Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
File:                     Gloi28jb0tckjer_R-M5D3f7Sws.mft (raw, json)
Hash identifier:          +SuxE+2MigZ0IhfSuJ/TbZx75xUy5RCOA7krS2ECV5M=
Subject key identifier:   D6:48:01:98:7E:52:65:64:1A:D8:A5:FD:6F:F4:13:6D:0A:A4:C2:4C
Authority key identifier: 1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
Certificate issuer:       /CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Certificate serial:       019771884225CAC5BBD0361577719E0562CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
Manifest number:          1595
Signing time:             Sun 15 Jun 2025 03:00:44 +0000
Manifest this update:     Sun 15 Jun 2025 03:00:44 +0000
Manifest next update:     Mon 16 Jun 2025 03:00:44 +0000
Files and hashes:         1: FPpOTBKmvHdioInyAceH2PiTSvg.roa (hash: 7KPVyyz4s0tMlqQlKNiyZSMIJyFa//iS/eNcNHIUsks=)
                          2: Gloi28jb0tckjer_R-M5D3f7Sws.crl (hash: CBTHRYz9NX8Qs8xHriJvnKhDCcNUWPqqKSwAhNkC5A0=)
                          3: YUvzYRFbDZwpo5_LDw6OQYXrOWU.roa (hash: A9tNEkwBv00N9f8wPpHIeu7SSAIiBzAHZmfokT+2re4=)
                          4: fbMdnuR0es_HjgTaYkDoz6AE4eQ.roa (hash: b27haQtyNO61SdNpnuLEVI2t6aVsy/NGgbKBT4i0JIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:88:42:25:ca:c5:bb:d0:36:15:77:71:9e:05:62:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
        Validity
            Not Before: Jun 15 03:00:44 2025 GMT
            Not After : Jun 16 03:00:44 2025 GMT
        Subject: CN=d64801987e5265641ad8a5fd6ff4136d0aa4c24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7d:8b:35:5b:62:42:c9:00:36:f1:ec:da:56:
                    79:d5:54:5f:60:0c:6e:8f:b0:47:ca:17:20:d0:69:
                    49:b2:9f:b9:38:61:cf:1d:23:f3:00:2c:80:17:a1:
                    ba:f8:5f:a3:a6:29:04:ab:e0:36:ae:a6:77:b6:15:
                    01:1f:16:53:c3:eb:b6:e7:58:53:79:77:f7:c9:1c:
                    85:7d:6a:71:d9:fe:40:71:95:a4:04:03:3b:27:61:
                    23:74:0e:a0:6a:fd:8e:21:1c:88:cb:e7:d9:75:0f:
                    54:ff:56:13:cf:f1:fc:2f:d3:3e:59:46:17:24:c2:
                    91:88:f5:05:3e:09:39:cf:e1:0e:29:f0:4c:01:75:
                    22:47:60:12:a6:89:25:f0:17:6e:66:c3:de:4c:6d:
                    ff:e1:95:d9:9e:5f:d1:f8:d2:43:08:4a:c0:e3:48:
                    81:40:3d:39:df:e1:8d:88:b5:64:64:c6:09:be:02:
                    40:8c:b4:6e:bb:24:6c:9b:91:7a:72:dd:d6:d0:e9:
                    e0:67:08:84:1b:82:5c:fe:1a:25:6d:ba:e5:48:bd:
                    7b:9b:1f:f5:7f:07:7a:87:9c:c4:eb:93:c1:25:32:
                    34:5c:85:7b:a5:22:f3:42:54:b0:2a:10:1d:90:0d:
                    ee:00:55:88:d5:b4:cb:89:71:60:fd:51:bd:52:d5:
