Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
File:                     GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft (raw, json)
Hash identifier:          DiSWnq8EHVAuq2uGKD3N3CSBqTR+cDXQdW6hBvtgHdk=
Subject key identifier:   88:95:1C:3C:04:E4:9B:01:2D:1B:13:6F:CB:2F:EF:24:DD:BD:3B:A9
Authority key identifier: 18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8
Certificate issuer:       /CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
Certificate serial:       01976CCFDE92338D284051CF185673AE7079
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
Manifest number:          0913
Signing time:             Sat 14 Jun 2025 05:00:51 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:51 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:51 +0000
Files and hashes:         1: GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl (hash: 9khoK5OiZpgrmyey8pohT6jQXrT+l1usrL3lNcy//As=)
                          2: ZnGF6W1D3X-NrkNFr6eImmQhdy8.roa (hash: Bt9KY5B97syBzqVEmQ0mMOoNBbtJyQudj313FGbVLOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:de:92:33:8d:28:40:51:cf:18:56:73:ae:70:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
        Validity
            Not Before: Jun 14 05:00:51 2025 GMT
            Not After : Jun 15 05:00:51 2025 GMT
        Subject: CN=88951c3c04e49b012d1b136fcb2fef24ddbd3ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d0:5a:00:43:49:a8:fb:b0:e8:31:6a:95:4c:
                    63:aa:ae:c8:da:70:df:5c:ee:67:57:75:d7:d1:14:
                    b9:de:f5:be:43:ab:8b:fe:a4:87:3b:92:73:0f:54:
                    64:72:83:dc:f5:4c:58:ee:51:ef:dd:ad:f1:c2:9e:
                    e3:99:d7:f3:b6:68:43:78:0b:f8:fa:4e:5c:c0:8c:
                    b2:d7:c7:a5:06:31:3f:a2:87:7d:81:13:e5:55:32:
                    39:75:fd:67:b8:b3:b4:eb:93:dd:2f:05:9d:39:1f:
                    19:d6:f6:9c:b4:16:fd:18:62:e4:be:2d:57:96:06:
                    cb:ad:f9:75:f1:be:74:dc:a6:ad:0f:6b:78:cf:78:
                    a5:8f:6f:51:13:83:da:24:78:4f:63:97:0f:9f:46:
                    d6:f9:cd:ef:71:99:9a:f2:a2:27:6a:75:48:73:57:
                    b9:8c:4e:91:5c:a9:91:ca:44:42:b5:68:0c:ae:ff:
                    e6:1c:e1:3d:aa:c0:39:67:62:93:eb:7e:22:cf:d4:
                    24:6d:d1:4b:fe:31:0a:fc:af:45:61:5e:52:be:a8:
                    15:0c:b7:32:88:72:fa:77:9b:36:96:c3:00:73:c1:
                    c1:21:0c:0d:3f:89:03:e3:28:05:3d:1a:06:38:72:
                    b3:e8:d9:23:24:44:f8:66:1a:12:3f:03:80:e4:70:
                    98:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:95:1C:3C:04:E4:9B:01:2D:1B:13:6F:CB:2F:EF:24:DD:BD:3B:A9
            X509v3 Authority Key Identifier:
                keyid:18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:0e:70:e7:3f:98:0d:54:69:34:33:69:6a:15:e1:2b:7b:cf:
         a9:01:5f:58:d1:65:5f:f9:0c:50:44:54:a8:99:4d:0e:40:b8:
         66:21:7e:74:bb:87:73:05:5d:41:03:0a:62:66:66:8d:fb:a6:
         18:e7:d2:20:80:12:d0:b1:a3:29:ce:69:ee:dd:ec:b0:81:f4:
         89:e9:c2:c7:33:ba:e2:f2:17:a3:6a:4b:33:3b:16:04:1a:e7:
         33:62:2c:64:c8:e8:7f:b6:fe:3f:49:cc:11:b9:e9:15:2a:20:
         13:63:0a:23:07:ce:68:1d:11:b7:89:f0:f5:f4:26:95:d3:24:
         a1:78:5f:3e:d1:ad:cc:15:2a:25:75:83:f4:dc:7a:88:54:93:
         34:46:16:4e:96:31:97:17:24:80:e1:49:62:10:e9:5f:10:e8:
         04:01:17:27:dd:02:bf:3e:f0:5b:32:79:29:d7:f9:0c:ea:05:
         f5:ac:3a:6c:a1:07:5d:8d:56:01:ac:4c:9d:01:65:7d:18:64:
         71:9f:38:06:ff:1a:ba:0f:95:e3:e4:38:e5:39:fc:43:da:6d:
         77:19:52:ac:53:83:57:68:0e:84:66:b4:15:12:d8:8a:f5:4b:
         ab:df:73:cb:bd:f5:5e:f3:06:0c:db:bd:2b:bf:01:c3:07:68:
         ac:7f:10:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:39:33 2025 by rpki-client