Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
File:                     G02ANz4-NNAKhbhBKNQFOZvPikU.mft (raw, json)
Hash identifier:          QwoZkSEOXkseXIC5P9UxvV2UdcPUCHyEsWPx2hVVV14=
Subject key identifier:   E5:8A:89:2C:09:DC:4F:F1:B6:E1:CF:27:D3:3E:0C:D6:8B:BB:BA:A6
Authority key identifier: 1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
Certificate issuer:       /CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Certificate serial:       01974DB2C044AA76CE8E8A8962EFB3D16BB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
Manifest number:          0553
Signing time:             Sun 08 Jun 2025 04:00:49 +0000
Manifest this update:     Sun 08 Jun 2025 04:00:49 +0000
Manifest next update:     Mon 09 Jun 2025 04:00:49 +0000
Files and hashes:         1: 66D5GH85kpdoRl5xE-EYGnJIu7s.roa (hash: FRI0FnMjIpTP/o+NpM2rBO+2noxEcPY4kmpjzIRRmcw=)
                          2: G02ANz4-NNAKhbhBKNQFOZvPikU.crl (hash: njHrDBqbhv1dxIRMsCpYcZzWDwzgC+TrpBvwKCyYWF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:b2:c0:44:aa:76:ce:8e:8a:89:62:ef:b3:d1:6b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
        Validity
            Not Before: Jun  8 04:00:49 2025 GMT
            Not After : Jun  9 04:00:49 2025 GMT
        Subject: CN=e58a892c09dc4ff1b6e1cf27d33e0cd68bbbbaa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:50:c6:22:ae:2c:0f:49:7b:ff:4b:6c:69:30:
                    ad:d3:ff:d2:99:4e:b9:69:8f:2f:64:3e:a6:30:47:
                    83:8d:e8:fe:00:10:fc:ee:8d:9c:4e:f8:7f:f3:57:
                    e5:51:f5:ce:35:26:f6:aa:53:f6:00:c9:5c:2a:4e:
                    be:76:21:72:bc:08:bb:e3:60:66:9b:d7:69:07:b7:
                    91:83:eb:f9:e4:65:5b:ff:ae:53:cb:48:4a:1b:f6:
                    5e:07:dd:8b:40:ac:04:10:a3:3e:d9:7b:3c:91:3f:
                    d7:58:f0:15:16:0d:13:3e:0e:3f:b3:56:b8:12:fc:
                    28:7b:85:15:0e:b4:92:55:b8:b9:01:a1:c4:1e:a2:
                    83:b3:4a:d9:ab:4a:26:74:d3:11:07:73:e3:b7:f3:
                    7b:54:90:39:b8:0b:6d:56:06:a5:ea:e2:50:32:b9:
                    c8:95:29:bd:f2:a6:f9:69:0b:97:43:a1:57:41:57:
                    8a:22:5c:cd:f6:c7:af:52:45:a1:da:35:a7:60:49:
                    1e:85:42:0c:6e:9e:bb:f3:1e:ef:dc:b8:fc:d0:1a:
                    38:ac:e1:a1:5e:de:48:f8:ee:01:8c:04:72:99:61:
                    8f:b5:39:2a:7d:59:6a:53:90:46:89:85:c0:a7:aa:
                    81:c9:95:ff:a6:03:d0:38:6f:d5:6a:09:b3:be:a1:
                    4f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8A:89:2C:09:DC:4F:F1:B6:E1:CF:27:D3:3E:0C:D6:8B:BB:BA:A6
            X509v3 Authority Key Identifier:
