Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
File:                     GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft (raw, json)
Hash identifier:          hPAc1Lb/zAuYhyRjkZRkKjZBctvr9LnyV/B/U1yGzr8=
Subject key identifier:   A2:7F:B7:2F:66:F2:60:4B:62:02:C0:A8:F1:ED:10:F5:65:EB:49:36
Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
Certificate issuer:       /CN=1b098412c984b89be38011a72a3c471975fc47a2
Certificate serial:       019648FCC9BA112AC2F39D014E7D0C075475
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
Manifest number:          06F5
Signing time:             Fri 18 Apr 2025 13:00:48 +0000
Manifest this update:     Fri 18 Apr 2025 13:00:48 +0000
Manifest next update:     Sat 19 Apr 2025 13:00:48 +0000
Files and hashes:         1: 1MMOey2DFiHGwBuawoDAV5GTR0U.roa (hash: C6gJNXtwf6inO2jQLVsOQct8LTsyFQuwXSbNPT+y76g=)
                          2: GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl (hash: tMK5nR79yYIXpmx2B3xx9CZm1TQSxg5cayERwtP1OGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:48:fc:c9:ba:11:2a:c2:f3:9d:01:4e:7d:0c:07:54:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2
        Validity
            Not Before: Apr 18 13:00:48 2025 GMT
            Not After : Apr 19 13:00:48 2025 GMT
        Subject: CN=a27fb72f66f2604b6202c0a8f1ed10f565eb4936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0c:ba:66:9f:96:28:8e:60:bd:7f:81:d5:cc:
                    d6:2a:68:7f:a3:04:16:42:72:3f:27:c3:aa:3b:fe:
                    d8:84:62:92:74:17:18:ba:a4:6d:06:19:1e:97:cf:
                    08:6f:d3:54:ca:a1:17:9f:16:2c:f2:2e:b0:01:ff:
                    ff:30:4b:53:89:e7:92:09:01:51:cb:ae:19:11:15:
                    f5:9f:eb:c3:90:25:c6:aa:4d:d7:aa:f3:d0:68:21:
                    36:1d:ab:42:d1:6a:c9:21:99:58:b4:07:0d:7e:ab:
                    c4:97:b2:b2:a4:f5:69:60:ac:60:58:23:cf:00:86:
                    47:2f:f1:07:04:01:85:22:4c:d9:a5:0f:c1:5b:52:
                    22:56:0c:79:bc:dd:ca:00:42:52:58:f1:54:c9:5f:
                    1b:08:fd:75:66:9b:b0:d4:8b:00:98:bb:c1:b1:3b:
                    b9:43:d8:45:eb:1a:5d:5b:2a:b7:39:90:a2:27:3c:
                    78:ce:39:23:f7:f7:60:60:6c:14:8a:f7:ef:20:35:
                    76:14:ee:e1:62:e4:f6:6a:7a:ab:f6:06:2e:fe:be:
                    1b:7f:fd:bc:cc:03:2a:83:25:cd:51:26:26:4a:b9:
                    55:2e:56:08:93:53:3e:46:ca:64:7c:e6:ef:57:3a:
                    4c:ee:3a:f9:94:ba:6d:f6:b5:10:e6:7b:cb:7c:57:
                    91:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7F:B7:2F:66:F2:60:4B:62:02:C0:A8:F1:ED:10:F5:65:EB:49:36
