Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
File:                     GJPt3vXPw41hPqqBd03jADSxnSI.mft (raw, json)
Hash identifier:          YjRhxC7yTCGd6Wt34194AgH4iE2ezGcydjiD4IT7qxc=
Subject key identifier:   76:A5:4E:C4:B2:D9:CA:2F:04:C0:77:96:78:AF:4D:18:7C:D3:27:1B
Authority key identifier: 18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22
Certificate issuer:       /CN=1893eddef5cfc38d613eaa81774de30034b19d22
Certificate serial:       019747B09941F0673B4976D1E096800E0D9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
Manifest number:          0C3F
Signing time:             Sat 07 Jun 2025 00:00:45 +0000
Manifest this update:     Sat 07 Jun 2025 00:00:45 +0000
Manifest next update:     Sun 08 Jun 2025 00:00:45 +0000
Files and hashes:         1: 7fCLxFxs3uirSoBmBAB2IiaPCDE.roa (hash: coxqqIVz+Sd0ZSUD8QWyHK8rOUGIW44eWb9ORBY27qw=)
                          2: GJPt3vXPw41hPqqBd03jADSxnSI.crl (hash: Lcfgz2Oy+wjRCdp6EnBhhSCTHGC25GkyTLxzhZmo9K4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:b0:99:41:f0:67:3b:49:76:d1:e0:96:80:0e:0d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1893eddef5cfc38d613eaa81774de30034b19d22
        Validity
            Not Before: Jun  7 00:00:45 2025 GMT
            Not After : Jun  8 00:00:45 2025 GMT
        Subject: CN=76a54ec4b2d9ca2f04c0779678af4d187cd3271b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1f:af:94:09:4d:f9:33:c4:54:bb:46:88:e6:
                    0d:71:2b:c0:04:71:4b:25:a1:d7:9f:34:fd:c5:d0:
                    99:aa:cd:aa:9a:7c:9a:c2:61:d7:29:40:f6:3f:5f:
                    3a:10:c5:f6:02:84:1a:7f:bc:ba:d6:fe:9b:09:68:
                    59:d9:22:77:19:64:51:7d:63:20:a0:6a:1b:f6:a1:
                    63:a5:04:41:7a:a9:98:9a:d7:21:42:65:03:f1:36:
                    b8:51:88:a3:7f:12:7c:a6:8a:30:0b:fd:42:bf:ba:
                    2c:af:68:c2:cd:13:e1:88:0f:f5:de:56:f1:cc:87:
                    f3:b3:e4:ac:a1:f8:73:26:b0:ca:40:c2:57:ef:3e:
                    1d:79:4e:0a:8a:cf:d4:e8:64:98:02:ae:e5:13:4e:
                    b7:23:37:3b:73:f6:ee:33:25:4d:d6:ae:93:69:7a:
                    69:4a:89:8a:30:7a:a3:59:86:ea:ca:9d:59:db:a2:
                    4b:a5:08:e3:b4:ce:bf:f2:0f:f6:f2:49:20:2a:09:
                    62:92:6e:11:90:22:2b:e9:e9:3b:fd:2f:04:9a:83:
                    65:87:59:ca:c5:a0:95:cb:98:3d:aa:c0:63:15:73:
                    0e:e7:03:22:11:b8:5e:9b:cf:c6:8a:02:55:7e:04:
                    f6:15:3a:a3:59:20:27:cb:a7:7e:8b:bf:59:44:c8:
                    c9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A5:4E:C4:B2:D9:CA:2F:04:C0:77:96:78:AF:4D:18:7C:D3:27:1B
            X509v3 Authority Key Identifier:
                keyid:18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:0c:ec:50:73:25:60:34:c9:e4:cd:24:01:4b:c3:d8:47:3e:
         a6:ba:62:f5:cc:92:e9:10:02:e3:8f:8b:b7:7f:bc:d4:a0:fc:
         3f:bb:b6:df:93:09:0c:7c:ce:e9:ab:0f:94:1e:97:1e:22:4a:
         fd:41:25:1a:f1:ce:29:f1:65:68:f7:e4:0e:c1:c0:fe:ed:66:
         c9:fb:02:60:cc:07:cf:8f:3d:c0:e6:c5:44:de:19:eb:34:92:
         84:97:1c:8f:0a:e7:86:95:7b:f9:be:c1:10:48:f2:78:03:ff:
         83:5a:1b:e4:06:c3:52:1e:1e:df:7c:b2:13:a4:f9:3a:6d:c4:
         71:d5:b2:1b:a2:9a:44:bd:1a:59:ae:45:08:ed:8e:01:2f:59:
         de:1d:4e:17:c4:bf:8d:ea:09:ce:cc:9f:49:2e:5b:47:91:76:
         84:a2:12:57:91:01:b1:a7:f3:13:bf:16:4e:76:3f:83:88:c1:
         e8:cb:56:45:09:c0:c9:72:bc:a1:36:06:7f:89:34:6d:ac:72:
         90:bb:ac:8b:88:fe:f2:a3:d2:36:a1:a8:36:0c:c1:47:9d:b2:
         68:fb:4e:7a:ea:30:12:34:23:5c:d4:d9:d1:1e:55:d9:a6:11:
         3f:bc:d8:d0:b7:c2:e8:2e:94:6d:91:0d:7f:1f:d3:56:1b:9a:
         f5:04:65:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHsJlB8Gc7SXbR4JaADg2fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OTNlZGRlZjVjZmMzOGQ2MTNlYWE4MTc3NGRlMzAwMzRi
MTlkMjIwHhcNMjUwNjA3MDAwMDQ1WhcNMjUwNjA4MDAwMDQ1WjAzMTEwLwYDVQQD
Eyg3NmE1NGVjNGIyZDljYTJmMDRjMDc3OTY3OGFmNGQxODdjZDMyNzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth+vlAlN+TPEVLtGiOYNcSvABHFL
JaHXnzT9xdCZqs2qmnyawmHXKUD2P186EMX2AoQaf7y61v6bCWhZ2SJ3GWRRfWMg
oGob9qFjpQRBeqmYmtchQmUD8Ta4UYijfxJ8poowC/1Cv7osr2jCzRPhiA/13lbx
zIfzs+SsofhzJrDKQMJX7z4deU4Kis/U6GSYAq7lE063Izc7c/buMyVN1q6TaXpp
SomKMHqjWYbqyp1Z26JLpQjjtM6/8g/28kkgKglikm4RkCIr6ek7/S8EmoNlh1nK
xaCVy5g9qsBjFXMO5wMiEbhem8/GigJVfgT2FTqjWSAny6d+i79ZRMjJLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHalTsSy2covBMB3lnivTRh80ycbMB8GA1UdIwQY
MBaAFBiT7d71z8ONYT6qgXdN4wA0sZ0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0pQdDN2WFB3NDFoUHFxQmQwM2pBRFN4blNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xM2Y4YzUtYWI3YS00ZjM3LWIyZDct
OGI1MTc5MmM2NjYwLzEvR0pQdDN2WFB3NDFoUHFxQmQwM2pBRFN4blNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8xM2Y4YzUtYWI3YS00ZjM3LWIyZDctOGI1MTc5MmM2NjYw
LzEvR0pQdDN2WFB3NDFoUHFxQmQwM2pBRFN4blNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwzsUHMl
YDTJ5M0kAUvD2Ec+prpi9cyS6RAC44+Lt3+81KD8P7u235MJDHzO6asPlB6XHiJK
/UElGvHOKfFlaPfkDsHA/u1myfsCYMwHz489wObFRN4Z6zSShJccjwrnhpV7+b7B
EEjyeAP/g1ob5AbDUh4e33yyE6T5Om3EcdWyG6KaRL0aWa5FCO2OAS9Z3h1OF8S/
jeoJzsyfSS5bR5F2hKISV5EBsafzE78WTnY/g4jB6MtWRQnAyXK8oTYGf4k0baxy
kLusi4j+8qPSNqGoNgzBR52yaPtOeuowEjQjXNTZ0R5V2aYRP7zY0LfC6C6UbZEN
fx/TVhua9QRlfA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:13:40 2025 by rpki-client