Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
File:                     GYC7us-p483M9sDpNTYaerJ9oU0.mft (raw, json)
Hash identifier:          wR3nHDUnghC/WRqDAQQDao8K0mwjfUKd1DyaJds8w1Q=
Subject key identifier:   16:C5:2E:F7:36:97:5B:24:4C:5D:E9:09:C9:FD:C6:7B:B5:A2:E1:E0
Authority key identifier: 19:80:BB:BA:CF:A9:E3:CD:CC:F6:C0:E9:35:36:1A:7A:B2:7D:A1:4D
Certificate issuer:       /CN=1980bbbacfa9e3cdccf6c0e935361a7ab27da14d
Certificate serial:       019678D5FDF479EE609274D50997DE296D13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
Manifest number:          150F
Signing time:             Sun 27 Apr 2025 20:00:12 +0000
Manifest this update:     Sun 27 Apr 2025 20:00:12 +0000
Manifest next update:     Mon 28 Apr 2025 20:00:12 +0000
Files and hashes:         1: Da6dAF-NGphy1zgRhDQ05RyQ1mQ.roa (hash: R5La2aCfCSDGzXotldIBaostZmuzpfxF11D1+dvqQ6Q=)
                          2: GYC7us-p483M9sDpNTYaerJ9oU0.crl (hash: KI3Q7UK7f8GTvIuO2sDQLNo7slUwDiadmx8jIDQYtDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:d5:fd:f4:79:ee:60:92:74:d5:09:97:de:29:6d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1980bbbacfa9e3cdccf6c0e935361a7ab27da14d
        Validity
            Not Before: Apr 27 20:00:12 2025 GMT
            Not After : Apr 28 20:00:12 2025 GMT
        Subject: CN=16c52ef736975b244c5de909c9fdc67bb5a2e1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7e:b9:28:3a:33:1f:ec:34:29:6b:ff:49:ff:
                    a7:d9:04:48:a5:82:9f:21:aa:7c:63:8c:62:47:b7:
                    fa:6e:78:3d:3b:e5:44:f8:ee:37:0d:78:c5:1b:dd:
                    96:ab:54:48:a1:de:e6:9c:f3:e0:70:53:f7:50:21:
                    c2:43:d4:01:1b:e4:d1:c9:9d:52:eb:f3:f4:5d:9c:
                    62:19:93:73:f1:5d:f2:51:31:3e:9a:c0:8c:41:07:
                    0a:dc:5b:3e:bc:e8:c7:89:37:92:26:45:6f:c6:4c:
                    61:4a:df:5a:be:88:dd:0a:e6:33:c2:5c:5f:34:8d:
                    24:43:b4:66:6c:c3:c9:cf:bd:91:d2:84:dd:fd:bf:
                    09:af:7b:0c:26:37:a5:ef:52:8b:a3:65:54:21:c4:
                    77:d4:3b:45:dd:10:51:6c:8f:ac:04:0d:e4:05:53:
                    35:c8:2c:50:9e:c6:a5:96:10:62:c2:19:84:b7:d7:
                    63:96:b1:f7:19:67:16:26:af:e3:c1:20:e1:69:20:
                    7b:38:51:6b:39:3b:d3:b4:98:c6:31:d5:ef:b0:de:
                    bd:30:8d:ee:3c:20:e3:c2:9d:ad:a7:13:ff:26:4a:
                    18:05:19:d3:62:4a:d1:49:78:74:44:06:ed:3c:c5:
                    9a:de:c0:b0:37:11:9c:5f:40:d4:07:fe:bf:72:3c:
                    d3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C5:2E:F7:36:97:5B:24:4C:5D:E9:09:C9:FD:C6:7B:B5:A2:E1:E0
            X509v3 Authority Key Identifier:
