Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
File:                     Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft (raw, json)
Hash identifier:          voQvvjAXvKXf7ml+TKtqsra1ppzwt1XA/K7xsk2zsJc=
Subject key identifier:   C9:36:8C:36:81:52:BC:6C:3D:8A:F4:24:8B:DC:F7:4A:33:4E:A5:DC
Authority key identifier: 1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D
Certificate issuer:       /CN=1a7d610942d4d9f96d5731b9538fd4c78ba0f20d
Certificate serial:       0198801D6C92F386C2496050EA6C606E37B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
Manifest number:          161F
Signing time:             Wed 06 Aug 2025 16:01:08 +0000
Manifest this update:     Wed 06 Aug 2025 16:01:08 +0000
Manifest next update:     Thu 07 Aug 2025 16:01:08 +0000
Files and hashes:         1: Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl (hash: tIs8KNzOAY/PlhazUc6JXD2ZlSCLQNLxpF8jKPKwUHA=)
                          2: Z0_nKn5Ppf7O_xlPG_HQgKTjKfg.roa (hash: lqxBjj1kSi94JV6i0p7bCeDB9JZ982zRhs/Zft9BEa8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:1d:6c:92:f3:86:c2:49:60:50:ea:6c:60:6e:37:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7d610942d4d9f96d5731b9538fd4c78ba0f20d
        Validity
            Not Before: Aug  6 16:01:08 2025 GMT
            Not After : Aug  7 16:01:08 2025 GMT
        Subject: CN=c9368c368152bc6c3d8af4248bdcf74a334ea5dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6e:72:42:cb:d2:54:af:a1:f0:91:84:94:78:
                    2f:75:73:b4:e1:fd:71:d9:6b:cd:d1:60:01:db:c5:
                    0f:c3:c7:1f:87:98:22:5e:c8:9d:91:3b:5b:83:67:
                    30:c4:1b:3d:4a:58:f3:96:f7:5a:12:bf:63:fd:ab:
                    a5:d3:0c:69:d8:54:77:6f:73:9b:76:3d:17:44:d9:
                    27:05:f8:60:22:46:ab:51:5d:03:14:53:11:85:4b:
                    3c:b1:d8:bf:9c:2a:0b:b6:5d:ef:41:03:f6:4f:68:
                    62:81:64:35:ee:9f:e5:8f:0c:47:04:1f:77:a9:d2:
                    5b:01:a3:32:73:26:f7:d5:6b:42:af:68:e1:dd:87:
                    b6:ff:2b:7d:20:20:91:95:8a:93:95:08:6b:7b:cf:
                    f0:a2:e6:00:54:c6:92:83:b2:56:4b:19:08:fe:a0:
                    23:60:3d:8d:1a:58:0f:ea:30:57:04:9e:3c:17:ff:
                    47:52:b3:d3:f3:a3:9a:07:ac:36:ff:14:6f:69:5b:
                    b8:18:36:e0:0c:98:d0:d6:64:a4:91:eb:a7:b2:3b:
                    6a:a3:12:7d:26:9e:90:cf:01:fa:39:6d:40:14:72:
                    a2:e4:78:b0:bf:fe:18:86:73:5a:3d:28:8b:4b:54:
                    32:1e:7b:e7:93:33:df:8d:db:a0:de:f4:26:5b:0a:
                    6c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:36:8C:36:81:52:BC:6C:3D:8A:F4:24:8B:DC:F7:4A:33:4E:A5:DC
            X509v3 Authority Key Identifier:
                keyid:1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ae:87:fd:0a:31:36:29:a5:11:65:c7:40:de:a2:d9:13:96:
         87:88:7e:cd:3e:1f:ff:e5:26:e6:29:86:84:ff:c3:b0:c4:62:
         4c:b5:74:ce:6e:e7:d4:25:0b:1f:0a:eb:e6:10:53:04:14:8d:
         d6:73:a4:3a:3b:14:68:80:f6:00:68:8b:f1:ae:f3:5e:64:3c:
         6d:52:fc:8d:07:d5:37:3c:f8:28:4f:82:ec:df:a5:47:6c:fc:
         5b:47:95:04:23:10:60:75:3c:fe:71:02:0c:ea:2e:fb:71:e2:
         d4:30:02:b2:b9:40:06:dc:e1:18:b4:2f:7e:76:6c:c7:7e:55:
         0f:73:c5:7e:f9:31:6f:e2:a2:ef:7c:e4:c7:e1:16:54:59:ae:
         50:99:f3:cc:91:48:2a:e6:42:19:84:de:1e:f7:23:f9:e1:99:
         44:08:4f:76:ae:75:91:81:48:b0:56:e8:99:0f:3d:08:c7:14:
         12:4f:93:f7:c0:c1:ea:37:bd:8a:4a:50:95:eb:2f:1d:52:98:
         f5:ab:9a:f3:4b:c9:18:8c:e5:b9:e2:ce:57:b8:23:44:cb:45:
         c5:0a:3c:68:b4:ed:eb:97:f5:eb:26:6f:73:5f:95:c5:b3:aa:
         c6:27:e1:49:da:84:ce:6f:78:bc:0a:72:10:2c:cb:24:28:92:
         b0:31:2a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:39:47 2025 by rpki-client