Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
File:                     gVeAUy7Smj-A57pBTvyzednsl8k.mft (raw, json)
Hash identifier:          zfXArqjvguOZhMFsNyDfhNAJt8ukME0sEc4pYpkNbpQ=
Subject key identifier:   BE:F1:05:68:3B:82:53:93:53:8D:1E:87:C1:EF:BD:60:01:4B:F7:89
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Certificate issuer:       /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial:       019644B22AAC9E585765734D2D8978F402A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
Manifest number:          07B2
Signing time:             Thu 17 Apr 2025 17:00:49 +0000
Manifest this update:     Thu 17 Apr 2025 17:00:49 +0000
Manifest next update:     Fri 18 Apr 2025 17:00:49 +0000
Files and hashes:         1: 8830yksUtOARQk3UFlh-4PNgBiA.roa (hash: EmMvReS/jq/SYrfMRIBrAHCck7YrsLYqaTcJWkpKgFg=)
                          2: EFk_WP_A_QvGCbPv627jqVmsHfg.roa (hash: k68DoPvpgB6wKb8qFWWLmBs9+urZUeVvssLhdMSBf6k=)
                          3: Qoyp_KSFKsVEEg02fUYTNo7SRXs.roa (hash: mLCh1eZnjR+MrenmFjvdAR50ujw/VIYVRd5MKC5x8OQ=)
                          4: ZE3Pd2Bv3QzdWxKRnPV6C_9jTsQ.roa (hash: ULlmWYQOwziva5U7xH3+US8Vy16wr3u3qWj4qpwczMo=)
                          5: c3zA2IV4VwS8jnesB0LpZBsDyEU.roa (hash: hofK+2Uxhr/bTuv6Zx9VkqisU5DNhllbJwm0jIPd9ao=)
                          6: gVeAUy7Smj-A57pBTvyzednsl8k.crl (hash: 0yywZXAXzIea2LQMPRMane7MukjB2u8siRV3Ml6ToNk=)
                          7: xufGdiw8vu26zsmML7UeTUou5hA.roa (hash: FPD/rr/c4+/3+ME4ysyP2eNMHG6cFBZQMwG4yZOWY+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:b2:2a:ac:9e:58:57:65:73:4d:2d:89:78:f4:02:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
        Validity
            Not Before: Apr 17 17:00:49 2025 GMT
            Not After : Apr 18 17:00:49 2025 GMT
        Subject: CN=bef105683b825393538d1e87c1efbd60014bf789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5d:c6:2b:dc:a8:c8:49:22:3a:4d:31:55:0c:
                    29:7f:b8:f3:07:b7:f6:fb:42:d0:c8:d3:11:0d:ed:
                    3a:12:c3:79:bd:85:52:d9:91:59:73:c3:de:04:87:
                    fc:73:c6:02:f4:e8:b2:55:3e:d5:04:6b:5a:3b:38:
                    57:98:cc:97:d2:a6:b8:97:2f:1c:ce:4f:41:11:cb:
                    31:02:36:a1:8c:ec:d4:41:69:97:41:81:7a:e9:37:
                    1d:51:49:55:e6:c6:e1:aa:bb:39:0f:e0:4d:d4:a7:
                    bb:ec:39:84:e7:b9:72:1b:1e:b2:6c:cd:c7:de:1c:
                    3e:19:3c:4b:bf:9c:32:45:35:74:59:b7:28:dd:ac:
                    8d:af:68:70:06:9d:00:58:15:31:10:7a:4e:ca:bc:
                    af:10:67:17:76:17:30:e4:ab:eb:f1:e2:cb:0b:48:
                    a0:5e:38:0e:05:b9:57:d1:47:6a:f2:de:a7:5f:67:
                    1e:86:85:ed:4c:ba:a0:d7:10:b8:18:d3:33:c3:bf:
                    55:ed:2d:64:57:37:97:b8:10:b6:14:30:3f:bc:01:
