Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
File:                     GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft (raw, json)
Hash identifier:          wVSmNE8nws3ATdKY9oaNp+HArfTfWlClsuaH1902n7M=
Subject key identifier:   BF:35:62:A4:30:76:44:AA:F6:3D:26:D4:16:53:23:68:90:1B:A7:12
Authority key identifier: 1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA
Certificate issuer:       /CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
Certificate serial:       01987486FBAA1E73302353ACE0574220D375
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
Manifest number:          0ED4
Signing time:             Mon 04 Aug 2025 10:00:59 +0000
Manifest this update:     Mon 04 Aug 2025 10:00:59 +0000
Manifest next update:     Tue 05 Aug 2025 10:00:59 +0000
Files and hashes:         1: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl (hash: VBZ67TJr3x4EiUQKSGHVKPJzQKPHTdhImc3EsVkdlv8=)
                          2: dhbqsDMCYbdJQ5KWes-T7R0t68c.roa (hash: A26S4K/y1MLobATqv2Mkxdn527XJqQ0E6NlZCnsWU/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 10:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:86:fb:aa:1e:73:30:23:53:ac:e0:57:42:20:d3:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
        Validity
            Not Before: Aug  4 10:00:59 2025 GMT
            Not After : Aug  5 10:00:59 2025 GMT
        Subject: CN=bf3562a4307644aaf63d26d416532368901ba712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:33:b2:7f:83:96:c1:a8:1c:9d:57:d9:02:
                    e5:a0:fd:f9:92:90:70:b2:22:01:5a:4d:38:af:86:
                    9e:35:9c:b8:c8:bb:a3:5d:06:54:7c:c1:f6:0f:12:
                    f1:7c:4c:dd:d0:17:2e:95:bd:e9:ab:fc:b9:54:f5:
                    a0:b9:c4:76:c8:0a:8e:64:a6:8d:6a:01:1c:2d:55:
                    00:56:dd:7b:73:59:92:b5:d1:34:5c:32:2b:6d:be:
                    03:30:b0:13:90:11:0c:09:6a:28:ac:03:e7:58:59:
                    fe:48:f6:d3:99:10:80:5d:09:75:03:1a:3d:31:6c:
                    f9:4d:ff:ed:77:e0:a3:15:be:ca:53:34:62:24:c6:
                    ef:11:1d:c7:fe:35:c9:fd:b3:7d:d6:c0:a6:d3:b7:
                    17:7c:dc:ee:1a:62:ac:d7:33:38:2b:85:85:a7:a1:
                    25:c4:c3:87:0f:86:f2:58:64:8c:ab:d1:b8:8d:24:
                    f1:f2:b3:4b:ce:94:67:d0:c8:ad:b0:25:2b:a0:bf:
                    0a:15:c6:f6:e5:e5:45:2d:ba:98:ca:08:b4:1b:76:
                    0a:80:b1:ca:10:d6:74:fc:e0:4e:ff:7d:18:e4:41:
                    17:81:68:c4:cb:cb:b0:ca:41:16:48:36:86:e1:ad:
                    66:12:85:76:15:8d:ef:48:ee:3a:0e:9b:1d:8d:ab:
                    63:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:35:62:A4:30:76:44:AA:F6:3D:26:D4:16:53:23:68:90:1B:A7:12
            X509v3 Authority Key Identifier:
                keyid:1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a5:2b:64:3f:6d:c8:ba:dd:85:5d:af:3b:7b:02:27:a8:d4:
         d4:36:05:1f:38:9a:7e:91:b6:ef:7e:d5:d5:50:31:6a:2f:9a:
         b1:05:54:3c:da:07:ea:cf:be:5b:e9:d6:c8:94:ac:d7:6b:fe:
         87:f5:c7:7e:3a:4f:b9:7c:9a:08:41:de:87:af:de:34:5e:64:
         10:be:3d:95:3c:5b:d0:e4:5c:b3:34:23:4c:55:d6:59:6f:29:
         02:72:63:21:73:9e:d7:68:3b:df:05:87:63:0e:b5:e4:e8:c5:
         9b:8b:f9:04:f9:c2:9e:68:16:18:70:da:c2:82:2c:3d:c0:a7:
         87:5d:44:c1:ff:e7:0b:78:08:ec:a8:cb:25:0a:fa:0d:52:21:
         0d:3c:85:11:b8:a0:32:3d:e3:71:c0:63:04:68:24:a5:64:dc:
         45:d7:7f:10:d3:05:99:66:a4:da:06:40:70:66:43:a8:1d:3a:
         6b:3e:a6:11:32:1f:83:3d:60:e3:9d:fc:28:5a:d2:0c:dc:76:
         df:1f:e6:62:b7:05:27:61:8a:84:9b:06:d6:a4:a8:71:0c:32:
         27:b8:21:e8:5a:85:c0:08:ba:b9:b1:73:98:30:e0:17:26:b7:
         eb:c1:69:13:13:7d:45:0f:e6:19:4b:e1:79:c8:92:b6:57:8a:
         8c:31:71:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:21:13 2025 by rpki-client