Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
File:                     gvolsvyxRoEUtziSirINh2G_iDE.mft (raw, json)
Hash identifier:          12IWaok2r/w6kK3awf9+riC3x+RWUMlC4hiIRdD4L2U=
Subject key identifier:   9C:A6:6E:9A:8D:42:0D:4A:9D:B6:DC:19:24:9D:5C:C5:5C:05:9A:52
Authority key identifier: 82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31
Certificate issuer:       /CN=82fa25b2fcb1468114b738928ab20d8761bf8831
Certificate serial:       019880C1F6000D6479E684A7390F11F0FEAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
Manifest number:          1270
Signing time:             Wed 06 Aug 2025 19:00:51 +0000
Manifest this update:     Wed 06 Aug 2025 19:00:51 +0000
Manifest next update:     Thu 07 Aug 2025 19:00:51 +0000
Files and hashes:         1: gvolsvyxRoEUtziSirINh2G_iDE.crl (hash: 3L4WHzHagHK9yMYhOcD6s24/BEQi9bQYKL7IpiZRAuY=)
                          2: vYeUQvTtmRwFxe2HjEVg0-w3YtY.roa (hash: 5J5aN+7Pc9ymOEzVJcf+044A0ctdwVC0r43YEoVys+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c1:f6:00:0d:64:79:e6:84:a7:39:0f:11:f0:fe:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82fa25b2fcb1468114b738928ab20d8761bf8831
        Validity
            Not Before: Aug  6 19:00:51 2025 GMT
            Not After : Aug  7 19:00:51 2025 GMT
        Subject: CN=9ca66e9a8d420d4a9db6dc19249d5cc55c059a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8b:93:44:7d:41:67:01:72:47:3d:31:11:b6:
                    99:9a:1c:6f:e5:ab:b2:57:d6:45:f5:56:7b:42:dd:
                    e5:35:ea:fb:32:e1:67:ee:2e:d6:1f:c6:49:ae:3a:
                    9b:2d:02:67:38:ee:e0:17:06:20:f5:56:83:da:d0:
                    a1:1f:fe:4a:e8:ab:f1:a1:b5:62:78:95:68:8f:80:
                    40:24:5f:99:73:7b:7c:33:af:24:e9:ea:2d:ac:29:
                    55:9c:70:c4:5e:93:08:bc:75:87:0a:c3:e1:95:6d:
                    ac:51:1e:23:a6:3a:72:3a:6f:33:01:4d:95:ec:60:
                    81:f4:61:6f:ca:80:ab:18:17:98:7d:f2:20:4f:e2:
                    67:b0:a0:26:c8:c6:68:22:8b:0b:46:99:f3:66:0c:
                    94:51:be:83:62:46:a1:e5:82:ec:47:72:a0:68:47:
                    b3:e9:25:10:25:41:4f:ae:4e:e5:07:f1:40:e8:9e:
                    02:97:26:41:0c:be:a1:94:ce:cb:9d:ba:1d:4e:35:
                    48:33:a4:57:0b:e2:63:ac:8a:aa:19:ce:f6:22:ee:
                    7a:9f:36:b3:fb:10:3d:66:a8:89:99:95:8c:8f:f9:
                    56:f8:ec:e7:ca:98:71:3d:fc:de:39:e2:f8:02:80:
                    c5:b7:21:fa:45:ee:b7:84:c6:34:4d:4a:1f:4e:9a:
                    9f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A6:6E:9A:8D:42:0D:4A:9D:B6:DC:19:24:9D:5C:C5:5C:05:9A:52
            X509v3 Authority Key Identifier:
                keyid:82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c6:78:a3:5a:4d:1c:8b:da:59:ff:ef:6f:e8:d4:68:f0:11:
         10:1d:92:86:36:d1:f8:11:f6:1d:1d:4c:13:bc:d4:b6:87:ae:
         d2:6b:87:b7:3c:19:2a:78:65:5b:88:53:19:b2:a1:46:f6:6e:
         ff:c9:5e:3e:72:d4:fe:19:5e:a7:75:97:0f:6c:dd:8c:55:41:
         5b:7b:78:a2:93:5b:9b:f6:f1:94:b7:cb:17:74:ad:c6:86:66:
         16:06:db:76:e9:40:f2:95:12:cd:f3:ee:32:2e:84:ba:20:f5:
         17:65:e7:26:26:7c:f8:9d:0b:bb:4c:fb:37:0f:08:88:6c:bb:
         56:dc:3e:c2:89:cb:27:99:17:12:74:d3:d1:ae:b7:78:2b:78:
         fb:0d:33:eb:7d:0f:c4:7e:78:fa:4d:4c:a6:6b:66:e0:5c:95:
         fd:d5:ae:db:e3:28:31:91:89:1d:dc:3e:8b:a9:b6:2d:5b:67:
         19:5a:f3:57:16:0b:39:cd:e9:4d:34:fd:2a:44:7d:dd:64:11:
         98:21:a0:46:a7:d4:3d:3b:f9:1f:86:af:e8:de:be:4f:66:53:
         22:d6:26:c9:06:4f:de:7e:b4:34:8b:df:a5:30:22:04:f8:ae:
         09:40:9e:0c:ea:6b:c9:ae:94:bb:02:5f:86:9f:77:32:96:be:
         fb:89:16:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:35:17 2025 by rpki-client