Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
File:                     GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft (raw, json)
Hash identifier:          e0pisACTvhbiRaXc4/QHfjWlF4CIqCOKSlmJ7cUIwTU=
Subject key identifier:   4C:93:5D:27:A7:5B:6C:68:15:6F:32:CE:41:6C:7B:9D:BC:BD:09:3B
Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
Certificate issuer:       /CN=1b098412c984b89be38011a72a3c471975fc47a2
Certificate serial:       01974DB29FC39CFCC299553A57781FDAD0B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
Manifest number:          077C
Signing time:             Sun 08 Jun 2025 04:00:41 +0000
Manifest this update:     Sun 08 Jun 2025 04:00:41 +0000
Manifest next update:     Mon 09 Jun 2025 04:00:41 +0000
Files and hashes:         1: 1MMOey2DFiHGwBuawoDAV5GTR0U.roa (hash: C6gJNXtwf6inO2jQLVsOQct8LTsyFQuwXSbNPT+y76g=)
                          2: GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl (hash: 04Jju/e1nSXBVmagWLgnvCbkZ1jqGgBb9JP7/0l85KM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:b2:9f:c3:9c:fc:c2:99:55:3a:57:78:1f:da:d0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2
        Validity
            Not Before: Jun  8 04:00:41 2025 GMT
            Not After : Jun  9 04:00:41 2025 GMT
        Subject: CN=4c935d27a75b6c68156f32ce416c7b9dbcbd093b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:61:bf:5d:3d:66:03:8a:8a:05:b5:b7:e5:43:
                    8f:ac:a3:28:6f:ad:e8:35:23:c9:e5:9e:a3:41:69:
                    ee:19:3b:a8:2f:0e:ac:b1:c9:61:5e:9a:6e:3c:ec:
                    ea:43:02:65:0e:e4:63:01:8c:5f:f0:66:d2:cf:7e:
                    23:d0:d7:cb:81:0b:3e:bb:d7:2e:03:56:ab:4d:dd:
                    c8:4e:b5:20:dd:d0:a1:37:52:dd:2a:12:06:39:da:
                    e8:1a:5a:b9:9a:97:2e:3a:f2:aa:21:3d:e2:bd:13:
                    b1:75:16:00:87:b5:db:e6:df:7a:0b:44:38:3a:6f:
                    f4:ea:57:d9:89:75:e1:11:ad:76:86:14:c2:f0:54:
                    8e:f5:54:d2:c9:ff:d3:2a:27:a4:38:90:84:dd:31:
                    7f:2d:79:57:01:df:fc:e6:f7:c5:5b:31:82:4d:55:
                    08:b9:0c:bd:1c:87:b0:f1:63:0f:9d:f6:77:69:69:
                    7a:3b:46:9b:54:aa:37:a9:e1:89:b5:d9:76:9d:ee:
                    80:ac:4e:f9:2b:aa:b8:56:73:24:46:ef:c9:99:be:
                    bb:db:85:0c:58:fa:99:0d:16:24:79:45:f7:1f:2e:
                    e8:5c:8c:46:be:8d:b1:6a:46:27:80:ec:6e:10:16:
                    80:27:2c:de:6e:f2:b7:6a:f3:ef:b0:d5:9a:9d:17:
                    0a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:93:5D:27:A7:5B:6C:68:15:6F:32:CE:41:6C:7B:9D:BC:BD:09:3B
            X509v3 Authority Key Identifier:
                keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:83:35:6b:68:2c:dc:33:f8:73:22:7a:32:16:61:d1:5c:ae:
         78:ed:b1:1c:d4:e4:76:e8:db:4c:45:99:e9:8e:40:36:e1:13:
         da:f9:0b:fa:c1:a2:27:63:b6:6d:8f:e0:3b:62:d6:07:2f:3d:
         8a:61:bc:5b:16:68:7c:5a:18:b9:11:c5:e4:3b:cb:62:fe:85:
         97:07:4d:ad:31:b9:a0:02:a7:8e:81:8b:f3:c9:c0:34:38:61:
         9e:c9:dd:0f:ee:9d:ed:4f:db:2f:4b:94:0a:a5:85:b4:22:f2:
         a1:0c:21:38:1d:35:d8:07:d6:10:13:3e:e0:96:be:71:3f:67:
         4a:e4:16:ce:ff:15:da:9d:84:31:83:16:ed:a3:8e:ca:7c:42:
         fb:ac:2f:4f:97:04:88:7f:b4:da:78:0e:1a:76:16:e5:a1:dc:
         89:bc:4c:ff:59:62:03:fb:c6:d3:fa:ca:0d:57:07:94:85:88:
         01:b4:5a:c4:83:d1:6e:05:c4:66:a6:18:a9:02:f0:25:e3:6c:
         45:49:78:d6:29:a6:bb:3d:76:dd:ac:a0:82:49:0d:64:10:2c:
         1c:74:d8:40:83:03:d0:c7:65:c9:4f:45:22:3e:38:98:70:82:
         91:92:3c:3f:b5:66:27:55:8a:6e:6e:12:c7:37:bd:3b:3d:75:
         5c:fa:e3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:46:03 2025 by rpki-client