Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
File:                     gseGJ3lOh_-XGNsbDffu4u2zNZU.mft (raw, json)
Hash identifier:          pn0oHSsyPZCp+rS38pPvc8tHMRCluEx5+FqZcZaIL5U=
Subject key identifier:   41:5C:56:98:4A:D3:0A:11:66:E5:63:54:F0:3D:E7:B1:DE:B8:7F:1A
Authority key identifier: 82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
Certificate issuer:       /CN=82c78627794e87ff9718db1b0df7eee2edb33595
Certificate serial:       019757C8563C9E453300CC5BAB80398A4092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
Manifest number:          11A8
Signing time:             Tue 10 Jun 2025 03:00:36 +0000
Manifest this update:     Tue 10 Jun 2025 03:00:36 +0000
Manifest next update:     Wed 11 Jun 2025 03:00:36 +0000
Files and hashes:         1: bYTh9rqmyoD0Z9Or16ek84SzWn4.roa (hash: 4klJmHJXl6kfKkt89+CuaKwDfZrFu99Y5sLGCeYnZ1E=)
                          2: gseGJ3lOh_-XGNsbDffu4u2zNZU.crl (hash: uq14CH18ItODdP+WWu53zUkWbQkAKbkGS5EdF0Q5bvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 03:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:57:c8:56:3c:9e:45:33:00:cc:5b:ab:80:39:8a:40:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82c78627794e87ff9718db1b0df7eee2edb33595
        Validity
            Not Before: Jun 10 03:00:36 2025 GMT
            Not After : Jun 11 03:00:36 2025 GMT
        Subject: CN=415c56984ad30a1166e56354f03de7b1deb87f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:f8:07:4d:ed:21:8c:6d:4e:b5:6a:45:a9:
                    dd:b5:65:e5:7f:15:b8:60:95:31:7f:25:d8:bd:5f:
                    b8:c1:b9:59:0f:ac:46:b9:d6:5a:2b:39:19:34:06:
                    bd:fa:2e:f3:2b:fe:3f:e9:1c:bb:5d:e4:75:0a:c2:
                    01:e3:7c:41:e5:f2:33:d7:fa:dd:b6:bc:c7:70:54:
                    d3:fe:4e:ea:84:ad:0c:9d:aa:33:91:55:5a:cc:3d:
                    51:88:08:04:6f:98:d6:f0:ea:7e:2d:58:48:ea:2a:
                    84:d6:71:fa:8e:5a:92:f4:91:ef:f6:cb:85:bf:fe:
                    70:07:71:62:97:c8:01:45:09:dc:44:48:70:7b:ae:
                    7e:55:26:22:42:10:0a:3a:24:f1:98:c7:1f:e1:10:
                    e9:2a:6e:19:d0:22:24:70:d4:4a:c6:da:89:a0:be:
                    51:2e:8c:52:58:2e:9e:d7:67:16:15:b8:72:b7:b0:
                    e4:df:c7:51:7a:98:40:b1:84:37:26:0f:73:98:7d:
                    23:91:03:88:ac:22:c9:4d:cf:8c:8d:6e:e1:5b:da:
                    87:e5:67:2f:79:ec:bd:59:07:d4:d0:27:33:9f:b9:
                    a8:8a:43:30:57:97:a4:97:81:df:cd:a9:68:68:05:
                    9e:89:ce:28:b5:11:5d:7f:13:ba:e5:e2:c5:18:54:
                    82:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5C:56:98:4A:D3:0A:11:66:E5:63:54:F0:3D:E7:B1:DE:B8:7F:1A
            X509v3 Authority Key Identifier:
                keyid:82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:a6:87:b1:ee:06:ce:51:c8:c1:5b:0c:1a:6f:fa:a4:f0:5d:
         43:f5:41:59:98:ba:46:9a:9d:8f:3a:b3:c6:27:2e:d9:3e:0f:
         c7:28:ff:2d:f3:cf:8f:d3:01:88:84:fc:a1:fb:af:02:ea:89:
         78:9f:d0:31:30:b2:56:5b:38:99:3e:00:58:ab:a0:84:8a:8a:
         83:bf:01:11:43:e7:0f:ee:02:11:a1:a1:85:e5:c8:3f:24:7e:
         f9:6a:f2:1f:8c:ea:bd:05:e2:59:bf:2b:87:9c:f6:fe:02:8e:
         b1:13:2a:d5:f4:58:61:34:13:3b:68:92:f5:7a:38:e7:91:69:
         92:28:c0:97:58:98:3a:13:ef:b2:4c:85:1c:4a:29:30:bb:fd:
         ab:67:b9:e3:bd:42:aa:16:ef:d9:a8:12:f0:26:86:f5:ba:4f:
         b5:15:84:5e:5d:05:17:2b:70:4a:42:6a:a7:ce:fd:43:1f:f8:
         6b:31:34:3b:40:7f:7d:9c:14:88:b4:23:26:a3:ed:91:f8:83:
         3b:97:e5:f6:79:0f:e8:dc:ad:0b:51:4a:e1:b3:e7:7f:5f:6a:
         6e:41:67:13:3a:c1:49:ce:a2:4b:ae:f4:d9:f8:13:27:cb:5b:
         da:1c:9b:73:bd:84:ef:2a:3c:ce:39:76:f9:76:32:07:f0:41:
         4a:a1:ca:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdXyFY8nkUzAMxbq4A5ikCSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYzc4NjI3Nzk0ZTg3ZmY5NzE4ZGIxYjBkZjdlZWUyZWRi
MzM1OTUwHhcNMjUwNjEwMDMwMDM2WhcNMjUwNjExMDMwMDM2WjAzMTEwLwYDVQQD
Eyg0MTVjNTY5ODRhZDMwYTExNjZlNTYzNTRmMDNkZTdiMWRlYjg3ZjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj/4B03tIYxtTrVqRandtWXlfxW4
YJUxfyXYvV+4wblZD6xGudZaKzkZNAa9+i7zK/4/6Ry7XeR1CsIB43xB5fIz1/rd
trzHcFTT/k7qhK0MnaozkVVazD1RiAgEb5jW8Op+LVhI6iqE1nH6jlqS9JHv9suF
v/5wB3Fil8gBRQncREhwe65+VSYiQhAKOiTxmMcf4RDpKm4Z0CIkcNRKxtqJoL5R
LoxSWC6e12cWFbhyt7Dk38dRephAsYQ3Jg9zmH0jkQOIrCLJTc+MjW7hW9qH5Wcv
eey9WQfU0Cczn7moikMwV5ekl4HfzaloaAWeic4otRFdfxO65eLFGFSC3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFcVphK0woRZuVjVPA957HeuH8aMB8GA1UdIwQY
MBaAFILHhid5Tof/lxjbGw337uLtszWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lMTg0OWYtMjRhNi00ZjkyLTgwNjMt
NjI2ZmMwNDAzYWM5LzEvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9lMTg0OWYtMjRhNi00ZjkyLTgwNjMtNjI2ZmMwNDAzYWM5
LzEvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqaHse4G
zlHIwVsMGm/6pPBdQ/VBWZi6Rpqdjzqzxicu2T4Pxyj/LfPPj9MBiIT8ofuvAuqJ
eJ/QMTCyVls4mT4AWKughIqKg78BEUPnD+4CEaGhheXIPyR++WryH4zqvQXiWb8r
h5z2/gKOsRMq1fRYYTQTO2iS9Xo455FpkijAl1iYOhPvskyFHEopMLv9q2e5471C
qhbv2agS8CaG9bpPtRWEXl0FFytwSkJqp879Qx/4azE0O0B/fZwUiLQjJqPtkfiD
O5fl9nkP6NytC1FK4bPnf19qbkFnEzrBSc6iS6702fgTJ8tb2hybc72E7yo8zjl2
+XYyB/BBSqHKUA==
-----END CERTIFICATE-----
Generated at Tue Jun 10 13:08:18 2025 by rpki-client