Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
File:                     gvolsvyxRoEUtziSirINh2G_iDE.mft (raw, json)
Hash identifier:          evXaIBdFJcFNDPqShARGMetE8ZJ2CkESUj0C7aljgpg=
Subject key identifier:   6B:8B:FE:83:21:DF:85:32:88:42:44:03:56:66:21:64:73:C9:1C:A5
Authority key identifier: 82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31
Certificate issuer:       /CN=82fa25b2fcb1468114b738928ab20d8761bf8831
Certificate serial:       019783C5A3DB462F730ED6284DC9CB3337E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
Manifest number:          11ED
Signing time:             Wed 18 Jun 2025 16:00:57 +0000
Manifest this update:     Wed 18 Jun 2025 16:00:57 +0000
Manifest next update:     Thu 19 Jun 2025 16:00:57 +0000
Files and hashes:         1: gvolsvyxRoEUtziSirINh2G_iDE.crl (hash: Ork+3du38CQWeSbEEyCqLLbZ9mkOg93N3d8AAcCGXmw=)
                          2: vYeUQvTtmRwFxe2HjEVg0-w3YtY.roa (hash: 5J5aN+7Pc9ymOEzVJcf+044A0ctdwVC0r43YEoVys+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:83:c5:a3:db:46:2f:73:0e:d6:28:4d:c9:cb:33:37:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82fa25b2fcb1468114b738928ab20d8761bf8831
        Validity
            Not Before: Jun 18 16:00:57 2025 GMT
            Not After : Jun 19 16:00:57 2025 GMT
        Subject: CN=6b8bfe8321df8532884244035666216473c91ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9c:ba:4e:80:14:b8:9a:24:62:72:80:50:b9:
                    89:84:3e:c5:5e:43:b1:db:25:1f:36:8f:09:72:cd:
                    83:c9:b7:67:1f:0f:0d:e8:0e:ca:4a:87:7e:73:34:
                    97:68:3d:a3:6d:aa:7a:dc:6b:88:27:52:5e:09:ea:
                    65:dc:84:b4:6a:b8:c5:9a:ab:09:c7:0a:b3:30:cd:
                    21:05:77:91:bc:73:af:81:53:67:a2:82:a9:31:5c:
                    56:83:d5:0b:12:b9:a7:e0:5a:4b:e5:93:6b:58:99:
                    2d:5b:00:e1:ed:f5:bf:01:18:7b:32:1a:bb:9f:25:
                    3d:01:9b:f9:8d:c8:98:19:3c:ac:f6:24:8f:e7:1f:
                    68:7b:2a:73:78:d1:ea:75:4c:ff:30:a6:e4:83:57:
                    e8:63:37:dc:4a:17:64:2e:e7:79:98:5f:c5:e0:59:
                    77:d9:56:f9:3d:23:d0:26:0b:4c:6b:31:8f:d6:8a:
                    18:6d:ad:da:2b:55:15:ca:ae:5d:79:04:d5:e6:1b:
                    b9:17:5d:d2:78:77:49:d8:d0:b6:67:5f:38:54:14:
                    bd:f3:68:59:d9:21:25:a5:97:1e:a7:c6:57:31:2e:
                    bf:d9:ad:ce:cf:1a:3f:10:8b:74:6e:2d:03:49:9c:
                    85:0a:86:33:54:fc:ba:7d:4a:8e:9b:45:2b:3f:82:
                    6f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8B:FE:83:21:DF:85:32:88:42:44:03:56:66:21:64:73:C9:1C:A5
            X509v3 Authority Key Identifier:
