Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
File:                     Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft (raw, json)
Hash identifier:          vxNl0VchUASAkPxWaU+egIPS9IYkcnB9gRhae6Z5vUQ=
Subject key identifier:   06:65:96:38:20:F2:C7:2E:EE:44:87:DC:7C:D2:9C:CF:D2:CA:B8:58
Authority key identifier: 1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF
Certificate issuer:       /CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
Certificate serial:       01974EFBF55A5B3DC33496344A559B5AFEB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
Manifest number:          1581
Signing time:             Sun 08 Jun 2025 10:00:24 +0000
Manifest this update:     Sun 08 Jun 2025 10:00:24 +0000
Manifest next update:     Mon 09 Jun 2025 10:00:24 +0000
Files and hashes:         1: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl (hash: WUFwYeFfe6faQebRimBNLXQ/03x4sKLME3OzRlP0leY=)
                          2: S_yQLv48huAuIFJl3M3q9MKN7ww.roa (hash: BfPTYmIN4iY+2dpqgW32GYnFtvPimuKxK2FzlajUXYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 10:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:fb:f5:5a:5b:3d:c3:34:96:34:4a:55:9b:5a:fe:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
        Validity
            Not Before: Jun  8 10:00:24 2025 GMT
            Not After : Jun  9 10:00:24 2025 GMT
        Subject: CN=0665963820f2c72eee4487dc7cd29ccfd2cab858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:82:27:6b:b4:54:04:c0:7d:ee:d7:80:e7:50:
                    cf:80:fc:0d:5c:47:e9:06:03:31:56:ce:4d:61:d1:
                    25:08:d9:00:7c:0c:49:2a:8e:8b:de:05:8e:f3:7a:
                    30:80:39:01:18:4b:71:27:16:1c:c3:d6:29:bf:d3:
                    17:4e:54:56:56:29:32:9f:5d:db:d6:ba:85:33:23:
                    5f:dc:82:93:f3:10:13:f0:fc:47:df:ed:20:2c:c5:
                    5e:f1:e7:ff:9f:af:16:dd:e3:7e:5a:7a:12:09:47:
                    36:25:01:47:c2:02:1d:b0:a1:ea:75:b3:41:2b:74:
                    a7:f4:8e:e2:36:08:88:82:1a:25:99:8c:23:03:7b:
                    ef:ac:f7:9f:5d:ce:8e:13:cf:d2:45:58:d8:02:c8:
                    85:8e:22:a7:90:a3:6c:d5:91:ac:42:2f:29:96:30:
                    2e:ae:d3:ad:bb:82:86:79:58:f1:c2:56:a7:12:1e:
                    79:14:9c:47:ea:27:88:24:1d:38:cf:0a:d8:56:cd:
                    99:a9:8e:72:69:c5:8d:7d:a0:0d:50:f3:af:57:d8:
                    7a:a0:6a:09:be:f7:e5:52:49:41:5e:51:88:8d:91:
                    e9:f1:8a:31:8f:7e:49:88:d4:41:48:56:c7:ac:49:
                    58:ec:2a:9f:3a:5b:c7:48:a0:59:92:80:af:70:79:
                    f3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:65:96:38:20:F2:C7:2E:EE:44:87:DC:7C:D2:9C:CF:D2:CA:B8:58
            X509v3 Authority Key Identifier:
                keyid:1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:01:c2:98:51:45:e6:ce:e2:6d:9d:6e:df:c0:ef:72:11:a9:
         20:81:0e:11:67:b7:51:b3:f9:5d:37:f6:58:9e:fe:4c:05:a0:
         50:7e:dc:fd:c2:d2:12:80:46:b8:1d:92:3c:57:f2:7a:5b:c0:
         96:ad:e0:ee:af:05:dd:dc:1f:61:c0:68:50:aa:a5:f6:72:27:
         5b:99:5d:13:67:3c:31:e8:4a:9f:f8:09:9d:a2:fc:da:a8:37:
         89:e2:aa:8a:51:6e:e6:f5:bd:ce:a6:bb:a4:b9:6b:2b:80:b0:
         fe:b6:6a:d1:49:bc:f7:7c:b1:93:19:c7:de:81:b9:5f:81:53:
         67:a4:18:83:8b:15:1c:8c:40:87:cc:bf:f7:a4:2e:57:0d:df:
         50:4d:6b:b0:eb:76:ea:6e:1c:f7:e7:bb:2b:8a:96:65:7b:3e:
         f0:52:62:ea:51:be:ed:04:dd:f6:60:18:e2:56:4d:08:cc:b2:
         f1:d2:96:50:1c:30:91:9d:ec:e3:89:c9:db:e4:5e:64:34:c3:
         52:03:18:40:54:06:5c:b4:69:7a:50:e8:ad:9a:ba:b8:fa:ff:
         61:49:0b:6e:8c:43:59:5e:61:e1:31:1a:d9:ba:48:56:42:a4:
         7e:b2:c4:dd:69:61:1b:5c:3b:09:d9:44:3a:69:14:fb:cc:59:
         f7:a9:5b:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdO+/VaWz3DNJY0SlWbWv62MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhM2U5NzBlZDYyNzcxMzQzYTA5NmZmYjJlZmMyNmFiYjdl
ZDY4YWYwHhcNMjUwNjA4MTAwMDI0WhcNMjUwNjA5MTAwMDI0WjAzMTEwLwYDVQQD
EygwNjY1OTYzODIwZjJjNzJlZWU0NDg3ZGM3Y2QyOWNjZmQyY2FiODU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIIna7RUBMB97teA51DPgPwNXEfp
BgMxVs5NYdElCNkAfAxJKo6L3gWO83owgDkBGEtxJxYcw9Ypv9MXTlRWVikyn13b
1rqFMyNf3IKT8xAT8PxH3+0gLMVe8ef/n68W3eN+WnoSCUc2JQFHwgIdsKHqdbNB
K3Sn9I7iNgiIgholmYwjA3vvrPefXc6OE8/SRVjYAsiFjiKnkKNs1ZGsQi8pljAu
rtOtu4KGeVjxwlanEh55FJxH6ieIJB04zwrYVs2ZqY5yacWNfaANUPOvV9h6oGoJ
vvflUklBXlGIjZHp8Yoxj35JiNRBSFbHrElY7CqfOlvHSKBZkoCvcHnz9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZlljgg8scu7kSH3HzSnM/SyrhYMB8GA1UdIwQY
MBaAFBo+lw7WJ3E0Oglv+y78Jqu37WivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZjcwOTItZTNhNC00NzBiLTg1YTUt
ZDQ4OTA5NGM2NjA0LzEvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8wZjcwOTItZTNhNC00NzBiLTg1YTUtZDQ4OTA5NGM2NjA0
LzEvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArQHCmFFF
5s7ibZ1u38DvchGpIIEOEWe3UbP5XTf2WJ7+TAWgUH7c/cLSEoBGuB2SPFfyelvA
lq3g7q8F3dwfYcBoUKql9nInW5ldE2c8MehKn/gJnaL82qg3ieKqilFu5vW9zqa7
pLlrK4Cw/rZq0Um893yxkxnH3oG5X4FTZ6QYg4sVHIxAh8y/96QuVw3fUE1rsOt2
6m4c9+e7K4qWZXs+8FJi6lG+7QTd9mAY4lZNCMyy8dKWUBwwkZ3s44nJ2+ReZDTD
UgMYQFQGXLRpelDorZq6uPr/YUkLboxDWV5h4TEa2bpIVkKkfrLE3WlhG1w7CdlE
OmkU+8xZ96lbDw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:11:09 2025 by rpki-client