                    fa:b9:29:1e:52:0a:04:1c:3c:18:24:92:8e:3e:10:
                    5f:b7:6e:b5:b3:7d:81:19:2c:4a:91:65:eb:4c:a3:
                    f3:8b:f2:a2:e8:fe:0b:4b:2c:06:67:31:cc:e1:10:
                    bb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F1:05:68:3B:82:53:93:53:8D:1E:87:C1:EF:BD:60:01:4B:F7:89
            X509v3 Authority Key Identifier:
                keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:96:8c:6f:c1:e7:85:6d:03:fd:79:a8:96:87:99:4c:65:e4:
         7c:9c:52:73:7c:3d:fc:ba:a7:cc:73:e2:39:e4:9a:4a:65:27:
         ff:e7:32:db:b8:d6:20:ee:30:62:7d:54:ca:98:ff:c2:e2:16:
         6f:e7:13:6d:61:c0:91:d2:27:20:3e:5f:08:0d:95:c2:ed:b3:
         eb:3f:1a:18:c2:eb:c8:66:f7:bf:f8:e3:50:75:12:f1:93:8d:
         c5:47:ab:d2:1a:0b:72:5d:ce:6b:24:44:ae:e2:0a:fb:26:d4:
         4f:43:c4:d8:27:5b:98:ad:64:20:e4:26:4b:01:8d:90:56:2d:
         6f:b9:c8:13:00:55:a7:fb:b5:36:d9:92:93:f7:6d:34:b4:b4:
         37:e0:45:a8:0f:d0:85:e9:33:93:47:34:c8:d1:b1:b2:d3:e9:
         ab:9a:d5:ae:27:20:bf:5f:99:88:8f:4e:64:d0:57:e4:04:86:
         6a:63:e3:b5:55:6f:71:fd:f3:fc:b9:60:31:eb:45:88:39:c0:
         b0:82:0d:ce:68:54:11:8b:7e:a6:db:fd:68:fb:31:55:e3:12:
         3f:3a:84:3e:33:33:66:7a:51:fe:23:fc:a9:ae:f1:ac:66:a4:
         50:a2:9c:ce:dd:1b:79:ee:28:73:d9:3a:ae:6e:0f:7e:15:5c:
         3f:82:7d:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEsiqsnlhXZXNNLYl49AKhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNTc4MDUzMmVkMjlhM2Y4MGU3YmE0MTRlZmNiMzc5ZDll
Yzk3YzkwHhcNMjUwNDE3MTcwMDQ5WhcNMjUwNDE4MTcwMDQ5WjAzMTEwLwYDVQQD
EyhiZWYxMDU2ODNiODI1MzkzNTM4ZDFlODdjMWVmYmQ2MDAxNGJmNzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA713GK9yoyEkiOk0xVQwpf7jzB7f2
+0LQyNMRDe06EsN5vYVS2ZFZc8PeBIf8c8YC9OiyVT7VBGtaOzhXmMyX0qa4ly8c
zk9BEcsxAjahjOzUQWmXQYF66TcdUUlV5sbhqrs5D+BN1Ke77DmE57lyGx6ybM3H
3hw+GTxLv5wyRTV0Wbco3ayNr2hwBp0AWBUxEHpOyryvEGcXdhcw5Kvr8eLLC0ig
XjgOBblX0Udq8t6nX2cehoXtTLqg1xC4GNMzw79V7S1kVzeXuBC2FDA/vAH6uSke
UgoEHDwYJJKOPhBft261s32BGSxKkWXrTKPzi/Ki6P4LSywGZzHM4RC78wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7xBWg7glOTU40eh8HvvWABS/eJMB8GA1UdIwQY
MBaAFIFXgFMu0po/gOe6QU78s3nZ7JfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kZTMxYTYtYWFhMy00MDlkLThkNGYt
ZjYxNTU0YzZjMTQ1LzEvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9kZTMxYTYtYWFhMy00MDlkLThkNGYtZjYxNTU0YzZjMTQ1
LzEvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5aMb8Hn
hW0D/XmoloeZTGXkfJxSc3w9/LqnzHPiOeSaSmUn/+cy27jWIO4wYn1Uypj/wuIW
b+cTbWHAkdInID5fCA2Vwu2z6z8aGMLryGb3v/jjUHUS8ZONxUer0hoLcl3OayRE
ruIK+ybUT0PE2CdbmK1kIOQmSwGNkFYtb7nIEwBVp/u1NtmSk/dtNLS0N+BFqA/Q
hekzk0c0yNGxstPpq5rVricgv1+ZiI9OZNBX5ASGamPjtVVvcf3z/LlgMetFiDnA
sIINzmhUEYt+ptv9aPsxVeMSPzqEPjMzZnpR/iP8qa7xrGakUKKczt0bee4oc9k6
rm4PfhVcP4J9zw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:57:33 2025 by rpki-client