Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
File:                     gq09xArNGFL8dKzdN9jwe7sCXRg.mft (raw, json)
Hash identifier:          FOR/gFBetsX3T3nCKrdRwJ/lhR5ZpcXKESqmm105YKQ=
Subject key identifier:   C1:AC:8E:9E:FE:A4:67:E4:05:5B:05:54:AA:C4:6A:A6:C3:A1:EF:74
Authority key identifier: 82:AD:3D:C4:0A:CD:18:52:FC:74:AC:DD:37:D8:F0:7B:BB:02:5D:18
Certificate issuer:       /CN=82ad3dc40acd1852fc74acdd37d8f07bbb025d18
Certificate serial:       019747E73529E1EE2F71BCC3194A062AF977
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
Manifest number:          0163
Signing time:             Sat 07 Jun 2025 01:00:24 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:24 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:24 +0000
Files and hashes:         1: gq09xArNGFL8dKzdN9jwe7sCXRg.crl (hash: Q5pYiWI8nU6DRjrUaz4oYOwRQsNUO2CzqM7kP/t32Os=)
                          2: moIHrCUIysvqre1db9iG8YhXiD4.roa (hash: 3qmhRdBwt3IbZM/x/JJkjl8tv0bK7oEsrL8A8nVm2tw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:35:29:e1:ee:2f:71:bc:c3:19:4a:06:2a:f9:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ad3dc40acd1852fc74acdd37d8f07bbb025d18
        Validity
            Not Before: Jun  7 01:00:24 2025 GMT
            Not After : Jun  8 01:00:24 2025 GMT
        Subject: CN=c1ac8e9efea467e4055b0554aac46aa6c3a1ef74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2c:fc:03:d7:15:fb:48:bd:80:b9:80:0d:ed:
                    75:f8:7c:81:75:8e:fa:16:47:7d:22:97:a6:23:31:
                    11:27:08:b5:17:28:fb:08:94:6b:91:9e:e6:97:2a:
                    93:e2:19:7c:53:27:d4:d8:ae:de:9b:bd:2d:d1:9e:
                    53:db:c7:59:c0:84:1d:bc:36:82:64:28:97:ef:8a:
                    fc:98:3e:22:f1:d6:6c:4e:6b:e6:bd:e2:b3:13:90:
                    0f:e1:6a:ba:b7:9f:f4:9e:17:06:b6:e9:43:21:86:
                    4e:96:b5:a7:24:79:50:2f:b6:d3:bc:0d:cb:2f:f5:
                    b7:48:71:b3:90:66:c0:5e:55:9f:16:0e:f6:ca:c2:
                    1d:38:e0:e9:a6:ba:b1:ae:49:9a:c6:98:61:6d:8a:
                    ff:3d:67:24:7a:aa:43:30:35:eb:66:b1:27:72:5e:
                    9c:ab:71:e9:af:0f:94:11:19:fe:b2:d4:ed:d5:49:
                    a8:af:63:ea:94:f4:5d:26:55:b1:f5:8d:c3:5b:d4:
                    00:32:fe:4f:94:b7:5b:24:2a:08:44:de:6e:b6:92:
                    c9:4a:a7:8a:b4:f8:4e:88:18:7a:cf:29:6d:6c:cf:
                    37:b0:02:74:cb:d7:b3:a3:49:cb:81:87:51:8a:5a:
                    91:55:84:76:80:d5:95:cd:85:7e:e3:87:db:89:b1:
                    fe:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AC:8E:9E:FE:A4:67:E4:05:5B:05:54:AA:C4:6A:A6:C3:A1:EF:74
            X509v3 Authority Key Identifier:
                keyid:82:AD:3D:C4:0A:CD:18:52:FC:74:AC:DD:37:D8:F0:7B:BB:02:5D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gq09xArNGFL8dKzdN9jwe7sCXRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/217b73-0562-476e-8d83-849c5c88dbfc/1/gq09xArNGFL8dKzdN9jwe7sCXRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:1e:9b:2d:18:8f:c5:4d:f8:49:fe:76:7f:03:ea:54:7f:66:
         e8:09:6d:59:d4:01:dd:f6:eb:a6:44:4f:fa:20:47:ed:c7:47:
         14:9c:be:d2:d0:0a:6b:93:7a:bf:02:b6:cc:75:fe:95:45:e9:
         97:9f:7d:da:1f:bd:f9:25:36:13:3d:90:59:8d:87:b2:5d:07:
         6d:cd:f7:38:4f:49:e7:a7:92:b7:35:08:ae:81:02:67:13:2b:
         89:ac:c3:52:25:6b:dc:cf:10:f4:c8:a7:ba:0e:f3:fa:48:d3:
         b3:6d:fb:ce:90:ca:09:e3:da:32:94:78:cc:a9:85:9a:5f:2c:
         81:21:29:0c:fd:b5:ae:62:a2:56:de:3e:38:8c:32:59:ca:4d:
         1b:be:44:44:aa:c9:75:54:34:e8:d9:ba:99:e8:0b:8b:11:df:
         fc:da:e9:16:06:66:e0:45:43:b1:69:2b:85:e8:46:ee:05:29:
         67:2a:12:21:f1:9f:2f:d3:0c:fa:d7:30:2f:b9:99:e9:7b:ff:
         3e:59:35:a4:53:6a:0f:5c:99:8b:d8:1c:2f:d6:16:97:66:e9:
         3b:9c:87:88:ac:90:7b:91:b2:02:a3:29:e9:69:7c:9c:26:c7:
         37:dd:6d:3d:5e:a5:1d:e6:59:10:fa:26:6b:4f:b3:64:82:b6:
         af:f9:5a:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdH5zUp4e4vcbzDGUoGKvl3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYWQzZGM0MGFjZDE4NTJmYzc0YWNkZDM3ZDhmMDdiYmIw
MjVkMTgwHhcNMjUwNjA3MDEwMDI0WhcNMjUwNjA4MDEwMDI0WjAzMTEwLwYDVQQD
EyhjMWFjOGU5ZWZlYTQ2N2U0MDU1YjA1NTRhYWM0NmFhNmMzYTFlZjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyz8A9cV+0i9gLmADe11+HyBdY76
Fkd9IpemIzERJwi1Fyj7CJRrkZ7mlyqT4hl8UyfU2K7em70t0Z5T28dZwIQdvDaC
ZCiX74r8mD4i8dZsTmvmveKzE5AP4Wq6t5/0nhcGtulDIYZOlrWnJHlQL7bTvA3L
L/W3SHGzkGbAXlWfFg72ysIdOODpprqxrkmaxphhbYr/PWckeqpDMDXrZrEncl6c
q3Hprw+UERn+stTt1Umor2PqlPRdJlWx9Y3DW9QAMv5PlLdbJCoIRN5utpLJSqeK
tPhOiBh6zyltbM83sAJ0y9ezo0nLgYdRilqRVYR2gNWVzYV+44fbibH+ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGsjp7+pGfkBVsFVKrEaqbDoe90MB8GA1UdIwQY
MBaAFIKtPcQKzRhS/HSs3TfY8Hu7Al0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3EwOXhBck5HRkw4ZEt6ZE45andlN3NDWFJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yMTdiNzMtMDU2Mi00NzZlLThkODMt
ODQ5YzVjODhkYmZjLzEvZ3EwOXhBck5HRkw4ZEt6ZE45andlN3NDWFJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8yMTdiNzMtMDU2Mi00NzZlLThkODMtODQ5YzVjODhkYmZj
LzEvZ3EwOXhBck5HRkw4ZEt6ZE45andlN3NDWFJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAR6bLRiP
xU34Sf52fwPqVH9m6AltWdQB3fbrpkRP+iBH7cdHFJy+0tAKa5N6vwK2zHX+lUXp
l5992h+9+SU2Ez2QWY2Hsl0Hbc33OE9J56eStzUIroECZxMriazDUiVr3M8Q9Min
ug7z+kjTs237zpDKCePaMpR4zKmFml8sgSEpDP21rmKiVt4+OIwyWcpNG75ERKrJ
dVQ06Nm6megLixHf/NrpFgZm4EVDsWkrhehG7gUpZyoSIfGfL9MM+tcwL7mZ6Xv/
Plk1pFNqD1yZi9gcL9YWl2bpO5yHiKyQe5GyAqMp6Wl8nCbHN91tPV6lHeZZEPom
a0+zZIK2r/laaQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:35:38 2025 by rpki-client