Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
File:                     gseGJ3lOh_-XGNsbDffu4u2zNZU.mft (raw, json)
Hash identifier:          sjTnU5Ek0cYvBXO3qTbxktKtMyG3127I6MLR7kjcxQA=
Subject key identifier:   37:BE:0E:AE:45:A5:D6:3C:C3:A1:BF:8C:01:2C:71:C0:97:B1:0E:1A
Authority key identifier: 82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
Certificate issuer:       /CN=82c78627794e87ff9718db1b0df7eee2edb33595
Certificate serial:       01976D066314409AA87BDD1B3568A6E70C51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
Manifest number:          11B3
Signing time:             Sat 14 Jun 2025 06:00:24 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:24 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:24 +0000
Files and hashes:         1: bYTh9rqmyoD0Z9Or16ek84SzWn4.roa (hash: 4klJmHJXl6kfKkt89+CuaKwDfZrFu99Y5sLGCeYnZ1E=)
                          2: gseGJ3lOh_-XGNsbDffu4u2zNZU.crl (hash: q41E/LGuTKiVWZy+qN3Qa7y460BC2K85SAH1ZWt6lnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:63:14:40:9a:a8:7b:dd:1b:35:68:a6:e7:0c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82c78627794e87ff9718db1b0df7eee2edb33595
        Validity
            Not Before: Jun 14 06:00:24 2025 GMT
            Not After : Jun 15 06:00:24 2025 GMT
        Subject: CN=37be0eae45a5d63cc3a1bf8c012c71c097b10e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:45:b7:90:32:aa:86:90:3e:fe:58:71:ba:26:
                    0b:f0:a0:dc:46:a3:c9:03:94:f5:a4:b7:18:65:cc:
                    e2:e9:b0:24:b7:d6:23:95:e0:09:c1:93:6c:59:b0:
                    55:1e:ab:99:08:78:7c:33:c8:b7:42:d6:36:53:8c:
                    b2:b7:65:c9:eb:71:38:02:01:cd:7b:9e:ca:d9:73:
                    2d:9c:22:52:2a:83:15:6f:8d:36:9b:61:cf:c6:f9:
                    99:05:6d:dc:57:fb:a9:ef:65:8f:0a:21:38:d1:f0:
                    0d:b3:9e:61:02:4b:f8:bd:82:fa:1b:e7:83:cc:4b:
                    ce:42:6d:ee:d5:59:91:c8:de:73:9b:13:db:16:eb:
                    24:24:6c:1e:22:f8:6d:aa:3a:22:1c:84:05:87:4d:
                    ff:6e:3b:8f:6d:1e:1c:dd:5c:5c:4c:07:ed:90:f0:
                    d4:d8:53:ed:32:44:b9:31:e3:4f:a9:4c:4b:ef:5f:
                    4d:b2:a6:aa:e8:75:cc:2c:26:4a:f0:fb:66:25:a1:
                    31:9a:12:ce:12:b6:a7:2c:ff:39:71:8b:1d:a0:f5:
                    79:55:fd:90:8b:77:08:a2:b4:60:12:b1:b4:b9:2c:
                    91:ce:5a:23:15:97:65:de:f4:17:74:f5:0d:84:14:
                    34:43:10:d9:b7:70:ab:a2:29:76:b1:a9:51:f6:fa:
                    71:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BE:0E:AE:45:A5:D6:3C:C3:A1:BF:8C:01:2C:71:C0:97:B1:0E:1A
            X509v3 Authority Key Identifier:
                keyid:82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ee:39:72:3f:65:7d:f0:14:26:a9:64:8a:e4:13:e0:bd:ad:
         75:d7:87:af:c2:a4:a2:ef:15:c8:8d:71:d2:d1:42:ce:40:38:
         1d:c1:02:c5:04:86:56:b9:63:2e:85:73:66:ea:54:fe:e3:4c:
         f0:6c:97:b3:7c:1e:4e:16:9d:e2:05:2f:20:f5:40:61:ac:19:
         cd:6e:81:3f:6f:9a:65:2b:7b:8b:ef:21:d4:4c:62:5a:63:e6:
         65:cf:47:16:ee:16:e7:20:29:10:b4:c7:92:7a:c0:d3:b5:50:
         43:0e:5f:af:6b:ed:f6:37:cf:e0:74:62:70:85:78:ab:35:35:
         fc:33:58:84:64:47:27:b0:2f:bf:4a:6b:1f:54:1a:34:48:89:
         09:10:4d:d3:de:9e:f4:91:fe:00:f1:51:23:c9:a2:37:16:11:
         82:b7:00:ef:69:50:22:a9:d4:f6:6d:34:a7:c9:61:76:cc:ea:
         3d:81:7f:a5:51:74:62:f3:0a:97:6a:62:08:08:58:0e:2b:1e:
         18:c6:ca:bc:44:00:90:a0:29:81:12:02:1e:60:77:fe:b0:7d:
         8e:9f:68:a9:2b:97:69:1f:9a:43:a4:ab:72:0c:52:f1:3f:59:
         11:45:58:e7:db:38:6b:bb:19:39:f0:7e:53:a2:32:96:b3:cd:
         a6:73:3d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:19:35 2025 by rpki-client