Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File:                     gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier:          9Z8Ze4Z3ZLGLT14vGZzrpxTbGcHoXFVx3ozc71SAztg=
Subject key identifier:   B9:D3:20:3F:DA:4B:6C:23:83:D6:BB:84:6C:50:6B:60:5A:41:75:0C
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer:       /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial:       01975F1443D78E9375EFF2EFBB9617FCF54B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number:          1589
Signing time:             Wed 11 Jun 2025 13:00:52 +0000
Manifest this update:     Wed 11 Jun 2025 13:00:52 +0000
Manifest next update:     Thu 12 Jun 2025 13:00:52 +0000
Files and hashes:         1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: Qz0Lv88a/mkDN0/TNMfEx6a2e5cVffosHL3vtjoWuYQ=)
                          2: zMBNnU414lgd-NbPPxv6LfAwsv0.roa (hash: a4j1fjgcVTUDMcw7oEdiVT0gcdKWNK33wBEmeJ+tzqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:14:43:d7:8e:93:75:ef:f2:ef:bb:96:17:fc:f5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
        Validity
            Not Before: Jun 11 13:00:52 2025 GMT
            Not After : Jun 12 13:00:52 2025 GMT
        Subject: CN=b9d3203fda4b6c2383d6bb846c506b605a41750c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:40:af:a3:c1:1f:d8:50:b5:e3:16:70:e6:98:
                    7a:d9:5f:00:d2:a3:ae:1a:06:2a:f2:0d:53:07:5d:
                    81:bb:87:ea:97:bf:9f:9f:5b:ea:0d:74:0f:4f:bf:
                    b6:74:22:a1:5a:a6:e6:61:12:7d:5d:e3:50:a1:09:
                    30:96:bc:db:b9:cb:3e:1c:06:d2:ba:ed:10:c2:84:
                    69:69:6b:ea:c1:bc:5d:4c:cf:dd:fe:8b:b0:3d:f8:
                    ce:b5:98:c3:72:24:91:78:44:c0:f2:26:0a:9a:41:
                    a9:c2:5b:1f:2e:03:52:65:7f:18:61:cf:40:d7:63:
                    bf:d5:07:d6:a7:2e:39:53:d2:b2:67:35:78:6f:fa:
                    ac:52:c0:6c:31:9e:7f:9b:36:4d:6b:36:fb:7d:a5:
                    92:dd:17:e8:7f:51:52:96:b2:30:ff:5c:3d:86:36:
                    da:16:13:be:03:a5:f9:6c:f7:87:fa:d7:1b:d4:ab:
                    dc:ce:d8:28:32:5a:90:07:8d:70:c1:ef:cc:69:0c:
                    3a:d4:9c:44:9d:f1:98:65:67:9a:fe:5c:4c:55:78:
                    d9:75:1b:16:2b:10:7f:9e:fb:77:e6:33:6b:f6:69:
                    fd:a2:9d:84:60:4c:f5:dc:08:b5:5e:fa:0b:42:47:
                    24:2e:9c:5a:de:2b:3a:71:9f:ba:63:6d:b2:42:78:
                    81:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D3:20:3F:DA:4B:6C:23:83:D6:BB:84:6C:50:6B:60:5A:41:75:0C
            X509v3 Authority Key Identifier:
                keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:45:04:3c:91:5f:2f:18:64:af:0a:0e:09:2d:ac:96:38:67:
         28:63:2f:1d:73:d6:1a:6e:11:e1:86:a4:0a:d8:03:6b:5d:98:
         08:33:4b:9b:b4:d3:41:7e:f9:58:5a:b3:36:a2:84:54:bf:67:
         5f:91:47:ce:b3:7d:23:08:5b:fc:de:97:ff:17:e9:0f:49:0d:
         92:ba:4a:9d:8d:22:52:fe:b1:38:64:2d:4b:50:00:1e:e3:d3:
         c0:8d:82:c3:4f:7e:11:0b:2b:b6:08:de:14:06:eb:29:42:15:
         3b:1f:d1:c7:d9:56:5a:de:36:69:5e:d1:48:ff:0a:c3:ce:a5:
         17:f0:d9:2c:fe:7b:2f:fd:f7:1c:95:86:86:7e:cd:39:6a:b6:
         11:e7:98:e6:b0:1c:bc:57:d4:7a:fa:0c:de:99:71:a5:62:38:
         f3:61:c0:88:46:d4:89:f7:82:66:9a:07:ca:de:84:ca:7d:bb:
         93:79:6e:88:96:c6:b2:0e:b9:7e:69:4c:15:37:f8:39:05:20:
         7c:95:95:ed:5b:45:de:89:90:50:ed:8f:b5:93:50:80:50:0e:
         be:a4:28:8d:9d:f1:37:9e:a5:76:9c:a3:83:25:2f:80:23:32:
         0a:e5:38:6d:61:d1:3c:0e:8c:7c:af:be:43:e1:6f:fe:fe:a6:
         f1:56:62:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:43:59 2025 by rpki-client