                    57:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:48:01:98:7E:52:65:64:1A:D8:A5:FD:6F:F4:13:6D:0A:A4:C2:4C
            X509v3 Authority Key Identifier:
                keyid:1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:03:ef:5d:0d:3e:cd:99:f4:34:c6:ca:d5:fc:cb:09:47:65:
         d5:b4:68:47:f0:d6:9f:3d:4a:8e:ad:f7:bc:53:0e:ee:33:99:
         86:43:a5:92:9a:2d:00:a0:23:76:b0:1e:69:f5:e3:ca:f5:a6:
         10:47:ba:25:b1:36:6c:33:63:5e:d5:a5:ce:d3:73:21:36:3b:
         fd:2c:22:1e:8f:cf:fc:5a:08:4b:69:8f:88:d8:c2:e2:05:51:
         c5:63:c4:9d:b5:87:c8:ef:de:37:aa:1d:18:ba:8e:2f:57:c2:
         87:28:02:06:fb:d6:aa:24:89:bf:15:29:30:6b:8a:26:b8:b0:
         53:75:d5:6e:5d:91:34:f6:d4:4a:07:d6:75:f8:f4:48:0e:22:
         d6:8e:83:ee:86:19:58:60:52:1d:11:b2:ef:4d:c5:1b:76:9f:
         8c:bb:f9:93:60:26:50:cc:d2:98:7b:0f:b6:23:22:b4:db:ac:
         11:f7:76:2d:74:10:90:66:2a:83:df:e4:a9:42:37:a6:1c:56:
         39:27:a0:73:c6:ab:d9:28:2c:a8:d7:9b:4b:b4:23:5b:c2:67:
         be:4b:60:98:7c:4f:31:cb:d7:f2:38:56:6a:e6:31:c9:99:e0:
         98:36:e4:44:f0:cf:2b:9b:ed:c6:3e:a5:28:1e:1a:a8:2a:9d:
         a9:39:9e:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxiEIlysW70DYVd3GeBWLNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNWEyMmRiYzhkYmQyZDcyNDhkZWFmZjQ3ZTMzOTBmNzdm
YjRiMGIwHhcNMjUwNjE1MDMwMDQ0WhcNMjUwNjE2MDMwMDQ0WjAzMTEwLwYDVQQD
EyhkNjQ4MDE5ODdlNTI2NTY0MWFkOGE1ZmQ2ZmY0MTM2ZDBhYTRjMjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2X2LNVtiQskANvHs2lZ51VRfYAxu
j7BHyhcg0GlJsp+5OGHPHSPzACyAF6G6+F+jpikEq+A2rqZ3thUBHxZTw+u251hT
eXf3yRyFfWpx2f5AcZWkBAM7J2EjdA6gav2OIRyIy+fZdQ9U/1YTz/H8L9M+WUYX
JMKRiPUFPgk5z+EOKfBMAXUiR2ASpokl8BduZsPeTG3/4ZXZnl/R+NJDCErA40iB
QD053+GNiLVkZMYJvgJAjLRuuyRsm5F6ct3W0OngZwiEG4Jc/holbbrlSL17mx/1
fwd6h5zE65PBJTI0XIV7pSLzQlSwKhAdkA3uAFWI1bTLiXFg/VG9UtVXWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZIAZh+UmVkGtil/W/0E20KpMJMMB8GA1UdIwQY
MBaAFBpaItvI29LXJI3q/0fjOQ93+0sLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2xvaTI4amIwdGNramVyX1ItTTVEM2Y3U3dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xOTIyYzktNDk0OS00MDU1LWE2NmUt
MTVkMzI3MDliZDBmLzEvR2xvaTI4amIwdGNramVyX1ItTTVEM2Y3U3dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8xOTIyYzktNDk0OS00MDU1LWE2NmUtMTVkMzI3MDliZDBm
LzEvR2xvaTI4amIwdGNramVyX1ItTTVEM2Y3U3dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgPvXQ0+
zZn0NMbK1fzLCUdl1bRoR/DWnz1Kjq33vFMO7jOZhkOlkpotAKAjdrAeafXjyvWm
EEe6JbE2bDNjXtWlztNzITY7/SwiHo/P/FoIS2mPiNjC4gVRxWPEnbWHyO/eN6od
GLqOL1fChygCBvvWqiSJvxUpMGuKJriwU3XVbl2RNPbUSgfWdfj0SA4i1o6D7oYZ
WGBSHRGy703FG3afjLv5k2AmUMzSmHsPtiMitNusEfd2LXQQkGYqg9/kqUI3phxW
OSegc8ar2SgsqNebS7QjW8JnvktgmHxPMcvX8jhWauYxyZngmDbkRPDPK5vtxj6l
KB4aqCqdqTmeog==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:46:35 2025 by rpki-client