Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
File:                     Gsiv14efVVs88EP38zpmDV5htdw.mft (raw, json)
Hash identifier:          6FFSdvaCJr0/UOoKOVYb4YWVe1yygA5wRvfCipMTwGU=
Subject key identifier:   EE:79:32:2F:06:E4:36:E4:9C:35:0B:27:6B:B7:FD:4D:0C:A3:F5:E5
Authority key identifier: 1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC
Certificate issuer:       /CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
Certificate serial:       019A4EF4C0DC14D1E73A9E95B3E176E838E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
Manifest number:          0A39
Signing time:             Tue 04 Nov 2025 13:00:54 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:54 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:54 +0000
Files and hashes:         1: Gsiv14efVVs88EP38zpmDV5htdw.crl (hash: 5gS79LsY7D2hg3RdHr2R6+9OmM+l9Pa+SxEHvCwuEgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:c0:dc:14:d1:e7:3a:9e:95:b3:e1:76:e8:38:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
        Validity
            Not Before: Nov  4 13:00:54 2025 GMT
            Not After : Nov  5 13:00:54 2025 GMT
        Subject: CN=ee79322f06e436e49c350b276bb7fd4d0ca3f5e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:98:7a:7a:1b:38:15:d3:3c:e1:3c:61:f0:43:
                    23:90:d5:c4:fb:7d:35:0d:ef:af:55:4e:26:e0:24:
                    c2:c7:0e:5d:5c:fc:ce:10:86:c0:79:bd:4f:40:f8:
                    b9:6a:b3:46:05:12:3d:79:9f:63:30:87:85:c4:5b:
                    2a:a4:d3:14:d8:84:4c:42:37:30:59:28:9a:5c:b0:
                    b8:03:38:f1:c0:b4:7a:ad:b3:33:2a:b8:3d:86:b4:
                    ff:4d:00:4d:19:89:5a:f3:1a:a9:4e:68:d4:77:4d:
                    6c:f8:eb:62:f4:df:ae:ce:54:11:01:40:47:67:32:
                    9c:48:34:7f:eb:d3:b8:37:48:2e:5a:44:ba:6f:d5:
                    ba:fe:02:ec:6f:19:d1:23:bf:41:23:81:2d:da:33:
                    5e:2c:44:b6:d8:38:38:4c:f1:05:ca:36:3a:be:5c:
                    ca:70:c5:ba:3e:63:8a:41:39:7e:be:26:9e:2e:51:
                    b5:91:b7:6e:74:af:bc:9f:9f:15:e0:08:b2:e6:11:
                    9a:89:a4:a3:e0:99:d6:22:03:2e:3b:d3:10:06:c4:
                    9e:d1:d8:8a:1e:6d:b9:5f:a6:be:a2:9a:66:e4:30:
                    94:b5:85:21:a3:06:f1:57:d5:76:9f:a4:af:67:58:
                    db:6b:60:3d:4f:a1:54:ca:db:a2:9c:1f:ee:ce:e0:
                    a9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:79:32:2F:06:E4:36:E4:9C:35:0B:27:6B:B7:FD:4D:0C:A3:F5:E5
            X509v3 Authority Key Identifier:
                keyid:1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:de:76:fc:bd:e5:fd:89:43:51:32:45:c6:c6:a1:b2:a2:b0:
         83:38:43:35:3b:1f:59:c9:23:12:82:ab:8d:b2:7c:b3:bb:7f:
         ba:8a:9a:51:1c:ef:1c:43:43:d7:d9:8d:04:aa:8e:b6:3c:f3:
         fa:12:cb:ba:b1:20:66:48:cf:0d:81:fb:5d:a8:49:4e:4c:19:
         6e:88:4a:9b:9e:2b:8a:c4:6e:9e:58:99:2b:19:76:85:11:f5:
         df:db:0e:c1:86:7b:fb:df:7a:84:59:9a:c0:d3:a8:ec:81:da:
         6f:1f:c0:cd:41:24:af:0e:af:b1:57:9a:43:ef:cf:eb:2f:81:
         b9:14:e3:68:86:49:1a:a7:fd:aa:bf:b2:8d:1c:09:9c:05:70:
         4a:be:a5:a5:de:b7:b1:41:5d:96:e4:db:2b:2b:97:4f:50:7c:
         77:9e:64:56:a8:29:8b:e8:55:37:cc:2d:30:e5:ce:2b:36:4c:
         12:5a:74:90:64:23:88:99:af:f6:8f:8f:ad:c9:c7:17:8d:72:
         3f:3d:95:77:74:03:64:95:43:ad:c7:8f:31:4a:79:69:27:6e:
         c3:85:cf:52:4d:be:fb:ad:be:51:ec:4f:35:ff:26:21:cc:28:
         71:84:c3:ea:d4:89:53:0b:25:5b:a7:af:cf:1e:17:80:58:fd:
         95:1e:77:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:46 2025 by rpki-client