Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft
File:                     GtXRdMu0aq-GVVuA4XczMbhwtWg.mft (raw, json)
Hash identifier:          89cp7JPuXDAB1MVef8iYmqxM2g15BBJ9VxnzS3AXXCY=
Subject key identifier:   B3:EF:99:E6:1C:D5:55:C4:B8:CA:E4:2D:F3:38:11:06:78:B2:10:C8
Authority key identifier: 1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68
Certificate issuer:       /CN=1ad5d174cbb46aaf86555b80e1773331b870b568
Certificate serial:       0196827E133EDAE219F51BBEFF1D48FD3856
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft
Manifest number:          03D0
Signing time:             Tue 29 Apr 2025 17:00:22 +0000
Manifest this update:     Tue 29 Apr 2025 17:00:22 +0000
Manifest next update:     Wed 30 Apr 2025 17:00:22 +0000
Files and hashes:         1: 9dcg4kop7SgWnE6_RqxuTw6E4S0.roa (hash: 0Gyw3aRec61kP8ssDusbhrk3Tfc+FxYebdPIc+4lPH0=)
                          2: BCx9uHR447EqnUAT6LDXDmc-U64.roa (hash: uKePdL/bKCVHy8Q2jDMnzQQFWnYFjJHWmlJeT5g86S8=)
                          3: GtXRdMu0aq-GVVuA4XczMbhwtWg.crl (hash: w2mEflFY1htaGtjWN+VO/2Uq4rfABGWPJpN/91zBv6o=)
                          4: XUhnIv1VyzEH-O2IlJPEOJmVv7s.roa (hash: ia3ApPA9xBWk3etwJmYP71gyRoYwwrPnhqVB0ZSnJZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:7e:13:3e:da:e2:19:f5:1b:be:ff:1d:48:fd:38:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ad5d174cbb46aaf86555b80e1773331b870b568
        Validity
            Not Before: Apr 29 17:00:22 2025 GMT
            Not After : Apr 30 17:00:22 2025 GMT
        Subject: CN=b3ef99e61cd555c4b8cae42df338110678b210c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0c:85:b8:98:10:fd:96:e2:87:73:23:56:be:
                    ad:f1:eb:d8:7d:4a:51:25:94:a9:90:74:e9:8a:8a:
                    7b:62:a7:aa:c7:be:0f:6b:62:da:58:fd:49:d4:ad:
                    14:38:35:20:f6:dc:17:93:ba:e3:97:94:ad:82:36:
                    b6:b7:c5:19:d2:78:50:8b:89:b9:c0:10:d9:a8:77:
                    a8:b2:1b:a8:1c:9e:00:51:3b:94:4b:77:59:3a:47:
                    01:ac:20:ce:df:96:91:db:69:52:f7:a2:3a:48:39:
                    5f:25:96:8b:75:3e:33:a5:7b:9c:ac:08:11:74:e4:
                    fb:5a:64:ba:ce:df:d8:92:99:d7:64:46:27:3d:7d:
                    e8:be:dd:92:d7:ed:8b:9c:fb:49:68:a8:40:84:d2:
                    41:75:42:69:b4:ed:74:1d:01:d1:68:5c:a9:d3:e5:
                    5f:56:4f:0a:a1:69:58:c9:01:56:24:3e:ce:f6:df:
                    35:ec:9b:da:0d:99:c1:c4:7f:c6:d7:c2:06:0e:a0:
                    a9:a3:1f:6a:4f:78:23:c2:67:3b:ce:29:57:16:ad:
                    0c:fd:f4:09:97:c8:dc:3d:b8:d3:b6:2d:c4:94:72:
                    4e:c1:60:ec:ae:fb:1e:a9:95:d4:fb:84:e1:42:b9:
                    4d:1a:7d:28:b5:81:cc:b4:6a:c7:09:27:04:87:37:
                    c8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EF:99:E6:1C:D5:55:C4:B8:CA:E4:2D:F3:38:11:06:78:B2:10:C8
            X509v3 Authority Key Identifier:
                keyid:1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:7f:ac:6e:ef:48:f6:53:8c:30:ce:9a:f0:e2:f5:bd:68:30:
         0d:43:1b:ca:f6:9a:f9:5b:71:6e:8d:5e:69:91:72:7e:0b:5c:
         1a:a6:ad:1f:f1:74:92:38:30:25:da:f5:c6:ab:4b:59:b0:f6:
         10:09:e6:4f:d1:0e:c9:7a:40:64:ff:14:29:b1:46:a2:8d:2c:
         88:3c:35:27:b9:e7:5b:b2:4b:a5:a3:96:c2:58:83:25:a1:41:
         10:f1:2a:01:7c:90:88:3a:80:da:13:6c:e4:e4:fc:f6:eb:d5:
         63:2b:f1:41:c8:43:1c:6c:f9:91:cc:a8:cf:89:6a:01:4e:ed:
         32:8d:a4:1d:ee:19:45:ef:b3:9a:cf:0a:d6:d2:25:db:55:3c:
         e9:cd:67:b4:bc:a6:e1:68:9d:8b:96:51:93:f9:df:36:d1:91:
         89:14:c9:b3:27:e2:79:46:01:ea:2e:ff:e8:44:5d:e9:fc:92:
         37:86:b5:0b:9c:e4:48:8a:b9:49:ad:f2:46:3a:04:82:88:24:
         c8:9f:b4:0e:f7:cf:75:65:13:8d:c8:de:e9:46:c5:75:82:6a:
         4c:54:48:90:7b:16:dd:f2:5e:64:e4:3e:4e:36:0b:44:1b:6c:
         57:f9:fe:0c:fd:38:47:5e:61:b5:2f:fd:e4:de:b2:10:3d:77:
         11:34:40:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:56:53 2025 by rpki-client