Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
File:                     guX7w-pSWnjGMMTahkuppg4Zm_8.mft (raw, json)
Hash identifier:          FSVn6C8LtaCAvWWuHuLKZJoVC98FoToLmZuvkd/NtC4=
Subject key identifier:   96:92:BF:49:0E:2A:51:87:20:C0:44:2D:42:4B:E7:13:0E:17:B0:76
Authority key identifier: 82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
Certificate issuer:       /CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Certificate serial:       01984A09C5A55133FCB01E14735541AB59F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
Manifest number:          1602
Signing time:             Sun 27 Jul 2025 04:00:11 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:11 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:11 +0000
Files and hashes:         1: 1-QG4tCncv0FTtCHqg5B2GIvzr7Y.roa (hash: Y2rS+2UdPK85e7sE5yCklBS//u+UrJBVKAmv+QqSGio=)
                          2: guX7w-pSWnjGMMTahkuppg4Zm_8.crl (hash: 4e9iAeNV+39uwEDhNEqh5vAgF8lz7iVTemuGgZwavDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:09:c5:a5:51:33:fc:b0:1e:14:73:55:41:ab:59:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
        Validity
            Not Before: Jul 27 04:00:11 2025 GMT
            Not After : Jul 28 04:00:11 2025 GMT
        Subject: CN=9692bf490e2a518720c0442d424be7130e17b076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6b:7c:7e:2e:79:d7:f1:6b:1a:1b:75:05:37:
                    d1:a6:a0:8a:b0:89:18:b4:a5:08:ac:75:6a:f4:e6:
                    1d:8f:95:91:05:a4:b9:d9:e1:25:db:63:77:bf:76:
                    73:0d:6a:ca:86:37:75:de:b2:28:d6:df:19:a3:7c:
                    8b:73:3a:25:6f:e6:87:31:fb:8b:b2:20:8d:bd:04:
                    dc:70:bd:8f:aa:b7:3a:c2:2e:d3:d5:fa:ed:e0:6c:
                    0c:11:0a:14:b0:10:47:f5:6c:92:52:19:67:45:f8:
                    47:31:cc:1f:aa:3f:51:28:07:da:d3:df:b1:59:a9:
                    b4:27:6c:68:f4:ba:36:c0:d9:ef:7b:82:6c:aa:86:
                    51:ad:67:fc:3f:9b:bc:de:d8:25:86:f4:e0:08:7e:
                    73:17:5a:22:b3:42:4a:16:27:73:93:98:fa:69:57:
                    6c:ce:c0:63:46:9a:a2:4f:fa:a6:ce:2f:07:34:76:
                    8d:5e:8b:49:b5:83:3c:92:22:a9:6f:6b:35:41:47:
                    f1:89:7f:e3:63:d9:42:e1:26:38:4a:60:e6:9d:83:
                    05:2a:5e:e9:eb:68:89:75:f0:d8:82:97:b3:2c:7d:
                    74:3b:44:83:37:d0:c6:9f:5b:e5:9b:70:aa:4b:0c:
                    1e:dc:c2:32:a9:12:33:47:68:93:7a:54:d1:a1:0c:
                    6d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:92:BF:49:0E:2A:51:87:20:C0:44:2D:42:4B:E7:13:0E:17:B0:76
            X509v3 Authority Key Identifier:
                keyid:82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:33:8e:a5:41:ba:13:9c:03:f6:a4:6d:3a:7a:4e:22:d0:71:
         25:22:0a:a8:91:0b:e6:ea:8d:3b:2f:1d:4e:84:17:b7:f0:ae:
         35:9b:f7:91:6b:70:f1:6c:c9:5a:d4:97:60:13:c3:35:12:74:
         15:75:b3:7c:43:82:8a:e6:b4:7e:fe:04:01:be:8c:d0:fd:2a:
         bc:92:90:8d:14:03:e9:2c:f7:42:08:7c:cf:c6:13:dc:4e:93:
         8c:27:4a:71:50:0f:cc:21:e4:2f:93:85:fe:07:47:60:23:61:
         11:f7:10:1a:a5:51:e0:cf:99:bf:b5:3a:eb:b1:b6:cc:6a:43:
         bd:b7:2d:1e:20:75:fb:6d:f4:bc:42:22:4d:ad:be:cb:b2:6e:
         4e:81:f2:e7:d1:08:a4:33:54:db:06:d3:82:6c:06:b1:fd:f9:
         3c:f1:32:c0:7b:3f:d9:bb:8b:85:e6:8e:d1:15:c9:d9:73:e7:
         50:ee:01:a0:77:08:79:76:11:64:73:63:10:c2:25:f7:0e:6a:
         35:15:5a:51:a5:8a:0e:06:9b:5e:20:f3:0d:a5:bb:65:fe:dc:
         a4:be:88:4a:a5:04:8c:4f:3a:cc:4d:d3:33:56:57:f9:cb:76:
         8d:1b:36:1f:2e:5e:72:0a:d7:ab:37:b3:95:63:e7:18:b2:c9:
         fe:db:ef:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCcWlUTP8sB4Uc1VBq1n0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTVmYmMzZWE1MjVhNzhjNjMwYzRkYTg2NGJhOWE2MGUx
OTliZmYwHhcNMjUwNzI3MDQwMDExWhcNMjUwNzI4MDQwMDExWjAzMTEwLwYDVQQD
Eyg5NjkyYmY0OTBlMmE1MTg3MjBjMDQ0MmQ0MjRiZTcxMzBlMTdiMDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2t8fi551/FrGht1BTfRpqCKsIkY
tKUIrHVq9OYdj5WRBaS52eEl22N3v3ZzDWrKhjd13rIo1t8Zo3yLczolb+aHMfuL
siCNvQTccL2Pqrc6wi7T1frt4GwMEQoUsBBH9WySUhlnRfhHMcwfqj9RKAfa09+x
Wam0J2xo9Lo2wNnve4JsqoZRrWf8P5u83tglhvTgCH5zF1ois0JKFidzk5j6aVds
zsBjRpqiT/qmzi8HNHaNXotJtYM8kiKpb2s1QUfxiX/jY9lC4SY4SmDmnYMFKl7p
62iJdfDYgpezLH10O0SDN9DGn1vlm3CqSwwe3MIyqRIzR2iTelTRoQxttQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaSv0kOKlGHIMBELUJL5xMOF7B2MB8GA1UdIwQY
MBaAFILl+8PqUlp4xjDE2oZLqaYOGZv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VYN3ctcFNXbmpHTU1UYWhrdXBwZzRabV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yZWNlMjYtMTc4MS00NTVlLTgwYjMt
OTNkZDY1MDc0ODhlLzEvZ3VYN3ctcFNXbmpHTU1UYWhrdXBwZzRabV84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8yZWNlMjYtMTc4MS00NTVlLTgwYjMtOTNkZDY1MDc0ODhl
LzEvZ3VYN3ctcFNXbmpHTU1UYWhrdXBwZzRabV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYjOOpUG6
E5wD9qRtOnpOItBxJSIKqJEL5uqNOy8dToQXt/CuNZv3kWtw8WzJWtSXYBPDNRJ0
FXWzfEOCiua0fv4EAb6M0P0qvJKQjRQD6Sz3Qgh8z8YT3E6TjCdKcVAPzCHkL5OF
/gdHYCNhEfcQGqVR4M+Zv7U667G2zGpDvbctHiB1+230vEIiTa2+y7JuToHy59EI
pDNU2wbTgmwGsf35PPEywHs/2buLheaO0RXJ2XPnUO4BoHcIeXYRZHNjEMIl9w5q
NRVaUaWKDgabXiDzDaW7Zf7cpL6ISqUEjE86zE3TM1ZX+ct2jRs2Hy5ecgrXqzez
lWPnGLLJ/tvvYQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:05:55 2025 by rpki-client