         6e:0a:90:1e:96:7c:6d:fc:9a:cc:8e:3e:6c:f0:33:43:50:61:
         cd:19:d4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:40:04 2025 by rpki-client