Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
File:                     gvGLgDOdiuY39KAvM1u-x8jCa94.mft (raw, json)
Hash identifier:          oN25shEqisqNUDwmM06TIjpIrbDZ6Tk4J9oh3NQ7NTE=
Subject key identifier:   BA:56:0A:F0:91:5F:0E:F4:59:96:20:FA:97:F8:69:93:6D:5D:3A:BC
Authority key identifier: 82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE
Certificate issuer:       /CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
Certificate serial:       01974B1F41692829983F03DE7E17805013AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 16:00:28 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:28 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:28 +0000
Files and hashes:         1: 1-q3Sc_aFuf3HEfZnJlmO5IobYdI.roa (hash: 1ZydJMw0C7UeG9c7OwbN/uc3B58dbwLgrfGBkI/dEhg=)
                          2: gvGLgDOdiuY39KAvM1u-x8jCa94.crl (hash: hjIAC2hJSAc102vIdcEz4IjM5hH3cIyOa0LuxC+k68c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:41:69:28:29:98:3f:03:de:7e:17:80:50:13:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
        Validity
            Not Before: Jun  7 16:00:28 2025 GMT
            Not After : Jun  8 16:00:28 2025 GMT
        Subject: CN=ba560af0915f0ef4599620fa97f869936d5d3abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:6d:ac:cc:03:2b:78:f5:c3:ae:e5:d0:85:
                    14:e9:d4:0f:61:57:89:e8:31:10:65:5a:84:78:6f:
                    32:a7:ca:4e:df:6e:a7:c4:12:98:f6:39:be:7f:05:
                    bb:3a:1d:5e:bc:bc:8e:eb:92:f7:18:58:cc:81:31:
                    0b:d0:91:f3:c0:6f:09:d0:e1:5f:fe:dc:6e:ac:70:
                    5a:0f:f9:49:57:58:4a:cc:f2:50:ee:60:f9:8d:17:
                    1d:48:61:0e:21:ab:3e:f3:55:97:10:ab:07:a7:77:
                    8f:38:cc:20:45:3c:10:05:87:e9:0d:ac:e4:f9:a9:
                    47:04:34:b8:eb:3d:44:5b:88:97:1d:f7:a4:12:d6:
                    a0:c9:4c:ab:70:c8:fe:f7:83:42:d1:fc:6b:42:bc:
                    4c:a6:49:80:28:63:5d:99:4c:f8:0e:d3:01:45:4c:
                    51:73:1d:38:d1:fd:37:01:27:01:a1:34:53:0c:17:
                    bd:56:f7:14:ba:10:d8:2a:0c:5c:e7:7d:2a:b9:e1:
                    b0:91:5d:2f:37:cc:53:5a:20:de:d3:0f:c2:87:1b:
                    66:c0:5d:ac:0d:e9:5e:3a:11:cb:87:aa:b0:c7:ba:
                    be:cc:85:16:80:00:1a:ca:48:97:49:94:5d:f5:7e:
                    b6:2d:12:1b:e5:78:1f:65:fd:8b:8b:2f:63:d0:3d:
                    12:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:56:0A:F0:91:5F:0E:F4:59:96:20:FA:97:F8:69:93:6D:5D:3A:BC
            X509v3 Authority Key Identifier:
                keyid:82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:a5:20:a4:66:b7:1e:98:da:33:08:7b:ee:19:fb:c9:67:b9:
         b2:c7:aa:7b:b6:70:70:90:7f:22:f5:c4:9f:66:c0:36:52:07:
         1d:02:f6:1b:63:69:1e:d2:d4:b7:ca:9b:97:0a:15:d3:42:af:
         c7:3b:3a:ed:3d:f3:8b:ee:bd:b3:46:50:b6:41:ab:2a:ba:03:
         f3:14:93:05:80:a2:5a:e3:98:95:6c:01:4b:3f:f4:90:4d:dd:
         3c:df:f4:e4:23:9a:08:29:4e:f0:4d:2d:66:74:70:98:c6:b6:
         af:9d:82:37:1a:96:4d:97:4a:cc:ee:4f:b3:ab:1d:9e:cb:fa:
         03:78:10:98:9c:6e:a0:86:f2:21:8f:54:df:ff:25:5e:29:06:
         5f:86:bc:89:7a:ea:a0:02:af:42:86:f1:fd:2a:28:ba:96:7c:
         97:5f:98:1d:f7:bb:13:2a:23:41:d7:89:f8:af:15:b4:18:8b:
         e8:f1:e7:bb:16:b8:27:58:28:e1:a7:a6:b2:e8:a0:e3:ae:c0:
         dc:8c:75:d5:df:7e:86:e7:87:3b:57:77:8b:e2:e5:cd:16:d1:
         ce:c5:e2:cf:b1:ed:26:be:ba:10:93:de:22:1f:6f:0c:03:c6:
         c7:49:e7:f0:5f:c9:29:0e:81:ff:d9:5e:d3:b1:d0:16:00:5e:
         ef:2e:ce:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:02:04 2025 by rpki-client