Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
File:                     gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft (raw, json)
Hash identifier:          rxmRPMuOFXZ3a3rBsQJ0cMOxzQN5WBuoCr2mjzW/08E=
Subject key identifier:   41:CD:E5:B7:C9:24:82:B8:68:1E:E2:9B:38:8C:B5:01:1F:47:8F:F1
Authority key identifier: 83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55
Certificate issuer:       /CN=8300996c08890bd5e1e6dd0528217d28f9d09355
Certificate serial:       019770AC8F1F826087D6169DAEA5F5FF8176
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 23:00:46 +0000
Manifest this update:     Sat 14 Jun 2025 23:00:46 +0000
Manifest next update:     Sun 15 Jun 2025 23:00:46 +0000
Files and hashes:         1: gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl (hash: 0yRwDsLrAttxjtpTjzwU8wpC5NDZt4eFoPm97MUFkb4=)
                          2: rqs2jYsXIEmeZSer38OOcJGK7EU.roa (hash: m+TNUwZvlDUtkC5/TwdymkZwjEw131NWG7VhMWfXmRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:ac:8f:1f:82:60:87:d6:16:9d:ae:a5:f5:ff:81:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8300996c08890bd5e1e6dd0528217d28f9d09355
        Validity
            Not Before: Jun 14 23:00:46 2025 GMT
            Not After : Jun 15 23:00:46 2025 GMT
        Subject: CN=41cde5b7c92482b8681ee29b388cb5011f478ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:cf:b4:ee:03:d8:1b:a8:09:e4:18:f1:a3:bd:
                    ef:fa:ec:45:38:2c:09:4c:8c:99:77:e6:13:c4:c0:
                    93:6d:41:45:d6:8b:6a:78:b8:89:74:a9:d6:b0:f8:
                    10:51:94:34:7c:e0:d2:bf:f4:f6:ea:9c:d3:5e:1d:
                    c1:99:1b:79:d2:76:5b:c6:85:f5:7a:65:a6:63:83:
                    5f:39:e1:6d:11:7f:79:ef:d6:11:50:80:df:43:2f:
                    a3:00:7c:aa:4d:79:c7:5d:7a:b3:e9:4a:48:a5:85:
                    c8:76:60:c8:0d:a9:c6:8c:0b:2f:16:d4:42:70:73:
                    f5:46:95:46:6c:f8:c0:6c:59:a6:aa:18:5a:a6:a0:
                    61:86:9e:7a:d0:98:a3:99:00:4d:8b:50:3d:17:12:
                    fc:da:0a:4e:2a:fa:31:a5:70:06:a4:6b:b4:95:f0:
                    71:a6:58:7e:cd:d5:03:76:df:b4:0a:78:e7:38:3d:
                    c1:40:3f:90:53:8d:ef:90:41:74:61:af:7f:c6:c9:
                    25:75:d5:d0:d1:c4:53:7c:ce:43:5d:a9:a8:bc:d0:
                    8f:eb:f8:c8:7e:8c:d7:54:e1:97:c3:37:7a:ab:40:
                    d5:7b:59:e7:8a:1d:28:7b:18:17:ba:e4:28:86:29:
                    33:6a:09:5e:5a:4e:6f:82:41:53:3f:c4:dd:e0:51:
                    ac:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CD:E5:B7:C9:24:82:B8:68:1E:E2:9B:38:8C:B5:01:1F:47:8F:F1
            X509v3 Authority Key Identifier:
