Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
File:                     GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft (raw, json)
Hash identifier:          X8baCYnMvkGGmt1qIdmrQnOD8p3sNr7odTYIqt+jNyo=
Subject key identifier:   F5:16:0F:89:5A:39:75:74:D0:19:59:37:66:53:F4:A1:98:10:11:41
Authority key identifier: 1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
Certificate issuer:       /CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Certificate serial:       01984219FF31E2D8BB508A565DE7A455B210
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
Manifest number:          15FD
Signing time:             Fri 25 Jul 2025 15:00:56 +0000
Manifest this update:     Fri 25 Jul 2025 15:00:56 +0000
Manifest next update:     Sat 26 Jul 2025 15:00:56 +0000
Files and hashes:         1: 4sRmTDXLCty2oG7uCbm4SXKIyVE.roa (hash: 4X9pRb1swIu+cVaImRyIHtbj3QJV4dZcCo4Wvcbk9Ug=)
                          2: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl (hash: 1IYmCYTpEccOFsR2lRfFevW8ikaugqWRg7FB+G8xSiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 15:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:42:19:ff:31:e2:d8:bb:50:8a:56:5d:e7:a4:55:b2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
        Validity
            Not Before: Jul 25 15:00:56 2025 GMT
            Not After : Jul 26 15:00:56 2025 GMT
        Subject: CN=f5160f895a397574d01959376653f4a198101141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:c6:e9:31:1f:c5:44:62:eb:ad:3a:98:08:
                    ec:7d:ac:d6:6f:b2:f6:7f:b7:b2:9c:23:10:71:2d:
                    b3:e4:9d:16:bf:f5:25:59:6e:0e:8b:bf:e9:68:83:
                    1c:6a:81:d4:b8:c9:36:48:17:41:13:66:b1:dd:43:
                    fd:51:15:36:d7:31:dd:86:a1:a6:f9:c9:fc:36:2a:
                    10:0c:5e:d2:3d:b9:83:01:e9:36:47:8b:62:8d:54:
                    42:42:02:30:e8:e8:8e:e4:7d:5f:a7:cc:ab:6d:6b:
                    bc:d0:92:19:e0:8a:5e:d3:6c:8a:c3:45:04:4c:3f:
                    92:2d:69:13:6c:9d:a9:63:96:3c:30:54:8b:da:07:
                    e2:e3:fb:91:22:d9:e1:44:13:0c:a3:b3:cd:31:f2:
                    da:bd:64:7d:a5:98:51:73:f8:36:86:1c:17:18:85:
                    e6:e2:d1:c1:08:24:d3:85:fb:c4:e1:c4:f9:e2:33:
                    44:01:60:90:fc:17:e5:1d:30:93:f7:f9:fb:6f:13:
                    76:d5:b9:e8:37:c8:03:7c:83:1c:26:e1:5c:c7:0e:
                    7a:d1:e9:b0:1a:68:e2:79:a7:df:bc:cd:0a:8d:6b:
                    f9:d3:c3:b3:9f:2c:4a:a6:ab:b7:5d:29:93:d9:04:
                    d5:83:30:aa:b3:13:c6:c9:fd:9d:cb:d2:f8:32:30:
                    d8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:16:0F:89:5A:39:75:74:D0:19:59:37:66:53:F4:A1:98:10:11:41
