Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
File:                     Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft (raw, json)
Hash identifier:          bGL28qwp+qdISSS9yo5e03EkQ8JSXPFUAZ0N5liFF04=
Subject key identifier:   0A:67:17:2F:21:B9:04:AA:2C:01:19:CE:4D:2D:17:31:11:3E:9E:F4
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Certificate issuer:       /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial:       019773091C69ECCC119DABB731D7BE592000
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
Manifest number:          04FE
Signing time:             Sun 15 Jun 2025 10:01:06 +0000
Manifest this update:     Sun 15 Jun 2025 10:01:06 +0000
Manifest next update:     Mon 16 Jun 2025 10:01:06 +0000
Files and hashes:         1: 4ASzv8VWMQYFKDY_-XGCbimJW5s.roa (hash: 4zLzwFIqB9q7XlogNn2GDLJVXFyYSxghGw7cNNnYtt8=)
                          2: 5HV-tkSn-nvaTCJgq2qZMjXXs3I.roa (hash: V4YAUXA1HwXaJ3mud6IQQG1XhWx4lpV0RuNwmpEC5DM=)
                          3: 64k07xHeVqfVk_gc9ks2CvFktaQ.roa (hash: xmm7dCARGCdAJFIRnR9S4+VZk93CY7wzcj0G0mf/7v0=)
                          4: 7CPmL__8gA4lLs7QOSTCZXmCJZA.roa (hash: GtV1L0m2RsX9Hqoq8q90eEy48paLDjo8TmbfnScifF8=)
                          5: B4_oxATnGbDyQRnpDFsFel2qJro.roa (hash: Eu+Z19cukHF/X5BwY4vJJ3PD89GFZl84ZrwWgUf0Sdc=)
                          6: B627jyelsOrc-4KEk9rr5UX-6bs.roa (hash: emvror6oG2+K4wO+RDr3+Uj+3eP2vVbV6xrjlFdUiWQ=)
                          7: Ba1NqD6_p9vQrWB-kAyp0er5uHU.roa (hash: fRiDqhfW2rBzfJSvdE7QFaE7Ru5cnrq0/b1xWUv4QEU=)
                          8: FJERd9vUT0Kg_8tCO27uUpQBaGo.roa (hash: 12MUnTHhtFQGoQwHqPv1crFdaIeFV1soA/yVgXeNaTs=)
                          9: Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl (hash: 62GTJmyq/G7Cupw83ygj35M10ik9J7hhG8GjSA1qmZg=)
                          10: K6GiiZJ71L0lYgovFnICdAk-1Ks.roa (hash: 6qHwOyZ8UfE4rkOQqwwP70JdW41FclRsGgCcII3xOE8=)
                          11: M1aqRzQAx0u0GH1aXLjObYZ4Q7k.roa (hash: mN6UichsOlqnG+M84GTpzNqXCEcMKcyFp6FqDGDV0E4=)
                          12: MSXSTFKnAwZwbqobS5_FZAQrg-M.roa (hash: D45Ar0ZBYy4iC6UD1t5qGymD/cKcsHTZdI0FaRgD4/k=)
                          13: PDIQfwBM2G7ffsnUH2YvcCfE3MM.roa (hash: sG/brPxpBzyg1NKJzaV3PK0r4VawovV+khB+BUBPlqs=)
                          14: Sw2GbKoJ8rfrZjEQTkFwYz2FnOg.roa (hash: vokvJGT+Pa2Ai2Kj9IpjJzrJytLkCCqfTkYZIe2tcyQ=)
                          15: VT6si4kLyd6zpNaqVEXQZbgj2Gk.roa (hash: wBULHsK9N7KoZlhMck164GyLKkfZrvnuLnG6dNTvUtU=)
                          16: VyPRPElyLMa64hjFDMtKRmA01ZE.roa (hash: +7F5UqAf5wUUZwuFkWwjFywpzFhfs0Yb0eBzU06/pPY=)
                          17: fL9K7tZGGZ0rxKtEuSAiWj4Rpjg.roa (hash: m3RbbbRnXoZDyJVx1OpTbKRsiAgJOpn/2JivbbReHo0=)
                          18: fmODc7MENEc14rO10yX01KjqK28.roa (hash: uJCEf4lpY599iRYVqaOAvP8jY7fLqVDXB1BusGXHNpw=)
                          19: kvTlBi_B8QrdRGJqo_C6nAXRdfc.roa (hash: 6MLCaYZkCCpTI+u5625D24+Iiiya7eil7hcGEmC1dUY=)
                          20: lU9bl4hVEw5hzibuRIs13xmbj9M.roa (hash: ZUdsZ2gex8weJr9deejWFGIwiEepSjgNX4ZZr24MPDg=)
                          21: moCjhy9MjqXiFgMnAR9Fy5SDHgo.roa (hash: LUnUKR1Zotqdb56mM7OX5qPTEb698XgNZZiSiK3MEOQ=)
