Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
File:                     G6QV0W5y4zPyk2wcXhffJDeBCMI.mft (raw, json)
Hash identifier:          RZDGw87p1yCAcT0Dmvumf0iHAl7dtGYM+PDmYJVfsO8=
Subject key identifier:   B5:60:B4:BE:9C:F8:B8:58:7B:70:6F:2D:5C:A0:3C:61:35:8D:EE:1D
Authority key identifier: 1B:A4:15:D1:6E:72:E3:33:F2:93:6C:1C:5E:17:DF:24:37:81:08:C2
Certificate issuer:       /CN=1ba415d16e72e333f2936c1c5e17df24378108c2
Certificate serial:       01963B412F8D31442A94AE7BBE3DC83E738C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
Manifest number:          038F
Signing time:             Tue 15 Apr 2025 21:00:49 +0000
Manifest this update:     Tue 15 Apr 2025 21:00:49 +0000
Manifest next update:     Wed 16 Apr 2025 21:00:49 +0000
Files and hashes:         1: G6QV0W5y4zPyk2wcXhffJDeBCMI.crl (hash: WDQRWDvj0prxDc502HUNliVSkce5x5JfwNuw1CrGMF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 21:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3b:41:2f:8d:31:44:2a:94:ae:7b:be:3d:c8:3e:73:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba415d16e72e333f2936c1c5e17df24378108c2
        Validity
            Not Before: Apr 15 21:00:49 2025 GMT
            Not After : Apr 16 21:00:49 2025 GMT
        Subject: CN=b560b4be9cf8b8587b706f2d5ca03c61358dee1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ec:82:7e:c8:73:b3:40:8a:1c:86:4c:7d:b7:
                    a5:0c:fa:24:a0:3d:c4:9b:d0:6d:01:a5:f4:51:31:
                    33:11:db:be:1f:7c:9c:d9:31:2f:72:90:e4:6b:9e:
                    dc:39:1b:a5:ab:d7:69:9b:74:ca:6e:ec:8e:dc:e2:
                    f6:c0:58:dc:b0:f0:d5:1e:d3:9f:bf:4d:fd:3a:78:
                    1e:f1:60:3b:0d:c0:99:65:d0:04:5f:df:c3:d3:5f:
                    b6:93:dd:db:62:95:7e:d5:b5:38:13:57:56:b6:e0:
                    23:6b:5c:0d:da:7e:d3:54:8d:9c:91:71:cc:01:10:
                    e2:ea:8d:4f:e2:38:9a:33:63:c3:2e:01:2a:d5:59:
                    51:23:a3:53:13:e4:7b:75:b3:41:72:a0:9f:a6:a4:
                    4f:6c:9a:41:1c:0a:cb:c7:db:bb:7b:a6:2f:32:f1:
                    33:3b:20:9e:56:5c:c6:da:f3:58:89:72:53:e0:a9:
                    bb:ba:45:ec:f5:71:d6:5b:f9:d4:a3:cc:93:9e:ab:
                    a2:22:67:da:8c:10:9b:4c:23:c1:04:ec:f1:91:18:
                    75:94:37:be:67:ec:62:04:f8:58:ef:bf:f5:52:26:
                    fc:d0:2f:9b:6e:3d:36:96:13:b4:5c:7d:79:c9:9b:
                    75:4e:10:64:72:15:7e:87:fc:dd:d6:da:24:bb:67:
                    a2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:60:B4:BE:9C:F8:B8:58:7B:70:6F:2D:5C:A0:3C:61:35:8D:EE:1D
            X509v3 Authority Key Identifier:
                keyid:1B:A4:15:D1:6E:72:E3:33:F2:93:6C:1C:5E:17:DF:24:37:81:08:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:9a:ac:a3:ac:d8:72:e1:7e:39:49:cf:e9:aa:cd:69:df:23:
         9f:ca:3b:9a:6d:8c:9b:19:8f:f4:5a:77:12:3a:7c:38:38:b5:
         c5:62:c0:a7:2b:ad:46:d6:4e:7e:63:37:79:e4:0f:a7:b0:13:
         6b:0d:90:1f:a0:b3:b0:be:1e:2a:e9:75:f5:17:28:81:cb:8e:
         55:d7:06:b4:ef:25:5e:a3:87:f8:09:6a:b6:d7:fc:c4:48:f4:
         72:53:c1:87:f6:06:b7:cd:2f:7b:a5:4c:01:41:34:82:f9:2c:
         8c:83:66:15:9c:97:bd:2c:2c:e7:a6:4d:bf:cb:4c:51:b9:e5:
         44:c3:b4:0e:38:a7:2a:4b:d4:4e:c4:ec:9b:7e:38:e3:a9:48:
         8a:b5:bd:15:73:0c:2e:f8:aa:48:6c:0b:81:fe:ee:85:e0:88:
         8e:35:dd:11:62:09:6d:0e:c8:5e:a0:2c:95:b2:e7:2e:56:39:
         5f:07:83:44:0b:e5:57:49:ed:27:d9:d4:31:29:a2:dc:a7:87:
         db:19:49:b1:fa:05:3f:e7:af:e7:20:e1:1f:46:77:cb:37:02:
         85:d0:50:d3:28:fc:c7:7e:77:f9:5b:9d:ff:da:ac:19:93:67:
         df:4f:4b:a8:0e:ec:16:9d:36:10:c8:fb:47:0d:74:44:c7:fa:
         dd:43:40:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY7QS+NMUQqlK57vj3IPnOMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTQxNWQxNmU3MmUzMzNmMjkzNmMxYzVlMTdkZjI0Mzc4
MTA4YzIwHhcNMjUwNDE1MjEwMDQ5WhcNMjUwNDE2MjEwMDQ5WjAzMTEwLwYDVQQD
EyhiNTYwYjRiZTljZjhiODU4N2I3MDZmMmQ1Y2EwM2M2MTM1OGRlZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuyCfshzs0CKHIZMfbelDPokoD3E
m9BtAaX0UTEzEdu+H3yc2TEvcpDka57cORulq9dpm3TKbuyO3OL2wFjcsPDVHtOf
v039Onge8WA7DcCZZdAEX9/D01+2k93bYpV+1bU4E1dWtuAja1wN2n7TVI2ckXHM
ARDi6o1P4jiaM2PDLgEq1VlRI6NTE+R7dbNBcqCfpqRPbJpBHArLx9u7e6YvMvEz
OyCeVlzG2vNYiXJT4Km7ukXs9XHWW/nUo8yTnquiImfajBCbTCPBBOzxkRh1lDe+
Z+xiBPhY77/1Uib80C+bbj02lhO0XH15yZt1ThBkchV+h/zd1toku2eioQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVgtL6c+LhYe3BvLVygPGE1je4dMB8GA1UdIwQY
MBaAFBukFdFucuMz8pNsHF4X3yQ3gQjCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZRVjBXNXk0elB5azJ3Y1hoZmZKRGVCQ01JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jZTQwYjktMzVkNy00YTZhLTgzMDct
NmEwYjI1YzU2MzJkLzEvRzZRVjBXNXk0elB5azJ3Y1hoZmZKRGVCQ01JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9jZTQwYjktMzVkNy00YTZhLTgzMDctNmEwYjI1YzU2MzJk
LzEvRzZRVjBXNXk0elB5azJ3Y1hoZmZKRGVCQ01JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApqso6zY
cuF+OUnP6arNad8jn8o7mm2MmxmP9Fp3Ejp8ODi1xWLApyutRtZOfmM3eeQPp7AT
aw2QH6CzsL4eKul19RcogcuOVdcGtO8lXqOH+Alqttf8xEj0clPBh/YGt80ve6VM
AUE0gvksjINmFZyXvSws56ZNv8tMUbnlRMO0DjinKkvUTsTsm34446lIirW9FXMM
LviqSGwLgf7uheCIjjXdEWIJbQ7IXqAslbLnLlY5XweDRAvlV0ntJ9nUMSmi3KeH
2xlJsfoFP+ev5yDhH0Z3yzcChdBQ0yj8x353+Vud/9qsGZNn309LqA7sFp02EMj7
Rw10RMf63UNAIw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 04:40:59 2025 by rpki-client