Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
File:                     giSLXgiFiWS6K1RzFSAV_VmR_fg.mft (raw, json)
Hash identifier:          HI305Ja08Yl0BpSDSFTmGrASdNAanWVyrrO7H6GNFbE=
Subject key identifier:   9C:14:89:9E:B6:7A:40:9C:85:D9:B2:65:CF:62:E4:C1:B1:10:6D:40
Authority key identifier: 82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8
Certificate issuer:       /CN=82248b5e08858964ba2b5473152015fd5991fdf8
Certificate serial:       01974BC48ADF83BF595135D8EFC642B396AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
Manifest number:          150E
Signing time:             Sat 07 Jun 2025 19:01:01 +0000
Manifest this update:     Sat 07 Jun 2025 19:01:01 +0000
Manifest next update:     Sun 08 Jun 2025 19:01:01 +0000
Files and hashes:         1: GpgJajGCbSNl3e4aO7PdAchg1ng.roa (hash: JjeUV08MlhBjZNwlusZZDt6ugsqaNAcVm8lYJFEKoLw=)
                          2: giSLXgiFiWS6K1RzFSAV_VmR_fg.crl (hash: opLAkByBD4poL2AnUboeDibjN25SZTYysNSJbGBcaLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:8a:df:83:bf:59:51:35:d8:ef:c6:42:b3:96:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82248b5e08858964ba2b5473152015fd5991fdf8
        Validity
            Not Before: Jun  7 19:01:01 2025 GMT
            Not After : Jun  8 19:01:01 2025 GMT
        Subject: CN=9c14899eb67a409c85d9b265cf62e4c1b1106d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:42:c6:f3:c9:6e:a0:20:40:15:ef:bb:34:25:
                    94:8c:be:86:a4:1e:e5:d6:5d:29:03:b8:8b:94:52:
                    83:f9:03:56:d9:bf:5a:29:e5:2c:f2:fd:ee:39:b5:
                    92:f7:3b:f9:bb:c8:3a:85:23:c3:be:66:df:ba:d9:
                    62:ff:3a:3f:d4:28:16:64:a0:60:a4:06:ca:dc:9f:
                    f4:59:1c:8b:1e:81:c9:c7:42:f3:31:bb:98:08:6f:
                    77:ed:9f:29:87:c8:03:fd:e8:30:70:67:00:e4:35:
                    ba:ce:90:50:c0:15:03:ae:0e:fb:92:93:8b:a6:7e:
                    a3:06:4f:c9:07:03:e0:bd:9f:0e:9d:af:40:81:64:
                    45:3a:b6:4f:d9:05:dc:2a:e9:d8:51:11:eb:7d:fc:
                    aa:82:1e:af:76:a8:1e:83:ff:09:27:11:81:b1:32:
                    d2:33:fc:a7:c4:12:fa:a4:d1:fd:ce:3e:bc:8b:52:
                    56:d7:55:55:a5:f6:50:30:95:5a:08:51:fc:f3:73:
                    37:4a:9d:cb:a9:95:f2:c0:69:39:75:f5:d2:b0:d7:
                    d8:f0:63:f8:6d:0f:f9:28:21:a6:50:43:e1:32:48:
                    7e:63:8b:85:b4:d2:78:67:8c:62:53:55:95:ee:b0:
                    b3:13:6c:93:48:76:a9:a0:9e:68:af:f3:b9:40:1d:
                    a6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:14:89:9E:B6:7A:40:9C:85:D9:B2:65:CF:62:E4:C1:B1:10:6D:40
            X509v3 Authority Key Identifier:
                keyid:82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:1e:6f:cf:6f:24:96:d4:a7:18:5e:a7:20:b6:b1:b8:cd:fd:
         32:dd:df:a8:7d:2f:c9:d9:f6:09:e6:c3:e1:63:14:fe:5c:d6:
         2f:b3:84:d5:49:ca:b5:10:38:f5:e8:02:79:6f:57:40:0a:0e:
         77:58:8e:56:a9:cf:b4:5c:dc:58:31:b0:48:bb:79:52:b0:0b:
         29:51:1c:9d:a9:0d:5b:f6:18:e0:3e:66:e5:92:30:78:e6:6e:
         07:52:7c:5e:6c:fb:d0:9a:f0:32:77:6f:eb:fe:1a:f5:76:31:
         ad:61:da:6a:7a:b6:99:e1:27:50:97:ea:50:fa:a2:48:53:8d:
         3c:47:95:3e:3e:56:68:78:6a:16:fa:e9:7d:20:ff:31:38:9c:
         b1:ca:f3:8a:d1:d2:2c:0e:b8:8d:d5:bc:63:a8:8b:fa:4c:49:
         1c:e3:5a:b0:07:93:48:c6:a8:c5:25:d4:49:49:4b:96:ed:7d:
         68:ff:e3:48:91:a6:57:37:75:da:4e:b5:19:f9:e8:a5:8b:ef:
         9e:a5:fc:c5:58:d1:99:cd:e7:3d:e4:23:3b:d5:9c:09:81:16:
         65:04:3e:e1:42:12:04:7a:72:18:37:f3:de:f8:61:50:58:b1:
         ee:7a:21:68:5d:dc:61:f9:d8:73:dc:24:b4:04:5f:4a:e6:66:
         49:83:d1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:20:37 2025 by rpki-client