Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
File:                     gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft (raw, json)
Hash identifier:          GJuHl2HMwS+k3NwXv2YxG9s8LUN+uKOcU9r9Ta+wt6Y=
Subject key identifier:   F9:AD:5F:A0:E2:7C:49:B8:68:02:D5:17:84:DA:A9:56:30:36:F2:BE
Authority key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
Certificate issuer:       /CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Certificate serial:       01973E7622587D6E8EC796108F4712828376
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
Manifest number:          0A1E
Signing time:             Thu 05 Jun 2025 05:00:18 +0000
Manifest this update:     Thu 05 Jun 2025 05:00:18 +0000
Manifest next update:     Fri 06 Jun 2025 05:00:18 +0000
Files and hashes:         1: 2TNhAlAEfdOvgjGX47xcBe0ec8Q.roa (hash: F4E+yi6wuov8nVtjH23YAurT+H1Svha6Z7BC42V28wo=)
                          2: FmQ80l0dYXHJ_YszXOyTcMs1MTU.roa (hash: fSjkPRX7Cv4pegplKIsFbpWztpRWIWp5drmzYAiL38E=)
                          3: M2T_h-HT-LjV3MxmhC3AaCL7DR0.roa (hash: JUe0w/L/a5YNGKCvQ5Od3tGqP8OCxA0GZG5F9koR5ws=)
                          4: gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl (hash: Vmyn+pfisF0pt7YJTD1t9c6/Arn5CcpK/bGkaLSrfgc=)
                          5: hfZ9JmRYsdrX_WsZKnGJG03yjoY.roa (hash: KsXjtR8VJ0gF1kTfS5RfLRCRZJ2gEjdzhxwY2pQ41Hg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3e:76:22:58:7d:6e:8e:c7:96:10:8f:47:12:82:83:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
        Validity
            Not Before: Jun  5 05:00:18 2025 GMT
            Not After : Jun  6 05:00:18 2025 GMT
        Subject: CN=f9ad5fa0e27c49b86802d51784daa9563036f2be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a6:25:93:1b:25:ea:42:8b:c0:1a:69:a3:84:
                    d8:86:39:97:01:5f:d4:e0:e1:3e:79:cb:3c:79:e7:
                    42:f3:11:00:25:02:3b:e3:35:c6:30:22:58:90:45:
                    e9:46:f7:fe:2b:3d:75:d2:b2:85:17:43:e7:e8:dd:
                    64:e2:23:ce:78:f2:60:cb:1a:8d:7b:3c:0a:df:bc:
                    9f:70:14:6b:56:89:46:1a:ef:49:44:93:8f:0a:19:
                    2a:94:48:fa:64:00:f6:4d:8c:b2:69:c5:4e:35:b6:
                    6f:8c:6f:47:57:74:36:1f:e0:1f:ca:c7:51:16:76:
                    a6:5c:d6:2b:3d:71:db:e4:20:30:b6:e0:e8:bc:39:
                    4f:0c:db:92:09:2f:8b:82:3e:91:09:aa:a8:bb:66:
                    32:75:83:4c:19:42:06:73:fb:89:ad:18:2a:45:6b:
                    9b:b7:e4:75:8e:aa:1f:1b:90:e5:fd:d2:06:87:79:
                    e0:62:8f:ba:5f:b3:b7:60:35:1a:4f:2f:1f:a2:82:
                    1f:65:32:a1:f1:a1:3f:d3:50:0d:90:b6:b1:98:56:
                    d2:b3:7b:a7:1b:ce:6b:57:28:0f:c0:45:e5:f3:d1:
                    45:0b:6c:88:a0:98:19:b4:76:65:29:bd:5c:36:ad:
                    4c:e7:ec:4d:78:2d:9f:94:09:b2:69:02:e2:b8:86:
                    e7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AD:5F:A0:E2:7C:49:B8:68:02:D5:17:84:DA:A9:56:30:36:F2:BE
            X509v3 Authority Key Identifier:
                keyid:81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ab:e4:00:e2:d5:d3:43:95:a8:6b:cc:29:72:ea:17:e2:90:
         20:f6:91:c3:64:b0:16:82:2b:83:fe:17:ec:a9:2b:e6:dd:75:
         de:de:e6:47:a6:af:c8:4e:1a:57:52:29:b7:86:4a:65:2a:1f:
         b2:0e:ce:f3:03:17:5a:05:4a:84:fd:d8:6b:1b:4a:55:01:2a:
         11:06:a2:ea:c7:73:f0:89:67:5e:49:2a:ad:0b:8d:d5:b0:ca:
         9e:bf:6a:cd:53:5c:43:aa:cb:71:7e:40:22:38:e2:e5:7e:ce:
         1a:a7:6c:91:91:4c:3c:37:af:dd:f0:11:2d:71:02:b6:09:56:
         42:a6:8f:af:9f:b8:d1:4c:a7:40:f8:2f:25:38:22:ec:f2:9f:
         84:52:ac:08:b3:42:9a:c6:39:20:6a:65:84:24:01:31:24:c8:
         0c:cc:1f:31:87:cc:2b:18:8e:f8:c4:b7:d5:31:40:d2:78:b5:
         e8:5d:d2:67:96:31:07:1b:20:a4:9f:9a:33:a6:6c:26:6c:78:
         4f:69:eb:71:b2:9b:f2:1a:3e:af:5c:11:17:de:2d:fe:e5:d6:
         b4:5d:a9:29:ca:70:66:ec:3d:c8:c1:e9:3b:66:0b:a3:c3:63:
         cc:ca:47:91:90:47:06:17:94:3c:3e:18:60:6a:db:be:6d:13:
         b7:98:98:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 08:38:46 2025 by rpki-client