Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
File:                     gVeAUy7Smj-A57pBTvyzednsl8k.mft (raw, json)
Hash identifier:          WvkjzE1fhPitwMu2kRVn34BfffWt4LjJIzyJLJv/dW8=
Subject key identifier:   95:7B:38:21:54:59:84:5B:9B:D6:10:B3:7D:75:B1:0E:59:42:41:E0
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Certificate issuer:       /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial:       01975CB8251AA4B1372D77D6ACB56BF94B9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
Manifest number:          0843
Signing time:             Wed 11 Jun 2025 02:01:01 +0000
Manifest this update:     Wed 11 Jun 2025 02:01:01 +0000
Manifest next update:     Thu 12 Jun 2025 02:01:01 +0000
Files and hashes:         1: 8830yksUtOARQk3UFlh-4PNgBiA.roa (hash: EmMvReS/jq/SYrfMRIBrAHCck7YrsLYqaTcJWkpKgFg=)
                          2: EFk_WP_A_QvGCbPv627jqVmsHfg.roa (hash: k68DoPvpgB6wKb8qFWWLmBs9+urZUeVvssLhdMSBf6k=)
                          3: Qoyp_KSFKsVEEg02fUYTNo7SRXs.roa (hash: mLCh1eZnjR+MrenmFjvdAR50ujw/VIYVRd5MKC5x8OQ=)
                          4: ZE3Pd2Bv3QzdWxKRnPV6C_9jTsQ.roa (hash: ULlmWYQOwziva5U7xH3+US8Vy16wr3u3qWj4qpwczMo=)
                          5: c3zA2IV4VwS8jnesB0LpZBsDyEU.roa (hash: hofK+2Uxhr/bTuv6Zx9VkqisU5DNhllbJwm0jIPd9ao=)
                          6: gVeAUy7Smj-A57pBTvyzednsl8k.crl (hash: Te38rVscC2tsLdnPA7ph1Mdc4PfBkWV8lSxplFcStIQ=)
                          7: xufGdiw8vu26zsmML7UeTUou5hA.roa (hash: FPD/rr/c4+/3+ME4ysyP2eNMHG6cFBZQMwG4yZOWY+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:b8:25:1a:a4:b1:37:2d:77:d6:ac:b5:6b:f9:4b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
        Validity
            Not Before: Jun 11 02:01:01 2025 GMT
            Not After : Jun 12 02:01:01 2025 GMT
        Subject: CN=957b38215459845b9bd610b37d75b10e594241e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e0:69:91:44:6a:58:1e:79:22:0b:87:d2:8c:
                    b2:03:cc:a2:7a:d8:e6:49:28:32:1b:34:db:e9:6b:
                    bb:9d:d0:56:35:cd:25:02:ba:67:1e:98:8d:f5:48:
                    6b:70:ef:a1:b5:33:cb:64:ba:c2:db:08:b6:11:ce:
                    b1:12:ee:89:91:20:ec:7b:a7:2b:b3:d5:88:62:40:
                    a0:60:85:d9:5f:fb:51:00:51:bc:d7:bd:fa:25:c8:
                    e8:f3:54:e0:71:ce:f7:b7:f0:a9:94:6b:c0:fe:76:
                    73:48:8c:a8:ea:18:b3:4f:6b:97:de:55:f3:05:dc:
                    2c:de:c8:54:ad:a3:63:59:01:a4:d9:6b:6d:a1:fa:
                    ff:c9:56:55:33:3d:cd:0d:1e:8a:b9:fc:8d:19:40:
                    bd:75:f3:23:5c:d1:ac:a5:48:28:1d:5f:09:33:7a:
                    2b:94:b6:3d:db:ac:2e:42:f6:8c:e6:a5:f1:f6:f9:
                    af:87:c2:6b:ba:73:30:35:f1:76:81:fa:63:66:bf:
                    57:30:dd:72:a1:28:46:5c:be:51:e2:52:20:84:e2:
                    b7:8c:0d:fa:e3:f6:10:6d:6d:e2:65:c6:08:16:90:
                    d2:d6:3f:e6:77:f9:1f:66:b6:61:7e:71:ec:6d:5c:
                    ea:3c:a3:0d:b6:57:d4:49:1e:bc:9f:82:d1:12:35:
                    8b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7B:38:21:54:59:84:5B:9B:D6:10:B3:7D:75:B1:0E:59:42:41:E0
            X509v3 Authority Key Identifier:
                keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:2f:23:cf:7f:85:02:4a:75:ad:7e:7b:42:b7:3b:5f:89:4e:
         21:fb:48:0a:c9:c9:80:5c:3e:12:63:74:27:4e:d7:ab:5d:02:
         1b:52:4c:30:32:80:01:ff:ad:a4:3b:83:51:8f:66:90:90:af:
         1d:02:53:da:f9:44:59:1c:d4:de:29:c5:b1:93:74:63:e6:ab:
         11:46:d1:87:0c:d4:e9:e2:f6:97:40:56:5e:4e:ae:01:51:56:
         03:49:be:39:37:af:dc:f3:88:1b:a6:5b:b7:f9:63:2f:cc:68:
         24:c5:56:fc:da:4e:7d:1c:18:25:d5:9c:89:3d:00:9d:40:c9:
         33:37:db:4b:df:62:a5:e4:b2:97:17:c8:98:a5:9f:7a:df:53:
         76:f3:80:41:6b:30:9b:6c:be:b9:c2:bd:eb:a7:f0:76:c2:aa:
         cb:8f:c3:86:ee:bb:34:e1:2a:88:85:8b:1b:4d:ce:73:bc:32:
         1a:80:f1:a8:57:41:fc:41:e7:8d:0e:89:0b:59:53:17:83:35:
         be:7b:90:15:e0:59:d7:0d:00:97:74:81:96:94:b5:ab:a0:27:
         72:48:28:47:f2:3c:65:8d:14:9c:48:8c:46:64:00:ba:06:85:
         7e:dd:38:35:72:73:b0:3e:8f:7f:52:08:66:b5:ac:81:ef:9c:
         25:5c:24:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:41:26 2025 by rpki-client