Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft
File:                     gqo-xYuoRtJ6eXERxVhRUwANug4.mft (raw, json)
Hash identifier:          ap5p2vu97XREBcQifnFcHLJy0mNe9G/EoIwdYe41GWg=
Subject key identifier:   5D:4F:C3:05:AF:43:67:73:FF:13:9C:5D:8D:C9:91:01:AD:86:16:86
Authority key identifier: 82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E
Certificate issuer:       /CN=82aa3ec58ba846d27a797111c5585153000dba0e
Certificate serial:       01976C988F51F423609231D72D7257CEB686
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 04:00:26 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:26 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:26 +0000
Files and hashes:         1: gqo-xYuoRtJ6eXERxVhRUwANug4.crl (hash: 8/tSmG492Z9ulo16KPbgGK+7zSejdohMiG40wDVwDCA=)
                          2: lJago70cI_xvyZhFfsg3Aw9OGeM.roa (hash: fi1kzkQyoRujjlEGa/d9WEUMMxSjDAb7GkNQ5Rq5Cis=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:8f:51:f4:23:60:92:31:d7:2d:72:57:ce:b6:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82aa3ec58ba846d27a797111c5585153000dba0e
        Validity
            Not Before: Jun 14 04:00:26 2025 GMT
            Not After : Jun 15 04:00:26 2025 GMT
        Subject: CN=5d4fc305af436773ff139c5d8dc99101ad861686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:06:cc:fd:fa:49:65:85:12:f2:63:12:f2:
                    c2:e3:4c:ab:56:07:47:45:23:cd:6f:a1:69:ef:3a:
                    90:c0:8e:1a:aa:bd:d8:5c:fc:50:95:0a:c3:03:42:
                    ad:b9:72:0b:bd:c0:04:8b:68:c9:ba:c3:17:75:c5:
                    41:45:c5:87:c3:d6:4e:82:89:e0:9c:6d:f9:8b:00:
                    7f:b4:b8:7f:fc:cb:4b:e8:7e:71:f1:76:62:e4:1c:
                    f1:67:6b:43:9a:81:6a:fe:cf:eb:14:62:7e:b8:19:
                    36:c1:10:0a:be:b3:80:32:ad:bc:c7:af:d9:ee:3f:
                    c3:87:c8:f4:61:94:88:99:72:4c:a9:86:1f:d5:f1:
                    82:e3:c1:d2:07:ba:36:73:83:12:31:f8:31:d2:10:
                    ad:fb:6a:dd:dc:b6:94:49:ed:70:5c:1d:31:3f:4f:
                    48:4b:b9:72:0f:3b:ef:e8:e0:4f:0c:f4:48:ef:96:
                    73:5c:90:74:99:88:98:7f:1a:7d:79:36:f4:bc:4d:
                    37:b1:9c:d4:65:5d:3e:c5:e2:cf:bd:2f:a4:ae:3d:
                    0a:28:cd:71:3f:3c:44:91:70:6b:2d:0b:f0:32:32:
                    a8:8d:b8:10:ac:71:93:be:6d:e6:8c:81:3c:85:39:
                    50:0e:a7:12:d1:6a:14:ac:b7:b9:c6:3c:85:da:0d:
                    37:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4F:C3:05:AF:43:67:73:FF:13:9C:5D:8D:C9:91:01:AD:86:16:86
            X509v3 Authority Key Identifier:
                keyid:82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:79:25:05:d6:57:34:77:49:65:45:0e:2a:3d:0f:ee:ee:1c:
         ad:17:35:d6:16:30:22:74:d3:50:30:92:c6:ae:a0:58:22:64:
         29:66:0d:95:06:10:fc:59:a8:c8:ec:66:9d:c1:1a:b6:b0:d3:
         90:54:00:51:c8:ea:5c:aa:bf:08:33:04:0a:8d:5e:64:f7:f5:
         c8:e8:35:0d:2a:eb:92:07:65:bc:f5:f6:92:11:5a:0d:3d:64:
         76:ec:0e:35:b2:97:ad:b2:6b:8c:4d:b4:c1:54:3c:41:36:c9:
         56:06:03:8f:17:50:1f:78:29:fd:32:8e:23:a0:e4:17:c2:a4:
         19:8b:1a:63:29:9e:0a:ce:fc:63:0b:ca:13:92:a6:38:a9:64:
         a7:85:d5:7e:bf:13:08:3b:a3:28:67:a7:5e:9d:ef:ea:18:12:
         21:35:26:bb:c7:7f:1c:6a:8b:57:1f:1e:5e:71:fc:09:cc:ec:
         ef:22:f6:d4:b9:73:ec:b8:5a:94:19:ef:43:78:93:97:78:eb:
         31:7e:9f:9d:38:de:f0:03:ec:89:e2:d2:2e:6e:56:28:30:f3:
         65:73:3c:a6:65:5c:7f:25:eb:44:b7:48:4e:4b:e8:f4:24:67:
         8c:68:71:88:48:98:48:34:c8:d8:c3:6a:89:ec:27:ff:51:6c:
         7b:70:df:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:35:20 2025 by rpki-client