                          22: rW9xL-Blor3a7KeOFcdz4MZUIZ0.roa (hash: m4NWziBJ7p7f8NFdds1mBjp8BH+ppFVvWoMG+PNQoc4=)
                          23: tWCaBWq3ZgV3-7XX1cWsxbC1zrE.roa (hash: 1GYVtpcVNjgzgm/oYqnREnTQrGZnX2ki31par69caoA=)
                          24: u0kiBRm7lPy40aL5Utg1OzaItA4.roa (hash: dKGxS0Em7PGdI3BmuuAWqogEozKj12mYiRlt25Q1BKw=)
                          25: zkP5uuZLYo9QPyhko4b81Vp75xk.roa (hash: Q7jfrwpN23UNp0QlVl+g69LdPL/9j4DNCRgUr9ow76I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 10:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:09:1c:69:ec:cc:11:9d:ab:b7:31:d7:be:59:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
        Validity
            Not Before: Jun 15 10:01:06 2025 GMT
            Not After : Jun 16 10:01:06 2025 GMT
        Subject: CN=0a67172f21b904aa2c0119ce4d2d1731113e9ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6c:d5:9b:94:27:1b:aa:2e:0d:91:50:65:4d:
                    9a:6f:0c:87:7a:73:e2:2c:19:bf:36:18:bc:dd:ce:
                    c6:c5:92:11:12:cb:b8:5f:bc:0e:7b:ce:0f:8e:ff:
                    97:0b:35:5c:80:d5:e0:65:fe:a7:31:37:a2:97:c5:
                    43:dc:5e:e0:6f:77:12:34:f8:9a:c4:ea:17:d2:4b:
                    67:e8:41:8c:34:37:b1:60:54:df:3b:b0:db:71:43:
                    b0:2e:d5:3d:b4:25:88:26:c5:10:79:ca:cb:b4:18:
                    8b:ad:c2:77:49:f3:67:a8:3c:ca:32:59:df:66:29:
                    54:cc:4c:69:35:e5:c4:98:d1:a5:00:91:42:26:ed:
                    0f:2a:fa:79:e6:c3:5d:ec:ab:7d:96:10:03:e1:e1:
                    1c:4b:67:ca:82:b0:9f:cc:32:6d:4a:34:e8:12:9a:
                    24:e3:00:11:50:7f:60:3e:44:79:c3:4e:27:68:af:
                    1b:76:f3:a2:ae:46:a8:93:e5:08:14:ee:5c:b1:69:
                    b7:3c:9d:52:92:23:93:72:9d:a3:83:c6:57:90:58:
                    ac:5c:58:7a:5a:75:81:9b:a5:a8:60:64:f8:50:17:
                    e3:50:48:79:fa:9e:99:13:60:f1:18:b5:54:34:f7:
                    d3:c0:23:e1:6f:c3:43:53:41:5e:7f:28:09:7a:d6:
                    82:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:67:17:2F:21:B9:04:AA:2C:01:19:CE:4D:2D:17:31:11:3E:9E:F4
            X509v3 Authority Key Identifier:
                keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:7c:41:40:e1:b4:84:0c:e8:88:b7:63:ab:d4:f3:d5:b3:5d:
         9a:c9:97:53:e1:b8:d1:39:40:71:fb:2f:f8:fa:e2:be:bf:4f:
         5d:a0:a4:34:85:97:34:1c:a6:fc:6a:d8:6a:02:d6:32:a3:e6:
         62:b7:29:12:31:04:69:ff:d1:c3:95:c2:0a:dc:d8:87:b0:85:
         3c:40:69:ea:f5:6f:1e:12:af:19:d3:65:f6:9c:fe:9a:e6:9a:
         db:57:07:34:c8:e9:61:0f:6d:58:e5:5c:e6:5d:11:e1:81:84:
         0d:02:94:95:be:78:e6:63:49:23:81:4d:da:eb:f0:10:4d:df:
         5e:f0:de:b4:af:05:2e:4e:0a:55:1a:2d:81:44:34:7d:d0:d0:
         31:2d:43:97:d2:5e:08:90:49:ef:fe:29:bb:c9:74:62:c2:8d:
         31:e1:eb:4f:d6:d0:67:0c:b5:ed:1d:00:54:35:5e:6a:33:a8:
         8f:dd:7b:b8:b1:60:6f:f5:c2:2c:10:22:d7:50:fd:2a:e1:a2:
         d2:b6:06:e6:34:5f:a3:e3:f8:79:b2:3a:6c:43:8d:fd:6e:a5:
         8d:5e:1c:94:51:57:22:a5:d6:35:00:5c:78:c9:d5:61:75:69:
         86:57:e5:bf:ba:a1:3b:85:b5:a5:fc:02:61:6c:05:ed:51:98:
         70:2c:15:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:26:25 2025 by rpki-client