                keyid:82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:31:b3:cd:ba:40:ec:29:9b:c8:a5:9b:f0:98:53:65:80:af:
         02:41:b6:f1:8d:b8:59:eb:b4:6e:e8:2d:7e:e7:44:bb:75:f2:
         a4:40:fd:42:83:da:68:77:57:46:4b:19:4a:e1:a8:d8:36:14:
         2f:2f:9a:89:33:7a:e2:be:b1:ef:7e:70:f7:48:b9:0c:c6:c6:
         ff:ba:9a:77:75:a4:c6:81:8a:af:79:6a:8a:bd:2a:cd:62:aa:
         8d:ec:c7:ec:92:46:23:f0:ed:04:98:80:4a:64:fc:01:a4:97:
         85:0f:61:f1:31:f8:1d:71:42:eb:aa:27:f6:64:d0:89:72:ff:
         1b:3f:43:f9:3f:0d:ad:cc:23:54:c3:38:0e:dd:85:3e:c4:e4:
         28:b0:82:63:5c:50:1a:34:4a:59:ca:b5:ba:1b:cf:38:e4:64:
         0c:3e:6c:d9:3c:d6:72:92:7c:99:4e:72:bb:13:3c:77:26:7e:
         e6:4b:9e:39:94:c5:55:7b:85:f7:06:09:b3:79:ff:3a:7f:3b:
         1d:1b:8e:75:5f:fa:8c:42:57:1f:6c:25:ca:38:c5:89:4b:c4:
         bc:cc:57:a4:43:f2:36:7e:4c:80:94:01:26:b5:65:ef:4e:55:
         6e:dc:dd:0d:5a:f2:d7:89:53:96:1c:8f:e8:34:42:d0:28:4b:
         1d:94:a5:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeDxaPbRi9zDtYoTcnLMzfjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZmEyNWIyZmNiMTQ2ODExNGI3Mzg5MjhhYjIwZDg3NjFi
Zjg4MzEwHhcNMjUwNjE4MTYwMDU3WhcNMjUwNjE5MTYwMDU3WjAzMTEwLwYDVQQD
Eyg2YjhiZmU4MzIxZGY4NTMyODg0MjQ0MDM1NjY2MjE2NDczYzkxY2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZy6ToAUuJokYnKAULmJhD7FXkOx
2yUfNo8Jcs2DybdnHw8N6A7KSod+czSXaD2jbap63GuIJ1JeCepl3IS0arjFmqsJ
xwqzMM0hBXeRvHOvgVNnooKpMVxWg9ULErmn4FpL5ZNrWJktWwDh7fW/ARh7Mhq7
nyU9AZv5jciYGTys9iSP5x9oeypzeNHqdUz/MKbkg1foYzfcShdkLud5mF/F4Fl3
2Vb5PSPQJgtMazGP1ooYba3aK1UVyq5deQTV5hu5F13SeHdJ2NC2Z184VBS982hZ
2SElpZcep8ZXMS6/2a3Ozxo/EIt0bi0DSZyFCoYzVPy6fUqOm0UrP4JvwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuL/oMh34UyiEJEA1ZmIWRzyRylMB8GA1UdIwQY
MBaAFIL6JbL8sUaBFLc4koqyDYdhv4gxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3ZvbHN2eXhSb0VVdHppU2lySU5oMkdfaURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xMzcxYTYtZjVmMy00M2JmLWFmZjQt
NzY4NWM5NjcwMDE3LzEvZ3ZvbHN2eXhSb0VVdHppU2lySU5oMkdfaURFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8xMzcxYTYtZjVmMy00M2JmLWFmZjQtNzY4NWM5NjcwMDE3
LzEvZ3ZvbHN2eXhSb0VVdHppU2lySU5oMkdfaURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijGzzbpA
7CmbyKWb8JhTZYCvAkG28Y24Weu0bugtfudEu3XypED9QoPaaHdXRksZSuGo2DYU
Ly+aiTN64r6x735w90i5DMbG/7qad3WkxoGKr3lqir0qzWKqjezH7JJGI/DtBJiA
SmT8AaSXhQ9h8TH4HXFC66on9mTQiXL/Gz9D+T8NrcwjVMM4Dt2FPsTkKLCCY1xQ
GjRKWcq1uhvPOORkDD5s2TzWcpJ8mU5yuxM8dyZ+5kueOZTFVXuF9wYJs3n/On87
HRuOdV/6jEJXH2wlyjjFiUvEvMxXpEPyNn5MgJQBJrVl705VbtzdDVry14lTlhyP
6DRC0ChLHZSlGQ==
-----END CERTIFICATE-----
Generated at Wed Jun 18 23:10:27 2025 by rpki-client