Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft
File:                     G5gog-Hfv0Yz4IwLWMheif_DIQE.mft (raw, json)
Hash identifier:          t6+AIRi1aMuHiIdV6eEZOUNlWH47KoxL0l4U2vlCr7o=
Subject key identifier:   2A:3D:65:39:7B:15:26:CA:E8:3B:83:78:C7:A2:78:31:54:B0:DE:7F
Authority key identifier: 1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01
Certificate issuer:       /CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
Certificate serial:       01963464643F29FAD0FD6DABBAD6E3500EE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft
Manifest number:          0A40
Signing time:             Mon 14 Apr 2025 13:01:56 +0000
Manifest this update:     Mon 14 Apr 2025 13:01:56 +0000
Manifest next update:     Tue 15 Apr 2025 13:01:56 +0000
Files and hashes:         1: 9tT1Sn3Qux2-pUIWCQe_vjURo9M.roa (hash: FairLybhS08hCgrNLc9cEd4IlKo+5RTneSM8eV+/6qk=)
                          2: BmpGigL7yj_vU4YrBcCEXhWHHbI.roa (hash: Ppbu0DUb3G/J7ntuuCJmNlJLWLrlVFHUquuws77rxcY=)
                          3: G5gog-Hfv0Yz4IwLWMheif_DIQE.crl (hash: QXEeGXyNfBzvYjKfWtsOseqndzawlVdK0Rh/ZyorpkM=)
                          4: KxqqgwhHr1JBau2ZnEJ99DBtg4A.roa (hash: QCOcE3LD/xRpaRa6zgmKhfyxrFbaW8v4jp9GZFELj38=)
                          5: UjncDvFxOlRCkAGtD0tzYyO0vwY.roa (hash: HR/S3qDlN6tb+Q3T8TNZutyXf0XfoqKmAw4PR5qJTgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Apr 2025 13:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:34:64:64:3f:29:fa:d0:fd:6d:ab:ba:d6:e3:50:0e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
        Validity
            Not Before: Apr 14 13:01:56 2025 GMT
            Not After : Apr 15 13:01:56 2025 GMT
        Subject: CN=2a3d65397b1526cae83b8378c7a2783154b0de7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:30:09:01:62:f1:8c:15:39:fd:07:d0:89:ac:
                    5c:08:79:69:77:ff:3d:df:cb:34:92:7c:e0:23:68:
                    f2:74:73:a4:9a:5a:9a:3c:79:cf:cc:b6:bc:d7:2f:
                    66:db:b7:f3:61:be:76:ba:e8:0c:66:ea:a9:b0:05:
                    c1:47:97:31:79:da:97:7d:a8:08:c4:52:c7:71:fa:
                    ee:4d:a2:58:a0:9a:9a:a4:e0:76:c3:44:51:19:81:
                    a4:3c:3f:63:4d:1f:4d:e0:b9:f0:6a:1d:e7:23:27:
                    86:9c:11:fb:c8:ed:68:e4:d5:cb:09:c4:0e:d0:69:
                    1a:3b:ba:06:00:0b:34:0c:c3:0e:96:74:37:3b:e9:
                    37:12:bd:b7:2a:28:1a:b2:58:85:ff:1b:92:17:e5:
                    07:6d:29:b6:1c:fb:8e:73:2a:da:d3:db:e4:3a:51:
                    5b:2e:51:9d:e7:05:b8:6f:4a:53:17:98:f2:92:b7:
                    df:2a:55:2e:85:cc:fc:74:1c:57:31:4e:3b:f4:eb:
                    c4:39:30:99:ab:d1:af:77:78:b5:13:c6:ec:ad:1b:
                    03:e7:92:37:87:10:e3:8f:ec:f0:36:6a:a4:35:05:
                    ac:23:40:44:39:3c:de:95:6b:43:8d:15:8d:4c:08:
                    b4:18:2e:de:58:22:e8:43:60:07:71:e2:4c:0a:89:
                    57:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3D:65:39:7B:15:26:CA:E8:3B:83:78:C7:A2:78:31:54:B0:DE:7F
            X509v3 Authority Key Identifier:
                keyid:1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:5e:56:41:f4:a3:0f:36:14:32:a7:b7:50:27:9e:ac:03:73:
         a1:16:06:76:e2:35:55:00:b5:3c:55:d6:a0:f8:c5:99:4d:23:
         59:6c:bb:7c:67:ad:53:0e:25:6a:3f:cf:f6:4a:d9:34:fb:b3:
         b3:80:4a:8c:cf:f7:d3:ec:ea:b9:4b:a5:0f:73:46:b1:00:75:
         ca:07:b0:14:14:e4:47:c4:b9:01:72:f9:ed:28:0e:3d:fb:02:
         96:13:72:fa:9a:29:79:ac:f0:74:0b:26:f0:71:f5:71:29:7d:
         89:36:c5:71:b6:18:ca:5a:6e:88:ee:8d:2a:cd:89:c0:ea:2e:
         e5:76:8f:c4:91:7a:3e:25:25:15:2a:e4:d3:4b:31:4c:83:6f:
         28:7b:6c:ae:f4:c4:4a:f1:e0:32:22:52:56:44:d2:e2:f1:2b:
         85:50:07:a5:1b:e2:e8:4a:f8:db:dc:86:8b:22:6b:d3:69:43:
         da:9a:01:a6:93:46:5d:0a:cb:4b:46:01:3e:4d:1f:7a:94:5c:
         d5:f1:99:77:9a:dd:be:06:77:10:2f:07:e2:1e:e5:df:10:17:
         42:b6:6d:44:df:19:19:96:74:e0:62:93:3c:ff:35:3d:eb:49:
         93:25:f6:24:74:21:22:d3:4c:f4:39:2f:f8:14:82:a8:59:41:
         19:d2:57:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY0ZGQ/KfrQ/W2rutbjUA7lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOTgyODgzZTFkZmJmNDYzM2UwOGMwYjU4Yzg1ZTg5ZmZj
MzIxMDEwHhcNMjUwNDE0MTMwMTU2WhcNMjUwNDE1MTMwMTU2WjAzMTEwLwYDVQQD
EygyYTNkNjUzOTdiMTUyNmNhZTgzYjgzNzhjN2EyNzgzMTU0YjBkZTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTAJAWLxjBU5/QfQiaxcCHlpd/89
38s0knzgI2jydHOkmlqaPHnPzLa81y9m27fzYb52uugMZuqpsAXBR5cxedqXfagI
xFLHcfruTaJYoJqapOB2w0RRGYGkPD9jTR9N4Lnwah3nIyeGnBH7yO1o5NXLCcQO
0GkaO7oGAAs0DMMOlnQ3O+k3Er23KigasliF/xuSF+UHbSm2HPuOcyra09vkOlFb
LlGd5wW4b0pTF5jykrffKlUuhcz8dBxXMU479OvEOTCZq9Gvd3i1E8bsrRsD55I3
hxDjj+zwNmqkNQWsI0BEOTzelWtDjRWNTAi0GC7eWCLoQ2AHceJMColX1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCo9ZTl7FSbK6DuDeMeieDFUsN5/MB8GA1UdIwQY
MBaAFBuYKIPh379GM+CMC1jIXon/wyEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzVnb2ctSGZ2MFl6NEl3TFdNaGVpZl9ESVFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81Nzg2MGEtZGQ1ZS00NmU4LTllY2It
ZDA3OGVlYzgyYjJhLzEvRzVnb2ctSGZ2MFl6NEl3TFdNaGVpZl9ESVFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS81Nzg2MGEtZGQ1ZS00NmU4LTllY2ItZDA3OGVlYzgyYjJh
LzEvRzVnb2ctSGZ2MFl6NEl3TFdNaGVpZl9ESVFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnV5WQfSj
DzYUMqe3UCeerANzoRYGduI1VQC1PFXWoPjFmU0jWWy7fGetUw4laj/P9krZNPuz
s4BKjM/30+zquUulD3NGsQB1ygewFBTkR8S5AXL57SgOPfsClhNy+popeazwdAsm
8HH1cSl9iTbFcbYYylpuiO6NKs2JwOou5XaPxJF6PiUlFSrk00sxTINvKHtsrvTE
SvHgMiJSVkTS4vErhVAHpRvi6Er429yGiyJr02lD2poBppNGXQrLS0YBPk0fepRc
1fGZd5rdvgZ3EC8H4h7l3xAXQrZtRN8ZGZZ04GKTPP81PetJkyX2JHQhItNM9Dkv
+BSCqFlBGdJXEQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 21:39:34 2025 by rpki-client