                keyid:83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ee:6d:07:d5:5d:72:6f:e3:24:49:4b:6c:07:7e:8e:69:e0:d6:
         55:15:d3:b1:40:39:03:d6:f1:77:e7:f4:05:f9:d7:27:44:16:
         1c:a8:dc:a2:80:8f:ff:da:d2:19:38:28:74:0a:ba:16:3f:7e:
         eb:56:2a:e1:16:ce:cb:79:c7:f7:d7:06:a2:4a:c4:3c:b3:1c:
         72:a6:c7:27:2a:2c:06:ab:fa:cb:eb:ba:a7:67:fe:2f:8e:e2:
         be:76:58:b4:cb:ab:f4:41:4c:2c:95:f5:ec:cb:f9:94:42:73:
         b1:93:da:c6:f7:b9:76:34:f9:a9:93:c3:fa:92:fe:77:09:39:
         05:86:0b:52:10:d1:e4:94:c8:3e:c6:00:37:9a:01:29:cb:28:
         09:0b:63:31:19:28:d1:65:1b:d1:2f:fe:93:3e:0b:38:cc:0e:
         09:8f:cb:69:61:9b:75:5f:2a:39:77:cf:60:2a:2c:b6:93:00:
         8f:d0:df:e7:5b:c4:cf:61:13:30:9d:c5:74:89:2c:d8:16:c4:
         da:aa:c4:6f:dc:5e:7f:e4:fd:28:5f:5d:fe:84:47:8a:35:14:
         dc:06:f7:f6:7a:dc:e4:87:bb:fa:32:f4:9b:e9:96:5c:c5:53:
         9d:fe:22:3b:6e:72:94:9d:e8:6c:d3:f2:5e:91:05:35:71:43:
         7a:04:b3:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwrI8fgmCH1hadrqX1/4F2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDA5OTZjMDg4OTBiZDVlMWU2ZGQwNTI4MjE3ZDI4Zjlk
MDkzNTUwHhcNMjUwNjE0MjMwMDQ2WhcNMjUwNjE1MjMwMDQ2WjAzMTEwLwYDVQQD
Eyg0MWNkZTViN2M5MjQ4MmI4NjgxZWUyOWIzODhjYjUwMTFmNDc4ZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7c+07gPYG6gJ5Bjxo73v+uxFOCwJ
TIyZd+YTxMCTbUFF1otqeLiJdKnWsPgQUZQ0fODSv/T26pzTXh3BmRt50nZbxoX1
emWmY4NfOeFtEX9579YRUIDfQy+jAHyqTXnHXXqz6UpIpYXIdmDIDanGjAsvFtRC
cHP1RpVGbPjAbFmmqhhapqBhhp560JijmQBNi1A9FxL82gpOKvoxpXAGpGu0lfBx
plh+zdUDdt+0CnjnOD3BQD+QU43vkEF0Ya9/xsklddXQ0cRTfM5DXamovNCP6/jI
fozXVOGXwzd6q0DVe1nnih0oexgXuuQohikzagleWk5vgkFTP8Td4FGsbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHN5bfJJIK4aB7imziMtQEfR4/xMB8GA1UdIwQY
MBaAFIMAmWwIiQvV4ebdBSghfSj50JNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3dDWmJBaUpDOVhoNXQwRktDRjlLUG5RazFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jMDEzMDYtNjZmNS00MjA5LThjODgt
MmRiNjkxYjFkNGFiLzEvZ3dDWmJBaUpDOVhoNXQwRktDRjlLUG5RazFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9jMDEzMDYtNjZmNS00MjA5LThjODgtMmRiNjkxYjFkNGFi
LzEvZ3dDWmJBaUpDOVhoNXQwRktDRjlLUG5RazFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7m0H1V1y
b+MkSUtsB36OaeDWVRXTsUA5A9bxd+f0BfnXJ0QWHKjcooCP/9rSGTgodAq6Fj9+
61Yq4RbOy3nH99cGokrEPLMccqbHJyosBqv6y+u6p2f+L47ivnZYtMur9EFMLJX1
7Mv5lEJzsZPaxve5djT5qZPD+pL+dwk5BYYLUhDR5JTIPsYAN5oBKcsoCQtjMRko
0WUb0S/+kz4LOMwOCY/LaWGbdV8qOXfPYCostpMAj9Df51vEz2ETMJ3FdIks2BbE
2qrEb9xef+T9KF9d/oRHijUU3Ab39nrc5Ie7+jL0m+mWXMVTnf4iO25ylJ3obNPy
XpEFNXFDegSzTw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:29:02 2025 by rpki-client