            X509v3 Authority Key Identifier:
                keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:0f:7a:f8:20:1b:9b:a6:38:d9:c2:5a:73:77:22:7f:34:5b:
         4c:38:81:0b:3b:32:5f:c7:64:db:04:5d:e5:0a:6d:1a:53:1f:
         69:5d:42:d0:73:92:09:54:a0:31:91:30:77:66:9e:a4:fd:7a:
         b4:33:6b:f5:01:ce:f3:62:4d:0b:e4:8e:13:6b:d3:78:39:30:
         50:75:e3:b8:62:67:f7:19:24:b5:ba:5b:1a:16:76:e7:f0:55:
         5e:b7:f9:36:5f:57:3c:22:7c:53:84:4e:19:33:13:84:f4:53:
         9e:96:81:e2:6d:44:87:7b:44:7a:14:79:9f:a3:c3:1a:e0:3d:
         84:aa:f4:9b:b7:23:47:8f:f4:65:2c:d1:4f:87:ba:56:f8:03:
         95:7c:7e:2c:56:09:7e:29:6e:90:17:6e:c8:86:df:50:a8:88:
         d2:50:d7:b3:ed:05:34:55:1e:d4:ba:dc:6e:ed:32:b9:32:bd:
         12:20:b2:cc:be:52:1c:b0:49:40:0b:89:5c:98:be:14:9e:85:
         5f:7f:7a:e5:7c:7d:8a:be:6b:5d:2b:10:ec:79:d4:89:01:3b:
         e2:bc:ca:3e:e3:ef:a8:f0:e9:37:81:1d:a8:44:17:b2:87:5a:
         91:de:83:5b:d6:09:65:4c:91:9d:83:d2:7a:21:55:5d:8b:40:
         b2:2a:b1:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZI/Mm6ESrC850BTn0MB1R1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDk4NDEyYzk4NGI4OWJlMzgwMTFhNzJhM2M0NzE5NzVm
YzQ3YTIwHhcNMjUwNDE4MTMwMDQ4WhcNMjUwNDE5MTMwMDQ4WjAzMTEwLwYDVQQD
EyhhMjdmYjcyZjY2ZjI2MDRiNjIwMmMwYThmMWVkMTBmNTY1ZWI0OTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngy6Zp+WKI5gvX+B1czWKmh/owQW
QnI/J8OqO/7YhGKSdBcYuqRtBhkel88Ib9NUyqEXnxYs8i6wAf//MEtTieeSCQFR
y64ZERX1n+vDkCXGqk3XqvPQaCE2HatC0WrJIZlYtAcNfqvEl7KypPVpYKxgWCPP
AIZHL/EHBAGFIkzZpQ/BW1IiVgx5vN3KAEJSWPFUyV8bCP11Zpuw1IsAmLvBsTu5
Q9hF6xpdWyq3OZCiJzx4zjkj9/dgYGwUivfvIDV2FO7hYuT2anqr9gYu/r4bf/28
zAMqgyXNUSYmSrlVLlYIk1M+RspkfObvVzpM7jr5lLpt9rUQ5nvLfFeRiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJ/ty9m8mBLYgLAqPHtEPVl60k2MB8GA1UdIwQY
MBaAFBsJhBLJhLib44ARpyo8Rxl1/EeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xNWU5MDUtZmE0Zi00ZDgzLWJmZjYt
NzBkMTMzMDZjZDFjLzEvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8xNWU5MDUtZmE0Zi00ZDgzLWJmZjYtNzBkMTMzMDZjZDFj
LzEvR3dtRUVzbUV1SnZqZ0JHbktqeEhHWFg4UjZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQ96+CAb
m6Y42cJac3cifzRbTDiBCzsyX8dk2wRd5QptGlMfaV1C0HOSCVSgMZEwd2aepP16
tDNr9QHO82JNC+SOE2vTeDkwUHXjuGJn9xkktbpbGhZ25/BVXrf5Nl9XPCJ8U4RO
GTMThPRTnpaB4m1Eh3tEehR5n6PDGuA9hKr0m7cjR4/0ZSzRT4e6VvgDlXx+LFYJ
filukBduyIbfUKiI0lDXs+0FNFUe1Lrcbu0yuTK9EiCyzL5SHLBJQAuJXJi+FJ6F
X3965Xx9ir5rXSsQ7HnUiQE74rzKPuPvqPDpN4EdqEQXsodakd6DW9YJZUyRnYPS
eiFVXYtAsiqx0Q==
-----END CERTIFICATE-----
Generated at Fri Apr 18 19:17:07 2025 by rpki-client