Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
File:                     GQNkfvskNmLlfmHU7EW0olo36sg.mft (raw, json)
Hash identifier:          ibshCfwrhhGXu7Pdg582D9CEaBp0XCEulGdLLIWe6Yg=
Subject key identifier:   EB:75:66:F7:8D:6A:A3:2C:BF:51:58:95:0E:C6:51:68:AB:50:71:44
Authority key identifier: 19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
Certificate issuer:       /CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Certificate serial:       01987DF869A1FA43D825765E620400A1D15C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
Manifest number:          161B
Signing time:             Wed 06 Aug 2025 06:01:28 +0000
Manifest this update:     Wed 06 Aug 2025 06:01:28 +0000
Manifest next update:     Thu 07 Aug 2025 06:01:28 +0000
Files and hashes:         1: 7mu7dSdOdivtbUb5Ar1MUUCeTYk.roa (hash: q+lzjmvfQiLwsG4m5ztsli480LBdARkn+qQlJRAHsqg=)
                          2: GQNkfvskNmLlfmHU7EW0olo36sg.crl (hash: kvgyXQf+Iyty8stn0WSiEMGw1N+a6DKG7SW8vA+4WVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 06:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:f8:69:a1:fa:43:d8:25:76:5e:62:04:00:a1:d1:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1903647efb243662e57e61d4ec45b4a25a37eac8
        Validity
            Not Before: Aug  6 06:01:28 2025 GMT
            Not After : Aug  7 06:01:28 2025 GMT
        Subject: CN=eb7566f78d6aa32cbf5158950ec65168ab507144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:90:a8:01:61:14:4a:e5:62:09:cb:d6:69:57:
                    f5:f9:4e:1e:a3:ab:0e:93:cb:0d:74:62:a7:6c:62:
                    b9:80:80:bf:a1:48:35:88:48:ed:9a:a8:da:0d:7a:
                    f0:f6:79:83:bd:98:39:ae:40:7b:f9:f7:1a:c7:79:
                    b2:49:63:a9:56:65:dc:09:8b:d5:9a:43:6e:00:d5:
                    10:5a:f2:81:14:97:cc:21:25:4e:ad:ec:d1:92:7b:
                    94:b6:23:a8:44:73:cb:9f:19:a3:98:90:17:0f:c8:
                    0a:6a:6c:5a:66:43:62:01:5f:7b:3c:5a:18:30:6b:
                    cd:2d:8e:6d:ee:a3:bb:25:91:d1:e5:81:e0:66:5d:
                    08:f0:6e:7f:5b:f5:f8:d6:c5:26:cb:e1:bd:d8:93:
                    10:d4:f6:6f:6e:d2:b4:63:ca:84:94:db:cc:7e:bd:
                    b0:90:80:c2:21:2b:3d:3b:7f:63:f6:09:8c:45:57:
                    4e:53:68:35:a1:48:69:5d:46:35:c0:f3:2a:36:24:
                    57:1d:a9:c2:3a:36:85:3a:9e:cc:12:38:98:74:76:
                    49:85:72:79:78:e9:4e:d2:52:95:1d:33:a4:0f:18:
                    7f:c6:35:13:d2:c6:c2:27:7e:90:e8:3e:cd:89:22:
                    aa:13:15:d7:d9:41:e5:3f:fc:79:64:f7:e4:84:8c:
                    87:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:75:66:F7:8D:6A:A3:2C:BF:51:58:95:0E:C6:51:68:AB:50:71:44
            X509v3 Authority Key Identifier:
                keyid:19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:c0:7a:48:ff:4f:b1:f8:1f:a2:e4:94:78:b8:d5:2c:bc:66:
         7f:0c:39:d6:55:bc:c0:2c:d1:55:9b:34:1d:b3:f1:f5:0e:fe:
         d3:9b:09:13:01:b0:c9:ba:94:c7:83:d6:17:7b:a7:74:07:66:
         6f:5f:73:cc:29:af:9b:8e:64:5f:f8:4e:00:51:6d:b9:29:b8:
         c8:2d:bc:db:c4:5e:15:3d:50:c2:6b:84:f4:a6:0a:bb:e8:b9:
         c0:48:d7:0f:fd:35:3d:a6:37:22:b0:62:4a:ab:56:5a:f5:4f:
         66:a9:3d:4c:8d:a7:f8:4d:6e:23:37:79:db:1d:27:38:d0:d1:
         b2:de:25:21:92:24:fe:b6:4a:3c:d0:50:b0:bc:05:7e:74:39:
         5a:9a:05:b1:92:df:b8:23:3e:5c:2a:01:6c:79:05:26:47:a3:
         5c:55:d9:9c:59:98:d0:9e:60:b0:5d:1b:47:81:26:c1:f4:e1:
         0c:21:4a:12:75:bb:7b:da:21:4b:58:f0:78:c8:cd:d2:42:70:
         c7:13:f2:35:0e:49:df:30:9e:31:90:41:99:65:48:e4:0d:e0:
         96:c4:96:c7:36:59:ae:95:7c:a5:42:b4:7b:32:9a:23:b0:44:
         31:e9:00:44:ea:be:b2:c4:11:48:61:bf:9b:9f:b1:b6:e0:b4:
         7a:47:00:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:28:14 2025 by rpki-client