Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
File:                     GJ1rVdamiO5eM4GIO7WvaEMyduM.mft (raw, json)
Hash identifier:          AEMafJyysKdh1EpL6MnTgTFrKpk4xvQW0uDJ0Zkibac=
Subject key identifier:   4C:66:2B:77:88:84:19:A3:92:18:7F:82:06:6F:80:5B:C7:14:9D:C5
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Certificate issuer:       /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial:       0196722F5845CF9081425FB65B7BEA15AAFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
Manifest number:          069B
Signing time:             Sat 26 Apr 2025 13:00:27 +0000
Manifest this update:     Sat 26 Apr 2025 13:00:27 +0000
Manifest next update:     Sun 27 Apr 2025 13:00:27 +0000
Files and hashes:         1: 3NMfZNisec-vqD22vXNPki2ntVE.roa (hash: WaHglmLSlZJ16poYzd5QuYA7KNAkhTFS78CpF4RUX3I=)
                          2: BjnyGiZGjHiQKk_KiK2yHf9VV5E.roa (hash: yPmoHixaBGhSn0ytp1vI4gHgRuEEubgW3Qlg0aIFvLw=)
                          3: DwaqxzmRSIx0-STl7nKTGpQzuOY.roa (hash: MZmP0bhKRokke3K++mx2NwZxuOVWVJCAYgwxbhXA9iI=)
                          4: GJ1rVdamiO5eM4GIO7WvaEMyduM.crl (hash: 4mAAxP9tykKvCwH1hMyNnK5Y6JxnKBkB7P4vZxWANoI=)
                          5: GWO5xgNxsSeAL0cKZ11mlMFA_5Y.roa (hash: eDAPdGo/XSCCbAybQBU4awqfxZqhBeWpUhbvG4BJjMc=)
                          6: OjNkZBsD7_7ya1gvmoZ6C9IcKqA.roa (hash: QIsvbi1JaiVHwDu3LNY+DC4jKpBlQxMAMFNWUB09hyg=)
                          7: RcIKD73d5ujXW1-AkxDhayNtfVI.roa (hash: 9/VGKZNbuvDtuY5QPyILGzD7v+5bfBrjF3UdfJhrKQM=)
                          8: SStPLeYhuVW8ht29Rl4UMKZeE8Y.roa (hash: oIaG74/+nV2sdh79tye5X0ZT2qnqxj3Pq9M6q6XHKAw=)
                          9: TNVmsFulJ0CVHUr1TBafJ-15c1k.roa (hash: jUp+6iw9GTqfD/ZnQ80Ff0zfXIrBI9ftCxjnksKcQOk=)
                          10: UX1FG7BPxLN_6ufljGY3tuBoI2k.roa (hash: 2XU8mmir09zmdANIc3P91NSucr1JlTpLnKmXeZUmmHU=)
                          11: _PsTgNyj2kuvf9bU_VQgCADRPAQ.roa (hash: bWRmBYvsrWHn6JuASHO7QZY/Kv+hHW0Nsaq81jNfzOc=)
                          12: bs7GziLox9peGF2yvnXKRWa8CtM.roa (hash: cBuRaE10dL+zgAwaQff5Gg3RICxaLuAu1aSi+XkcBE4=)
                          13: d_3aWMx2wIEi5zwaAmVuFBWvT4E.roa (hash: 0RwztfGXYXDxIIQZaqPOXqxbSmC1TrJiJ1GXH53HmB0=)
                          14: jyhaUuX-ZThRseELlPrxByqUyJw.roa (hash: e5odEgSnsIIM6hBXp3RT/Su+ZTlWWPrwLkc2XthjZ6o=)
                          15: l_eha-Kfj71W6eObliu6t318qCM.roa (hash: tf40PQaQefcqXM6QqdGlznp88pKP+J6tfusYSudNAag=)
                          16: tXbHOfReX9qN0T3foodzk2ifYsE.roa (hash: j/tvE7XOmml/IXF1FdoH5AY+EIUpxJ1RnI1YQ6w9LH0=)
                          17: yTtcVU9ChNydH2mKs4iN5Ah2HPs.roa (hash: ro/KjPOdv9iitLmrbKrmD5i/eJZ/0hcJVF+hmNRnyAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:2f:58:45:cf:90:81:42:5f:b6:5b:7b:ea:15:aa:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
