Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File:                     gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier:          qVMI8+tuUJK6lAvBInpb6UhwnsvhX7Ux2LAGiPcYess=
Subject key identifier:   5F:5A:71:7B:13:59:27:BE:6C:76:AB:85:33:2C:E8:2A:A1:38:38:36
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer:       /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial:       01974C69171C7F50998FDF9C0B22D675327E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number:          1610
Signing time:             Sat 07 Jun 2025 22:00:44 +0000
Manifest this update:     Sat 07 Jun 2025 22:00:44 +0000
Manifest next update:     Sun 08 Jun 2025 22:00:44 +0000
Files and hashes:         1: TVTY8940R-JLK3g0bC-55INlCR4.roa (hash: G8fybb1dVxSY3d5NiOJGlSrI9zs27WohVNGxcPiP+KM=)
                          2: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: Hu1xdHLibpDQ1gDGhy0c4T0NgLjz+lJJakKShqyl7/o=)
                          3: znbCSfa62MjugadmDs4WgFylkOE.roa (hash: BgJAdJjqsI+/hgUR8pI1g1wNl4LGRoW3tmialyMKGr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:17:1c:7f:50:99:8f:df:9c:0b:22:d6:75:32:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
        Validity
            Not Before: Jun  7 22:00:44 2025 GMT
            Not After : Jun  8 22:00:44 2025 GMT
        Subject: CN=5f5a717b135927be6c76ab85332ce82aa1383836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:27:df:ca:17:25:c0:1c:80:ad:8e:8c:6a:2a:
                    96:9c:c8:4d:37:0d:b2:b2:6c:ef:a6:fe:da:27:39:
                    f3:0c:6c:d6:d6:ff:2b:17:0a:a7:ce:c4:1c:c5:19:
                    0a:c4:5f:b8:6e:69:a3:d9:4e:75:36:d0:cf:2c:ac:
                    7b:44:c4:41:c1:35:d5:86:0f:14:24:23:41:79:f0:
                    f3:83:56:bf:e9:16:98:b0:e8:f7:5e:a2:1c:e9:d1:
                    5e:09:00:85:99:e8:bd:3e:c6:04:c0:27:96:ce:1d:
                    3f:19:c1:32:95:6e:f5:14:3c:34:94:28:f6:20:87:
                    62:f3:57:f5:9c:78:75:c1:e8:3e:d1:2f:f3:b9:f6:
                    0e:68:9f:c9:05:de:bc:30:d3:d8:ba:b3:38:30:5d:
                    74:91:43:c6:33:38:6d:16:a3:a3:06:e0:92:cf:17:
                    f1:2d:5f:fd:2a:31:76:ce:da:7e:39:37:80:79:09:
                    d8:e0:e8:70:82:c8:b0:14:a2:31:a2:80:79:99:58:
                    f4:d4:21:fc:08:e9:b9:c0:8a:04:40:59:3d:0e:3f:
                    9b:da:46:68:8d:e7:e6:f2:69:08:d4:b6:d4:51:bf:
                    74:85:b1:67:29:a0:e4:c3:39:02:86:bc:3c:26:f8:
                    95:35:37:e0:82:53:09:c5:c0:11:16:8e:94:b4:8d:
                    41:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5A:71:7B:13:59:27:BE:6C:76:AB:85:33:2C:E8:2A:A1:38:38:36
            X509v3 Authority Key Identifier:
                keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:3f:e2:21:21:e4:b9:05:78:ac:03:28:7a:5f:f0:9b:55:39:
         69:36:2b:f0:78:be:ae:06:52:f8:0c:b8:00:2b:1b:e5:52:a3:
         59:41:53:1c:39:fd:93:b0:d2:6c:68:ac:ef:27:a6:9d:65:6f:
         02:4b:11:79:29:a5:1c:19:05:52:97:9f:ea:18:95:54:36:36:
         18:09:67:f3:2c:af:e5:86:22:d0:da:e1:92:99:f1:2c:ba:a2:
         ef:d9:99:bd:c9:dc:6b:62:5c:f4:53:66:1d:66:28:ad:6c:1b:
         81:81:01:fa:6c:db:eb:92:51:dd:d3:a1:79:0d:41:74:5e:70:
         e5:64:33:0a:3b:c3:91:24:a2:5c:45:e1:de:08:10:38:a9:9b:
         d3:99:83:9b:1b:9b:8a:46:7e:5b:45:1d:1c:c8:84:26:d0:9d:
         d1:ce:5f:27:c0:b5:ba:8d:74:ce:b4:45:ab:72:b3:f0:d3:8f:
         4c:4a:2a:3d:31:94:1f:42:fa:08:a5:73:c2:81:5b:55:b8:2e:
         24:90:21:5f:f5:61:01:cf:18:70:f9:fc:68:a8:af:c5:06:19:
         21:50:1b:a9:9c:38:1b:5c:bc:b7:5a:c3:ae:26:63:bb:36:87:
         e2:df:62:7f:83:05:27:84:50:78:b5:73:93:a7:1e:6a:c0:8b:
         fb:40:27:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:31:17 2025 by rpki-client