Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
File:                     gseGJ3lOh_-XGNsbDffu4u2zNZU.mft (raw, json)
Hash identifier:          +GDigr7upDt2VlAkHy9WJsRfIbg9G68hVkUxc3h4zrw=
Subject key identifier:   F2:E2:19:41:EA:C0:D2:7E:84:79:F0:1C:0B:B5:6F:13:30:44:8D:BE
Authority key identifier: 82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
Certificate issuer:       /CN=82c78627794e87ff9718db1b0df7eee2edb33595
Certificate serial:       019761707A083BA8D065765C81754D5410E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
Manifest number:          11AD
Signing time:             Thu 12 Jun 2025 00:00:50 +0000
Manifest this update:     Thu 12 Jun 2025 00:00:50 +0000
Manifest next update:     Fri 13 Jun 2025 00:00:50 +0000
Files and hashes:         1: bYTh9rqmyoD0Z9Or16ek84SzWn4.roa (hash: 4klJmHJXl6kfKkt89+CuaKwDfZrFu99Y5sLGCeYnZ1E=)
                          2: gseGJ3lOh_-XGNsbDffu4u2zNZU.crl (hash: ggqvtoosZdqf++sXm45GA25j7Z4FUnaC7LDIgUxx1io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:70:7a:08:3b:a8:d0:65:76:5c:81:75:4d:54:10:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82c78627794e87ff9718db1b0df7eee2edb33595
        Validity
            Not Before: Jun 12 00:00:50 2025 GMT
            Not After : Jun 13 00:00:50 2025 GMT
        Subject: CN=f2e21941eac0d27e8479f01c0bb56f1330448dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b7:74:c5:93:21:49:78:e9:46:36:3a:86:ba:
                    a6:49:1f:2b:bf:b6:b6:df:76:44:af:26:b5:75:cf:
                    78:45:2c:18:75:0b:e2:55:07:79:ef:49:c9:fe:c2:
                    a4:83:bf:72:1a:08:60:cc:ee:66:69:06:36:44:9b:
                    a1:ac:44:41:8d:25:72:40:e6:15:3c:77:6d:5d:33:
                    b0:74:2c:1e:e9:66:fd:a4:60:78:09:6e:74:30:64:
                    25:6e:d8:9a:45:4c:4e:61:e6:2b:5d:c3:1e:5d:db:
                    5d:ea:93:11:ca:d2:ac:7d:40:9e:af:a1:bd:6d:0c:
                    81:23:5c:e9:ec:e5:c2:db:05:4b:e8:3d:a4:69:6a:
                    4b:ef:0d:19:86:b8:09:de:00:32:87:64:06:b3:2c:
                    cf:7a:dd:5d:ce:f0:74:df:c2:51:b0:12:f8:a0:a1:
                    a7:6f:af:34:b1:a8:1f:67:9e:66:b5:f8:ea:7b:2a:
                    40:11:25:70:a6:3b:5b:18:45:21:c6:5b:42:68:a2:
                    99:18:bf:e6:07:33:79:9d:27:8e:34:b4:bf:1b:4f:
                    3e:22:f3:8c:36:da:67:38:72:d3:d2:56:c2:06:fa:
                    fa:54:61:82:1c:01:9c:db:89:7c:0d:f9:de:8d:87:
                    62:8c:0f:dc:fe:38:48:e9:31:81:50:ba:2b:69:06:
                    c7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E2:19:41:EA:C0:D2:7E:84:79:F0:1C:0B:B5:6F:13:30:44:8D:BE
