Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.mft
File:                     GtoiXLfylBbnU0aV-_shdi_uk8g.mft (raw, json)
Hash identifier:          8D26ok60NOTRjo3ydUDRmqgunmo5Hqp1YlxZHQFcmR4=
Subject key identifier:   87:89:80:B0:AB:59:95:D6:2F:3C:D7:FC:D3:58:3B:2C:5A:88:D9:84
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Certificate issuer:       /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial:       019887D6AFC7AB9A86109CB18FB552714142
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.mft
Manifest number:          1535
Signing time:             Fri 08 Aug 2025 04:00:50 +0000
Manifest this update:     Fri 08 Aug 2025 04:00:50 +0000
Manifest next update:     Sat 09 Aug 2025 04:00:50 +0000
Files and hashes:         1: 5VWCU3ri9xi6GNwhDNQzCQ5V6Jk.roa (hash: i0J+BiO8QbV05CDn9tayXi0l/Nsm/PAhtl+r86ZICuo=)
                          2: GtoiXLfylBbnU0aV-_shdi_uk8g.crl (hash: mfrQYOaWazBEZ/YxUgADucrM6VK5lRg62TFYwJ9SLfw=)
                          3: H2zFxLl2vd3jDHZ3ywYA0G2xNqg.roa (hash: BqYmH/iAX0kcbukEf4yVg0L7f2FSyF2VTeMlZRZQfsw=)
                          4: OVN1KA3X2-427Ts0pRfktqRjpAo.roa (hash: UH/528Nv0M/lj/aSssxhWkEuiRAEztROXljsntpm8LE=)
                          5: YA6ReAbhWQSyR_vf6Zg5g4dooUc.roa (hash: YT0NaWujuK6WDixqbB1Sy+28TuDP8p9GMfj4mjicvuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 04:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:87:d6:af:c7:ab:9a:86:10:9c:b1:8f:b5:52:71:41:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
        Validity
            Not Before: Aug  8 04:00:50 2025 GMT
            Not After : Aug  9 04:00:50 2025 GMT
        Subject: CN=878980b0ab5995d62f3cd7fcd3583b2c5a88d984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5a:15:af:f1:80:75:7b:2a:98:48:98:5a:9e:
                    48:c0:60:a5:c8:c6:bf:de:88:e3:8e:ef:b9:37:29:
                    07:38:db:c4:fb:1f:f3:de:88:fc:fc:41:61:55:20:
                    a1:7f:d7:70:03:3b:27:b8:a7:84:67:0f:5d:52:ce:
                    da:4b:e5:45:ba:e5:46:2b:21:e8:71:5e:c7:5e:22:
                    7f:b6:1c:c1:50:8c:81:2c:b4:6d:bd:a2:82:52:cd:
                    04:c0:d4:f5:c0:b3:f9:b9:a9:16:27:50:d5:01:a1:
                    1b:7e:ca:97:db:9e:d7:6f:cf:51:d5:b5:98:3d:7c:
                    f7:6a:73:f1:0b:ae:00:13:d2:24:47:44:0e:07:5d:
                    66:1d:5e:7a:e2:ae:c1:55:46:c8:e7:e1:e5:46:46:
                    47:95:56:85:6a:97:47:b3:09:f6:b5:15:71:29:03:
                    81:7a:0d:d9:4c:0c:10:06:42:8a:1d:cf:7b:dd:24:
                    e3:d6:db:b0:64:27:29:c3:ae:6d:2c:6a:b2:e6:49:
                    92:0d:55:55:e9:69:ef:ed:54:ec:fb:08:ee:c9:44:
                    7a:67:2e:3f:cf:83:e9:13:a0:e5:56:8e:3f:ac:12:
                    95:6b:75:6d:b4:db:0a:39:81:e6:82:5e:f9:fa:51:
                    59:5e:24:b3:e2:f3:bc:a8:86:ee:53:b0:bb:3e:36:
                    fb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:89:80:B0:AB:59:95:D6:2F:3C:D7:FC:D3:58:3B:2C:5A:88:D9:84
            X509v3 Authority Key Identifier:
                keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:35:96:85:fe:72:bd:66:8c:45:d3:76:24:de:1a:57:7f:64:
         00:f5:e4:be:82:12:09:1f:df:3c:5c:ab:0d:e2:e5:38:59:49:
         b2:9a:7d:d8:13:bd:a3:2b:65:d2:4a:53:6a:b7:bd:36:95:b5:
         73:44:0b:cd:2e:ee:cb:e2:77:ae:6b:63:ad:54:ff:a3:c4:7f:
         63:87:91:68:ef:06:ce:d3:05:de:29:00:56:6a:36:76:57:69:
         4d:29:2d:bd:95:06:6d:e6:f5:67:f8:97:a0:06:e9:1e:b4:97:
         ad:bc:56:cc:d8:67:67:9d:47:5d:12:ff:11:7b:1c:45:4c:a5:
         eb:ef:89:14:ac:49:4d:bf:7d:a5:cd:ce:cf:e8:3a:2d:9b:32:
         ba:7c:bd:82:c9:26:66:ab:73:57:22:93:77:6e:7a:44:e9:38:
         84:a1:df:8f:c3:ba:ad:02:d0:27:32:e1:8e:9f:56:24:44:3a:
         1a:8e:54:c1:66:be:b0:2c:e8:be:91:20:06:d3:d9:00:42:89:
         b8:f2:99:4e:71:bb:5c:fb:78:c2:e8:8d:98:85:03:7f:3e:76:
         6f:29:1f:f3:d0:cf:0f:e8:3d:da:19:5d:73:87:7e:43:2b:18:
         bd:85:2b:7a:6c:ed:00:00:f0:38:a5:3e:0c:2d:ec:35:f7:42:
         3e:b0:6d:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiH1q/Hq5qGEJyxj7VScUFCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZGEyMjVjYjdmMjk0MTZlNzUzNDY5NWZiZmIyMTc2MmZl
ZTkzYzgwHhcNMjUwODA4MDQwMDUwWhcNMjUwODA5MDQwMDUwWjAzMTEwLwYDVQQD
Eyg4Nzg5ODBiMGFiNTk5NWQ2MmYzY2Q3ZmNkMzU4M2IyYzVhODhkOTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqloVr/GAdXsqmEiYWp5IwGClyMa/
3ojjju+5NykHONvE+x/z3oj8/EFhVSChf9dwAzsnuKeEZw9dUs7aS+VFuuVGKyHo
cV7HXiJ/thzBUIyBLLRtvaKCUs0EwNT1wLP5uakWJ1DVAaEbfsqX257Xb89R1bWY
PXz3anPxC64AE9IkR0QOB11mHV564q7BVUbI5+HlRkZHlVaFapdHswn2tRVxKQOB
eg3ZTAwQBkKKHc973STj1tuwZCcpw65tLGqy5kmSDVVV6Wnv7VTs+wjuyUR6Zy4/
z4PpE6DlVo4/rBKVa3VttNsKOYHmgl75+lFZXiSz4vO8qIbuU7C7Pjb75wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeJgLCrWZXWLzzX/NNYOyxaiNmEMB8GA1UdIwQY
MBaAFBraIly38pQW51NGlfv7IXYv7pPIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3RvaVhMZnlsQmJuVTBhVi1fc2hkaV91azhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lOWQ5Y2MtMjY2OC00MmZjLTgzMTUt
NzUyNWQ0ZDQwOGI1LzEvR3RvaVhMZnlsQmJuVTBhVi1fc2hkaV91azhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lOWQ5Y2MtMjY2OC00MmZjLTgzMTUtNzUyNWQ0ZDQwOGI1
LzEvR3RvaVhMZnlsQmJuVTBhVi1fc2hkaV91azhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjWWhf5y
vWaMRdN2JN4aV39kAPXkvoISCR/fPFyrDeLlOFlJspp92BO9oytl0kpTare9NpW1
c0QLzS7uy+J3rmtjrVT/o8R/Y4eRaO8GztMF3ikAVmo2dldpTSktvZUGbeb1Z/iX
oAbpHrSXrbxWzNhnZ51HXRL/EXscRUyl6++JFKxJTb99pc3Oz+g6LZsyuny9gskm
ZqtzVyKTd256ROk4hKHfj8O6rQLQJzLhjp9WJEQ6Go5UwWa+sCzovpEgBtPZAEKJ
uPKZTnG7XPt4wuiNmIUDfz52bykf89DPD+g92hldc4d+QysYvYUremztAADwOKU+
DC3sNfdCPrBtnQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:11:06 2025 by rpki-client