        Validity
            Not Before: Apr 26 13:00:27 2025 GMT
            Not After : Apr 27 13:00:27 2025 GMT
        Subject: CN=4c662b77888419a392187f82066f805bc7149dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:dc:dc:da:a2:27:a1:ac:61:b5:b1:9d:84:a6:
                    2c:8e:78:db:a9:be:de:ae:12:03:a9:51:35:b4:a4:
                    79:5b:bc:7a:7e:0a:86:9c:d7:62:62:d5:db:0e:2e:
                    86:9d:3e:2a:d6:32:ae:5a:81:2c:bc:80:45:c5:88:
                    da:76:c6:86:4e:66:06:a5:34:ec:a0:eb:ea:ea:1b:
                    c9:8d:1c:c4:27:71:b6:6b:66:7a:b2:19:bf:02:9d:
                    9a:6b:21:5b:ef:87:46:bc:c3:7a:57:d7:ab:dc:e7:
                    81:bc:62:26:c3:72:0f:02:63:53:f2:8e:ee:5d:b6:
                    c4:7b:b1:ec:0e:46:f3:ec:7b:61:5c:9f:3c:eb:32:
                    ae:11:26:e1:5a:0c:8b:dc:d0:83:ad:2e:9d:c9:a1:
                    97:62:df:b3:96:0c:14:5f:47:7e:f5:f6:66:cf:6d:
                    78:c4:1d:96:3a:36:69:4d:af:37:5c:53:a4:d7:98:
                    d5:a7:07:c1:51:39:0a:65:4c:32:9e:30:9f:5d:90:
                    8a:76:3c:17:09:11:a3:85:90:00:08:2d:c4:07:e9:
                    1d:3a:ff:ec:4a:65:06:f6:3d:a1:39:ff:6f:3d:ee:
                    22:88:26:e7:6a:51:6d:94:04:fa:65:78:a7:87:4f:
                    eb:ca:ef:8c:4b:f7:fb:d6:05:9a:7e:3e:0d:e0:c9:
                    f7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:66:2B:77:88:84:19:A3:92:18:7F:82:06:6F:80:5B:C7:14:9D:C5
            X509v3 Authority Key Identifier:
                keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:82:8d:0b:e7:95:de:4f:58:58:5c:67:99:5a:31:af:af:7a:
         f6:49:34:67:c2:7e:e4:4b:0f:72:9f:38:33:f8:7d:a2:ad:06:
         8f:a3:17:df:be:27:a5:1a:4a:bf:b5:5c:2e:3e:a7:26:ab:70:
         56:55:74:db:aa:47:01:7d:1d:62:ef:60:19:84:fb:40:e7:67:
         3a:58:1b:c7:ba:27:85:59:8c:c6:b9:e6:98:bd:41:0f:a0:8e:
         45:a6:cf:8e:93:f4:92:04:09:6f:91:a3:86:76:1b:63:85:0d:
         aa:c4:e9:d8:ed:56:d7:e9:54:48:41:fa:bf:24:97:cb:c1:99:
         c1:44:1c:c7:49:d6:d6:cd:a0:09:ff:93:89:ca:72:15:5d:0d:
         26:2e:88:eb:7b:8d:4a:44:15:ad:73:bd:7f:b8:51:33:80:23:
         af:42:90:53:42:f4:cb:5a:9b:a2:c4:1a:38:48:cb:8e:3e:43:
         df:50:54:2c:29:76:91:de:70:1e:17:c4:f7:53:30:4e:09:be:
         fd:8e:73:90:4d:ee:6a:ec:84:f3:67:23:6a:fb:d3:7d:d2:c4:
         70:d2:f1:69:c9:0f:1b:76:7c:6f:89:04:8d:41:1a:12:2e:71:
         35:61:5d:f7:b8:ec:89:22:e2:25:d5:2a:a2:c6:86:ef:3d:40:
         ca:e5:e9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:57:58 2025 by rpki-client