                keyid:1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:20:45:e4:41:d2:c1:61:0f:74:ea:1d:45:4d:e2:55:63:c7:
         9e:4a:ce:25:cb:3e:2e:48:2e:5f:5b:46:fa:ba:d3:8e:53:74:
         e2:c4:d6:6f:fb:7a:3a:64:89:4b:8e:3b:a6:a9:2d:dc:84:cb:
         1a:15:87:40:8c:fa:de:25:5b:32:a3:c6:34:4f:36:91:0c:0a:
         dc:e6:3c:ad:69:7f:c1:f4:f7:9a:10:4f:66:fd:61:7d:04:42:
         32:a5:29:15:0d:94:a0:5c:9f:c8:16:d7:13:7f:15:55:00:cb:
         3d:55:75:45:04:ee:e2:45:9d:21:15:88:74:ba:b1:74:90:7f:
         53:fe:7b:22:fe:95:dd:c1:e1:3a:eb:2a:83:6d:19:c8:d3:0a:
         da:ab:13:84:70:88:53:eb:67:32:6d:02:47:e5:89:b5:54:e7:
         7f:4b:7d:95:4d:5e:4e:6f:16:13:4c:29:de:0c:d7:16:79:d3:
         9a:25:c7:21:a4:93:80:59:93:17:d7:3f:20:1b:52:e7:6e:76:
         a5:e7:91:b2:9e:3d:97:ae:77:f6:8e:3e:52:db:1a:91:11:c9:
         73:ee:63:4d:be:94:1a:39:7d:69:24:5c:c8:69:68:21:a8:97:
         ee:d7:60:51:46:ea:bd:47:d1:81:c4:e4:bb:3d:f3:e5:3b:44:
         3a:2a:aa:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNssBEqnbOjoqJYu+z0Wu5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNGQ4MDM3M2UzZTM0ZDAwYTg1Yjg0MTI4ZDQwNTM5OWJj
ZjhhNDUwHhcNMjUwNjA4MDQwMDQ5WhcNMjUwNjA5MDQwMDQ5WjAzMTEwLwYDVQQD
EyhlNThhODkyYzA5ZGM0ZmYxYjZlMWNmMjdkMzNlMGNkNjhiYmJiYWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVDGIq4sD0l7/0tsaTCt0//SmU65
aY8vZD6mMEeDjej+ABD87o2cTvh/81flUfXONSb2qlP2AMlcKk6+diFyvAi742Bm
m9dpB7eRg+v55GVb/65Ty0hKG/ZeB92LQKwEEKM+2Xs8kT/XWPAVFg0TPg4/s1a4
Evwoe4UVDrSSVbi5AaHEHqKDs0rZq0omdNMRB3Pjt/N7VJA5uAttVgal6uJQMrnI
lSm98qb5aQuXQ6FXQVeKIlzN9sevUkWh2jWnYEkehUIMbp678x7v3Lj80Bo4rOGh
Xt5I+O4BjARymWGPtTkqfVlqU5BGiYXAp6qByZX/pgPQOG/VagmzvqFPqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWKiSwJ3E/xtuHPJ9M+DNaLu7qmMB8GA1UdIwQY
MBaAFBtNgDc+PjTQCoW4QSjUBTmbz4pFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzAyQU56NC1OTkFLaGJoQktOUUZPWnZQaWtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yNTc0ZDItY2IwYy00YjJhLWJlODMt
OGUwMGJkYTNiMjQ1LzEvRzAyQU56NC1OTkFLaGJoQktOUUZPWnZQaWtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yNTc0ZDItY2IwYy00YjJhLWJlODMtOGUwMGJkYTNiMjQ1
LzEvRzAyQU56NC1OTkFLaGJoQktOUUZPWnZQaWtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACiBF5EHS
wWEPdOodRU3iVWPHnkrOJcs+LkguX1tG+rrTjlN04sTWb/t6OmSJS447pqkt3ITL
GhWHQIz63iVbMqPGNE82kQwK3OY8rWl/wfT3mhBPZv1hfQRCMqUpFQ2UoFyfyBbX
E38VVQDLPVV1RQTu4kWdIRWIdLqxdJB/U/57Iv6V3cHhOusqg20ZyNMK2qsThHCI
U+tnMm0CR+WJtVTnf0t9lU1eTm8WE0wp3gzXFnnTmiXHIaSTgFmTF9c/IBtS5252
peeRsp49l6539o4+UtsakRHJc+5jTb6UGjl9aSRcyGloIaiX7tdgUUbqvUfRgcTk
uz3z5TtEOiqqHg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 10:08:49 2025 by rpki-client