                keyid:19:80:BB:BA:CF:A9:E3:CD:CC:F6:C0:E9:35:36:1A:7A:B2:7D:A1:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:02:39:f6:01:e6:f7:72:1c:6c:c1:48:ad:0e:c3:42:32:00:
         78:06:d9:ea:20:ad:43:40:70:fd:66:5c:82:87:24:47:5e:43:
         f0:b3:61:f9:f1:ca:bc:b0:78:2b:52:1f:a6:be:b9:f9:db:d3:
         0b:80:6e:7e:1a:d1:7f:21:7f:11:c3:f0:6a:0b:a4:9f:1a:0c:
         a1:50:d2:dd:7c:ae:d6:91:00:1a:d2:ec:d0:9c:85:4c:c8:8c:
         c7:dc:16:b7:7a:80:ce:4b:1e:9c:47:18:6d:86:bf:ae:2f:5b:
         0f:2f:aa:3a:73:97:53:7b:77:e0:09:2c:fc:92:de:0c:22:fc:
         91:a8:cf:93:8a:5e:f6:71:96:44:9a:41:06:44:b2:bf:b1:9f:
         ee:55:2a:ce:d7:17:15:c0:e0:c4:0b:46:b6:15:68:03:53:47:
         bd:7b:30:22:fa:1c:74:67:a9:d7:59:3e:53:28:d7:85:db:15:
         16:a0:37:ef:cd:48:fe:da:54:73:a3:b9:14:f1:e5:2b:14:ea:
         de:02:bc:11:e8:6f:ed:3f:95:f6:eb:af:35:ac:83:39:e9:3b:
         38:49:8a:54:19:33:34:ad:75:d2:87:f3:60:71:54:05:e6:4b:
         35:24:43:08:9e:a4:71:64:c1:36:9c:7d:ef:b6:05:95:f5:a6:
         af:25:22:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ41f30ee5gknTVCZfeKW0TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ODBiYmJhY2ZhOWUzY2RjY2Y2YzBlOTM1MzYxYTdhYjI3
ZGExNGQwHhcNMjUwNDI3MjAwMDEyWhcNMjUwNDI4MjAwMDEyWjAzMTEwLwYDVQQD
EygxNmM1MmVmNzM2OTc1YjI0NGM1ZGU5MDljOWZkYzY3YmI1YTJlMWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX65KDozH+w0KWv/Sf+n2QRIpYKf
Iap8Y4xiR7f6bng9O+VE+O43DXjFG92Wq1RIod7mnPPgcFP3UCHCQ9QBG+TRyZ1S
6/P0XZxiGZNz8V3yUTE+msCMQQcK3Fs+vOjHiTeSJkVvxkxhSt9avojdCuYzwlxf
NI0kQ7RmbMPJz72R0oTd/b8Jr3sMJjel71KLo2VUIcR31DtF3RBRbI+sBA3kBVM1
yCxQnsallhBiwhmEt9djlrH3GWcWJq/jwSDhaSB7OFFrOTvTtJjGMdXvsN69MI3u
PCDjwp2tpxP/JkoYBRnTYkrRSXh0RAbtPMWa3sCwNxGcX0DUB/6/cjzT/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbFLvc2l1skTF3pCcn9xnu1ouHgMB8GA1UdIwQY
MBaAFBmAu7rPqePNzPbA6TU2GnqyfaFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1lDN3VzLXA0ODNNOXNEcE5UWWFlcko5b1UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80NzY1ZTgtNjFiOC00MGM3LTg0N2Yt
ZGNjZTBjOWY0ZDk0LzEvR1lDN3VzLXA0ODNNOXNEcE5UWWFlcko5b1UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny80NzY1ZTgtNjFiOC00MGM3LTg0N2YtZGNjZTBjOWY0ZDk0
LzEvR1lDN3VzLXA0ODNNOXNEcE5UWWFlcko5b1UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawI59gHm
93IcbMFIrQ7DQjIAeAbZ6iCtQ0Bw/WZcgockR15D8LNh+fHKvLB4K1Ifpr65+dvT
C4BufhrRfyF/EcPwaguknxoMoVDS3Xyu1pEAGtLs0JyFTMiMx9wWt3qAzksenEcY
bYa/ri9bDy+qOnOXU3t34Aks/JLeDCL8kajPk4pe9nGWRJpBBkSyv7Gf7lUqztcX
FcDgxAtGthVoA1NHvXswIvocdGep11k+UyjXhdsVFqA3781I/tpUc6O5FPHlKxTq
3gK8Eehv7T+V9uuvNayDOek7OEmKVBkzNK110ofzYHFUBeZLNSRDCJ6kcWTBNpx9
77YFlfWmryUijA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:12:04 2025 by rpki-client