Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File:                     gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier:          iz+HNeP7ntTqLz9Z+Uc6ojddylUwjQcITM90oVUjMXI=
Subject key identifier:   0E:7D:F8:D9:19:6B:3A:4A:C1:9A:3A:20:24:86:2E:C7:1D:10:FB:CB
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer:       /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial:       019768BC2DD11070D7123F94DF54329D4410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number:          158E
Signing time:             Fri 13 Jun 2025 10:00:52 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:52 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:52 +0000
Files and hashes:         1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: DaJOzWGTGxFP0qKnR16SkuMI43SEKCbxyQU6MaV5AsM=)
                          2: zMBNnU414lgd-NbPPxv6LfAwsv0.roa (hash: a4j1fjgcVTUDMcw7oEdiVT0gcdKWNK33wBEmeJ+tzqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bc:2d:d1:10:70:d7:12:3f:94:df:54:32:9d:44:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
        Validity
            Not Before: Jun 13 10:00:52 2025 GMT
            Not After : Jun 14 10:00:52 2025 GMT
        Subject: CN=0e7df8d9196b3a4ac19a3a2024862ec71d10fbcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:15:ea:30:ca:b4:c6:b1:62:04:3d:b5:1e:b3:
                    e8:14:fb:5d:f1:1b:62:cd:e2:7b:cc:bc:d7:da:ec:
                    48:a5:ec:23:93:b3:1b:72:89:3e:ca:73:65:f9:f8:
                    9e:8e:d7:8c:5d:d4:41:32:73:1c:44:f6:05:53:5e:
                    f1:35:14:0b:28:84:66:9b:ad:d6:db:5a:a6:db:7c:
                    ee:17:6f:ac:58:26:85:ee:8c:b2:0b:4d:7b:1d:fb:
                    21:b9:8a:37:b4:8b:7c:00:77:98:d3:c3:b5:75:21:
                    20:94:d1:53:94:b7:b4:17:f2:f7:aa:f9:25:6c:a6:
                    a2:c7:ff:0c:0e:91:82:4f:36:5f:8d:56:1d:3e:8d:
                    05:e7:7e:d0:ec:9b:0a:1e:d0:ea:e3:5e:e1:7b:68:
                    c3:d7:68:a8:9b:d7:38:59:59:b7:e7:ff:5f:2f:c1:
                    7b:67:d4:02:1e:7d:2f:54:5e:29:1d:14:01:a3:ea:
                    28:5c:5e:67:06:cd:94:8f:60:64:b0:27:1d:f8:e4:
                    f2:77:60:47:18:51:1a:4e:c2:91:42:84:7b:36:51:
                    91:b0:eb:69:e9:75:01:16:90:d8:ed:ee:f4:c7:62:
                    1a:6f:7b:9c:2d:a5:a3:0f:c1:52:29:2b:18:01:92:
                    c8:04:5c:a8:25:11:6e:f7:47:45:67:bb:a7:96:39:
                    98:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7D:F8:D9:19:6B:3A:4A:C1:9A:3A:20:24:86:2E:C7:1D:10:FB:CB
            X509v3 Authority Key Identifier:
                keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:27:28:89:79:82:70:98:74:69:71:5e:ae:b6:49:bc:95:d2:
         d0:a8:b9:02:bb:5a:e0:c2:b3:ff:04:99:08:62:a9:75:1f:6c:
         23:e8:0b:f9:04:6d:bc:22:50:70:0e:db:c9:3b:de:bf:b3:08:
         7d:db:d5:bd:87:16:83:42:49:30:14:b9:b9:21:ea:de:4d:f2:
         5d:2d:fd:79:d9:ad:4f:af:28:8a:6e:60:f8:74:72:a7:30:1a:
         4d:02:57:11:00:22:31:ab:51:6f:bc:51:58:76:ef:2c:1e:b0:
         31:4c:bd:5c:77:d0:85:01:db:aa:28:11:9e:32:7c:c5:50:57:
         df:4c:81:34:c1:a3:6e:30:3e:ca:c3:35:aa:fd:bd:12:b0:f7:
         fc:e1:e3:43:46:8a:f1:ef:f2:bf:b8:56:5c:ba:18:dd:41:e9:
         d2:ec:ce:21:ab:47:66:14:46:65:c7:5c:43:fd:3b:fd:d8:ba:
         a2:d0:7a:fd:10:f7:e5:ad:57:28:4e:aa:7c:d7:d4:fa:b3:0a:
         01:53:a9:e2:03:4a:32:03:1d:30:18:03:78:20:5d:f9:2e:d6:
         cc:af:a3:3a:43:81:e5:1a:64:06:9c:3d:76:b2:b1:64:4d:07:
         63:9f:20:2c:06:11:d0:e3:97:a5:21:6a:90:2d:cc:30:0e:e4:
         35:3b:8e:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdovC3REHDXEj+U31QynUQQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMjRjNWRmMTk3ODlkNTI1OTEwNGUwYWUwZGNkNDY3MmE4
ZTJiYWIwHhcNMjUwNjEzMTAwMDUyWhcNMjUwNjE0MTAwMDUyWjAzMTEwLwYDVQQD
EygwZTdkZjhkOTE5NmIzYTRhYzE5YTNhMjAyNDg2MmVjNzFkMTBmYmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBXqMMq0xrFiBD21HrPoFPtd8Rti
zeJ7zLzX2uxIpewjk7Mbcok+ynNl+fiejteMXdRBMnMcRPYFU17xNRQLKIRmm63W
21qm23zuF2+sWCaF7oyyC017HfshuYo3tIt8AHeY08O1dSEglNFTlLe0F/L3qvkl
bKaix/8MDpGCTzZfjVYdPo0F537Q7JsKHtDq417he2jD12iom9c4WVm35/9fL8F7
Z9QCHn0vVF4pHRQBo+ooXF5nBs2Uj2BksCcd+OTyd2BHGFEaTsKRQoR7NlGRsOtp
6XUBFpDY7e70x2Iab3ucLaWjD8FSKSsYAZLIBFyoJRFu90dFZ7unljmYSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA59+NkZazpKwZo6ICSGLscdEPvLMB8GA1UdIwQY
MBaAFIMkxd8ZeJ1SWRBOCuDc1GcqjiurMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3lURjN4bDRuVkpaRUU0SzROelVaeXFPSzZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80YjJlNDktZjY2Ny00OTRhLWFmZTkt
NmRmM2U0YTRlZWIxLzEvZ3lURjN4bDRuVkpaRUU0SzROelVaeXFPSzZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy80YjJlNDktZjY2Ny00OTRhLWFmZTktNmRmM2U0YTRlZWIx
LzEvZ3lURjN4bDRuVkpaRUU0SzROelVaeXFPSzZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqycoiXmC
cJh0aXFerrZJvJXS0Ki5Arta4MKz/wSZCGKpdR9sI+gL+QRtvCJQcA7byTvev7MI
fdvVvYcWg0JJMBS5uSHq3k3yXS39edmtT68oim5g+HRypzAaTQJXEQAiMatRb7xR
WHbvLB6wMUy9XHfQhQHbqigRnjJ8xVBX30yBNMGjbjA+ysM1qv29ErD3/OHjQ0aK
8e/yv7hWXLoY3UHp0uzOIatHZhRGZcdcQ/07/di6otB6/RD35a1XKE6qfNfU+rMK
AVOp4gNKMgMdMBgDeCBd+S7WzK+jOkOB5RpkBpw9drKxZE0HY58gLAYR0OOXpSFq
kC3MMA7kNTuOVQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 14:35:45 2025 by rpki-client