            X509v3 Authority Key Identifier:
                keyid:1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:d9:a2:f8:33:eb:75:57:92:54:37:08:b3:48:5b:bc:90:18:
         54:0d:26:dc:1c:26:86:66:d5:5d:cd:b9:9c:2b:9b:69:0b:59:
         cc:31:0f:e7:c1:1a:2d:92:a5:c7:09:05:e0:b0:54:c8:96:38:
         08:ee:f9:3e:cd:bf:7e:6e:73:1e:83:e9:43:67:cb:35:46:1f:
         e8:9f:56:f1:46:ca:b3:46:6a:03:60:d5:78:f4:20:7a:3a:fa:
         8f:7e:90:4e:c4:4d:ce:bb:a4:a7:2a:ec:41:61:6c:09:5d:e8:
         0f:c5:42:1e:fd:e7:74:3d:33:93:e7:12:d6:2b:0f:6d:24:8c:
         f4:15:cb:aa:db:b2:fe:60:31:1d:d5:31:f0:71:4c:6c:ff:41:
         7a:6f:85:5a:2f:58:0f:0f:b0:51:62:fb:a8:f4:2e:35:72:f5:
         ea:16:f4:b3:f6:ec:44:74:77:15:f2:0d:d3:e0:19:00:83:8f:
         f7:d1:ec:66:76:fd:62:20:48:c3:30:b1:eb:a1:06:0f:8b:88:
         e7:ba:d0:60:74:db:5a:ed:43:a7:bf:f3:02:a9:bc:b5:cb:96:
         f0:cb:ae:14:3f:ab:56:5c:7f:ad:3a:7d:41:c9:41:08:87:c2:
         da:1b:bc:a8:4c:f9:a7:1e:5d:d3:43:e9:5b:05:51:7a:4d:9e:
         be:96:98:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhCGf8x4ti7UIpWXeekVbIQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMzFlNzNlNmQzZmM3NDVmMTI3YTdlZDk5MGFhNDEyMTQ5
MDVlNjEwHhcNMjUwNzI1MTUwMDU2WhcNMjUwNzI2MTUwMDU2WjAzMTEwLwYDVQQD
EyhmNTE2MGY4OTVhMzk3NTc0ZDAxOTU5Mzc2NjUzZjRhMTk4MTAxMTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8PG6TEfxURi6606mAjsfazWb7L2
f7eynCMQcS2z5J0Wv/UlWW4Oi7/paIMcaoHUuMk2SBdBE2ax3UP9URU21zHdhqGm
+cn8NioQDF7SPbmDAek2R4tijVRCQgIw6OiO5H1fp8yrbWu80JIZ4Ipe02yKw0UE
TD+SLWkTbJ2pY5Y8MFSL2gfi4/uRItnhRBMMo7PNMfLavWR9pZhRc/g2hhwXGIXm
4tHBCCTThfvE4cT54jNEAWCQ/BflHTCT9/n7bxN21bnoN8gDfIMcJuFcxw560emw
GmjieaffvM0KjWv508OznyxKpqu3XSmT2QTVgzCqsxPGyf2dy9L4MjDYGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUWD4laOXV00BlZN2ZT9KGYEBFBMB8GA1UdIwQY
MBaAFBsx5z5tP8dF8Sen7ZkKpBIUkF5hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3pIblBtMF94MFh4SjZmdG1RcWtFaFNRWG1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMWZkZDYtNzMwZS00YWYwLThhNTYt
NDYwMjczZjE2ZGRkLzEvR3pIblBtMF94MFh4SjZmdG1RcWtFaFNRWG1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hMWZkZDYtNzMwZS00YWYwLThhNTYtNDYwMjczZjE2ZGRk
LzEvR3pIblBtMF94MFh4SjZmdG1RcWtFaFNRWG1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqtmi+DPr
dVeSVDcIs0hbvJAYVA0m3BwmhmbVXc25nCubaQtZzDEP58EaLZKlxwkF4LBUyJY4
CO75Ps2/fm5zHoPpQ2fLNUYf6J9W8UbKs0ZqA2DVePQgejr6j36QTsRNzrukpyrs
QWFsCV3oD8VCHv3ndD0zk+cS1isPbSSM9BXLqtuy/mAxHdUx8HFMbP9Bem+FWi9Y
Dw+wUWL7qPQuNXL16hb0s/bsRHR3FfIN0+AZAIOP99HsZnb9YiBIwzCx66EGD4uI
57rQYHTbWu1Dp7/zAqm8tcuW8MuuFD+rVlx/rTp9QclBCIfC2hu8qEz5px5d00Pp
WwVRek2evpaY7Q==
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:36:50 2025 by rpki-client