            X509v3 Authority Key Identifier:
                keyid:82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:df:58:ef:ce:b0:98:b9:46:e8:d4:64:e8:fe:d7:00:2f:40:
         f8:e3:ef:b3:43:23:47:38:fe:f1:b6:80:a3:21:cf:f3:1a:14:
         10:49:e9:a9:58:94:fb:43:4d:e4:73:83:32:4c:51:e3:0a:4d:
         71:8c:f4:b9:e9:86:03:58:8b:16:96:09:78:0d:05:43:e1:b6:
         95:b4:70:0f:a8:0a:7f:7a:cf:9c:7a:70:4d:7c:b3:7f:3c:16:
         c7:e7:2a:21:ab:ad:64:21:12:51:28:0d:6b:a2:c6:db:4e:87:
         8e:9d:91:eb:92:0d:2f:cc:26:72:37:7c:30:07:6f:45:78:aa:
         74:ba:b3:0e:1a:cb:d8:64:6c:5a:61:4b:44:7b:c7:75:4b:5c:
         94:83:77:7c:f7:0e:25:32:a2:8f:7c:9a:2d:6a:12:be:53:30:
         17:77:6b:cf:57:f5:35:c3:5e:d8:9e:09:03:6c:a6:d8:f6:44:
         6e:4f:58:73:24:39:5e:29:9e:48:bc:de:29:0b:38:d4:4d:6d:
         89:bf:97:d4:c5:07:0a:3c:b3:2e:bc:55:e7:cc:41:62:98:ae:
         3f:f0:00:2f:ca:11:5e:5f:1f:08:dc:ce:ea:b7:46:74:06:01:
         63:bb:67:a9:67:2d:5a:79:ab:c4:9a:28:47:37:0d:bb:96:68:
         37:85:2f:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdhcHoIO6jQZXZcgXVNVBDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYzc4NjI3Nzk0ZTg3ZmY5NzE4ZGIxYjBkZjdlZWUyZWRi
MzM1OTUwHhcNMjUwNjEyMDAwMDUwWhcNMjUwNjEzMDAwMDUwWjAzMTEwLwYDVQQD
EyhmMmUyMTk0MWVhYzBkMjdlODQ3OWYwMWMwYmI1NmYxMzMwNDQ4ZGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7d0xZMhSXjpRjY6hrqmSR8rv7a2
33ZErya1dc94RSwYdQviVQd570nJ/sKkg79yGghgzO5maQY2RJuhrERBjSVyQOYV
PHdtXTOwdCwe6Wb9pGB4CW50MGQlbtiaRUxOYeYrXcMeXdtd6pMRytKsfUCer6G9
bQyBI1zp7OXC2wVL6D2kaWpL7w0ZhrgJ3gAyh2QGsyzPet1dzvB038JRsBL4oKGn
b680sagfZ55mtfjqeypAESVwpjtbGEUhxltCaKKZGL/mBzN5nSeONLS/G08+IvOM
NtpnOHLT0lbCBvr6VGGCHAGc24l8DfnejYdijA/c/jhI6TGBULoraQbHLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLiGUHqwNJ+hHnwHAu1bxMwRI2+MB8GA1UdIwQY
MBaAFILHhid5Tof/lxjbGw337uLtszWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lMTg0OWYtMjRhNi00ZjkyLTgwNjMt
NjI2ZmMwNDAzYWM5LzEvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9lMTg0OWYtMjRhNi00ZjkyLTgwNjMtNjI2ZmMwNDAzYWM5
LzEvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuN9Y786w
mLlG6NRk6P7XAC9A+OPvs0MjRzj+8baAoyHP8xoUEEnpqViU+0NN5HODMkxR4wpN
cYz0uemGA1iLFpYJeA0FQ+G2lbRwD6gKf3rPnHpwTXyzfzwWx+cqIautZCESUSgN
a6LG206Hjp2R65INL8wmcjd8MAdvRXiqdLqzDhrL2GRsWmFLRHvHdUtclIN3fPcO
JTKij3yaLWoSvlMwF3drz1f1NcNe2J4JA2ym2PZEbk9YcyQ5XimeSLzeKQs41E1t
ib+X1MUHCjyzLrxV58xBYpiuP/AAL8oRXl8fCNzO6rdGdAYBY7tnqWctWnmrxJoo
RzcNu5ZoN4UvBg==
-----END CERTIFICATE-----
Generated at Thu Jun 12 08:14:29 2025 by rpki-client