Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
File:                     G2pafunSGn3UW7v_9DGzZN6gta4.mft (raw, json)
Hash identifier:          MF74JFy5SGTejQtfeoH2meitfQRR8Khb6WEFIc3xR1w=
Subject key identifier:   AB:33:A9:2D:74:C8:2B:EF:73:46:23:77:7D:33:B0:41:AC:4A:7B:2B
Authority key identifier: 1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE
Certificate issuer:       /CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
Certificate serial:       01974AB1D3D52523C783F7119B96D0B16EAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
Manifest number:          07A9
Signing time:             Sat 07 Jun 2025 14:00:57 +0000
Manifest this update:     Sat 07 Jun 2025 14:00:57 +0000
Manifest next update:     Sun 08 Jun 2025 14:00:57 +0000
Files and hashes:         1: G2pafunSGn3UW7v_9DGzZN6gta4.crl (hash: JiRrCwWrjFHT36X/f2JuqvAcN5y9onXecZU1UIsj8tM=)
                          2: sEHEZJdyZNM4H5KyWrunH6ae2rs.roa (hash: 2fdDOMvINX/MZk3ZnK4mtn0JneFrVoF0x/0pmTQHlWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:b1:d3:d5:25:23:c7:83:f7:11:9b:96:d0:b1:6e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
        Validity
            Not Before: Jun  7 14:00:57 2025 GMT
            Not After : Jun  8 14:00:57 2025 GMT
        Subject: CN=ab33a92d74c82bef734623777d33b041ac4a7b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4c:5d:4f:6c:10:16:d6:e0:41:d8:c3:b6:7a:
                    63:c5:5a:f3:8b:27:97:86:9c:b1:4e:65:67:2a:af:
                    ba:0e:32:b8:69:a9:38:6a:52:76:b2:b4:a7:b1:c3:
                    85:a3:24:bb:e2:40:04:c2:c0:60:3a:1a:b5:ba:ad:
                    dd:1e:7a:30:70:88:4c:b7:11:a3:64:d9:35:de:82:
                    bf:2a:e2:83:85:7f:19:e6:5e:8f:e8:3e:22:40:e4:
                    48:99:63:30:a9:f8:81:05:93:26:54:0a:df:b3:ba:
                    5f:c7:f8:9f:da:a7:dd:22:4d:ea:3d:32:c6:0e:a7:
                    3c:44:f3:47:1d:2b:ef:a6:1b:f5:2a:07:66:16:f7:
                    43:a0:8b:d1:7d:4e:28:17:66:c3:44:ae:2d:fb:5a:
                    3f:e9:87:11:61:29:82:44:c8:53:51:df:7d:84:62:
                    77:55:e7:d1:75:1b:de:ee:98:9e:e2:ed:24:ca:31:
                    d1:bd:9a:7b:e0:da:63:7d:68:ca:63:f4:1e:b7:69:
                    f3:b7:2f:4a:35:fc:81:d7:95:b7:15:4e:b7:7d:5c:
                    db:b4:82:dd:20:ae:d5:6c:3f:3d:fd:d8:53:ff:de:
                    97:b4:c7:22:8f:a6:88:f6:52:45:7a:a0:ba:e5:1f:
                    f3:7c:99:18:e7:19:6f:ac:9c:d8:12:d4:bd:8b:ac:
                    19:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:33:A9:2D:74:C8:2B:EF:73:46:23:77:7D:33:B0:41:AC:4A:7B:2B
            X509v3 Authority Key Identifier:
                keyid:1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:36:c9:1c:fa:79:ee:df:2c:68:9e:4b:80:86:e9:e3:d3:83:
         43:71:ba:32:11:4e:ca:72:10:53:88:75:57:65:08:21:30:44:
         1a:df:93:99:76:21:7c:7b:30:d6:cf:1b:5d:37:95:d9:a2:95:
         e9:3b:b5:61:39:d7:fa:c2:91:f2:33:9e:0d:83:87:5e:d3:24:
         3e:77:92:0f:6b:98:40:70:a5:be:8f:ae:8c:c1:a9:a7:05:ab:
         bd:21:2e:1a:6c:72:a1:18:9c:a7:c4:77:a6:ec:e2:1f:f5:b6:
         32:bb:1a:a7:0c:76:e8:2a:e4:17:3a:48:5c:63:96:f2:1f:b8:
         5f:9e:57:78:d0:21:2b:5d:74:d8:13:9f:94:bc:e8:33:4a:f3:
         52:94:02:e3:53:fd:e3:82:5f:1d:c5:c3:0f:b6:4b:b0:30:30:
         ab:44:30:44:ac:6e:f0:54:ad:0f:8f:59:d3:c3:1a:70:1b:7e:
         8b:84:80:a1:8b:99:64:38:79:4a:80:aa:39:05:b8:35:50:e3:
         60:cf:8f:2d:1c:05:a2:11:95:9f:cc:4f:48:da:6f:ba:1a:34:
         1e:a6:f2:97:f6:e6:18:5a:43:9e:08:a0:f1:6d:9d:66:24:a5:
         3a:a6:1c:66:3b:0b:89:2e:80:b3:2c:ed:cf:12:9f:69:10:9f:
         2e:59:74:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKsdPVJSPHg/cRm5bQsW6tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNmE1YTdlZTlkMjFhN2RkNDViYmJmZmY0MzFiMzY0ZGVh
MGI1YWUwHhcNMjUwNjA3MTQwMDU3WhcNMjUwNjA4MTQwMDU3WjAzMTEwLwYDVQQD
EyhhYjMzYTkyZDc0YzgyYmVmNzM0NjIzNzc3ZDMzYjA0MWFjNGE3YjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UxdT2wQFtbgQdjDtnpjxVrziyeX
hpyxTmVnKq+6DjK4aak4alJ2srSnscOFoyS74kAEwsBgOhq1uq3dHnowcIhMtxGj
ZNk13oK/KuKDhX8Z5l6P6D4iQORImWMwqfiBBZMmVArfs7pfx/if2qfdIk3qPTLG
Dqc8RPNHHSvvphv1KgdmFvdDoIvRfU4oF2bDRK4t+1o/6YcRYSmCRMhTUd99hGJ3
VefRdRve7pie4u0kyjHRvZp74NpjfWjKY/Qet2nzty9KNfyB15W3FU63fVzbtILd
IK7VbD89/dhT/96XtMcij6aI9lJFeqC65R/zfJkY5xlvrJzYEtS9i6wZ5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKszqS10yCvvc0Yjd30zsEGsSnsrMB8GA1UdIwQY
MBaAFBtqWn7p0hp91Fu7//Qxs2TeoLWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJwYWZ1blNHbjNVVzd2XzlER3paTjZndGE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kOGIwYzMtM2Y3MC00M2RiLTg1YTQt
NWJlMTIwMjM2N2U5LzEvRzJwYWZ1blNHbjNVVzd2XzlER3paTjZndGE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kOGIwYzMtM2Y3MC00M2RiLTg1YTQtNWJlMTIwMjM2N2U5
LzEvRzJwYWZ1blNHbjNVVzd2XzlER3paTjZndGE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDbJHPp5
7t8saJ5LgIbp49ODQ3G6MhFOynIQU4h1V2UIITBEGt+TmXYhfHsw1s8bXTeV2aKV
6Tu1YTnX+sKR8jOeDYOHXtMkPneSD2uYQHClvo+ujMGppwWrvSEuGmxyoRicp8R3
puziH/W2Mrsapwx26CrkFzpIXGOW8h+4X55XeNAhK1102BOflLzoM0rzUpQC41P9
44JfHcXDD7ZLsDAwq0QwRKxu8FStD49Z08MacBt+i4SAoYuZZDh5SoCqOQW4NVDj
YM+PLRwFohGVn8xPSNpvuho0Hqbyl/bmGFpDngig8W2dZiSlOqYcZjsLiS6Asyzt
zxKfaRCfLll0Ug==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:33:40 2025 by rpki-client