Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft
File:                     G5gog-Hfv0Yz4IwLWMheif_DIQE.mft (raw, json)
Hash identifier:          IpMCXKHxNdjvGt7CqU2k/DrUlKXNGdLWFGXY20GPfqQ=
Subject key identifier:   9D:9C:A1:42:86:98:C5:17:37:D9:68:96:29:E6:64:6C:44:F1:7D:F0
Authority key identifier: 1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01
Certificate issuer:       /CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
Certificate serial:       01976960AC1FA416328716BACF44DDB0E56A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft
Manifest number:          0AE0
Signing time:             Fri 13 Jun 2025 13:00:32 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:32 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:32 +0000
Files and hashes:         1: 9tT1Sn3Qux2-pUIWCQe_vjURo9M.roa (hash: FairLybhS08hCgrNLc9cEd4IlKo+5RTneSM8eV+/6qk=)
                          2: BmpGigL7yj_vU4YrBcCEXhWHHbI.roa (hash: Ppbu0DUb3G/J7ntuuCJmNlJLWLrlVFHUquuws77rxcY=)
                          3: G5gog-Hfv0Yz4IwLWMheif_DIQE.crl (hash: vUwrloiBpfV/1OIwcy37DjKNvjgZZnBwm41/ZpO+jC0=)
                          4: KxqqgwhHr1JBau2ZnEJ99DBtg4A.roa (hash: QCOcE3LD/xRpaRa6zgmKhfyxrFbaW8v4jp9GZFELj38=)
                          5: UjncDvFxOlRCkAGtD0tzYyO0vwY.roa (hash: HR/S3qDlN6tb+Q3T8TNZutyXf0XfoqKmAw4PR5qJTgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:60:ac:1f:a4:16:32:87:16:ba:cf:44:dd:b0:e5:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
        Validity
            Not Before: Jun 13 13:00:32 2025 GMT
            Not After : Jun 14 13:00:32 2025 GMT
        Subject: CN=9d9ca1428698c51737d9689629e6646c44f17df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:55:ab:68:1e:a4:57:62:03:55:ed:a5:f4:1c:
                    fa:18:51:db:43:25:7d:62:c4:5c:1e:ba:1e:27:1b:
                    b4:07:d8:36:26:35:84:c9:76:55:ab:4e:df:37:3b:
                    ca:d1:f2:03:7f:4e:9f:41:d5:36:83:89:dc:72:3b:
                    99:6c:f3:be:dd:65:2c:12:2c:f0:ab:fb:13:f1:ce:
                    f6:41:48:2a:88:de:9c:bf:ee:37:fe:45:00:e8:dd:
                    0e:95:c7:47:ee:88:f4:ca:7a:17:de:12:01:af:a0:
                    5a:55:60:4b:f1:34:ea:ae:bb:c2:a6:b9:8a:db:8b:
                    8a:6c:40:b5:32:bd:0b:1b:79:9d:30:44:c8:a1:e9:
                    79:00:91:ed:da:df:62:58:77:09:8d:93:de:99:9c:
                    01:ca:8d:bf:5a:79:82:d8:08:f0:7f:cf:7c:4c:39:
                    96:21:77:1b:37:78:69:6b:7e:46:d0:f3:85:4a:07:
                    8d:fe:c8:1b:33:f6:03:e6:48:8f:58:1c:85:8f:b4:
                    2c:57:3b:ac:1c:b0:cc:a2:2e:18:08:e8:7c:e2:c8:
                    8c:80:71:78:61:1e:fb:f9:38:b9:4a:6d:a2:62:b0:
                    30:bc:a9:37:82:c5:3a:5f:3f:b0:0e:40:0f:b8:05:
                    83:f4:4f:5f:7a:df:22:64:64:96:18:13:e1:bb:1e:
                    05:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9C:A1:42:86:98:C5:17:37:D9:68:96:29:E6:64:6C:44:F1:7D:F0
            X509v3 Authority Key Identifier:
                keyid:1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:20:c6:de:c2:c3:14:b8:e1:f8:41:00:b1:53:69:cb:e2:c3:
         3c:7b:04:57:8c:1f:2e:1e:4d:c9:f9:69:63:ec:de:09:55:25:
         b0:db:25:0d:f4:03:10:65:1f:b3:71:b0:14:67:bb:2c:5a:2c:
         a1:95:da:f4:e2:11:51:62:a3:ad:f0:93:64:cf:63:00:07:7b:
         34:02:cb:aa:19:de:6a:e8:55:4b:21:d4:8f:f4:35:5c:3e:f9:
         71:c1:e4:7d:9a:3e:ca:3f:ff:6b:52:8a:d5:e5:df:e1:fc:ee:
         bc:9a:a7:fe:ac:bd:cc:ef:8c:e0:de:a9:b0:b9:7a:c8:5d:5f:
         35:6b:ac:df:3f:a9:d5:48:78:a4:30:1e:6f:b9:d9:87:1b:89:
         5f:08:10:41:c0:88:4d:3a:54:a9:bb:be:48:2d:f8:20:67:04:
         1e:c7:90:e6:bf:df:87:c9:85:36:e3:81:23:d6:9e:21:15:3c:
         d7:65:87:85:39:50:16:1e:3e:57:d4:d1:0a:4c:96:f6:cf:6f:
         23:ae:0f:53:e7:f0:3b:a4:c0:d6:c7:55:3e:de:4a:e2:3d:0d:
         3b:74:f5:88:8d:f8:5e:b8:97:ad:74:44:ba:a8:ef:a6:ad:25:
         52:2f:79:7b:66:44:2c:f3:de:dc:43:78:2d:eb:33:f8:86:f6:
         ca:d9:9a:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYKwfpBYyhxa6z0TdsOVqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOTgyODgzZTFkZmJmNDYzM2UwOGMwYjU4Yzg1ZTg5ZmZj
MzIxMDEwHhcNMjUwNjEzMTMwMDMyWhcNMjUwNjE0MTMwMDMyWjAzMTEwLwYDVQQD
Eyg5ZDljYTE0Mjg2OThjNTE3MzdkOTY4OTYyOWU2NjQ2YzQ0ZjE3ZGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VWraB6kV2IDVe2l9Bz6GFHbQyV9
YsRcHroeJxu0B9g2JjWEyXZVq07fNzvK0fIDf06fQdU2g4nccjuZbPO+3WUsEizw
q/sT8c72QUgqiN6cv+43/kUA6N0OlcdH7oj0ynoX3hIBr6BaVWBL8TTqrrvCprmK
24uKbEC1Mr0LG3mdMETIoel5AJHt2t9iWHcJjZPemZwByo2/WnmC2Ajwf898TDmW
IXcbN3hpa35G0POFSgeN/sgbM/YD5kiPWByFj7QsVzusHLDMoi4YCOh84siMgHF4
YR77+Ti5Sm2iYrAwvKk3gsU6Xz+wDkAPuAWD9E9fet8iZGSWGBPhux4FMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2coUKGmMUXN9lolinmZGxE8X3wMB8GA1UdIwQY
MBaAFBuYKIPh379GM+CMC1jIXon/wyEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzVnb2ctSGZ2MFl6NEl3TFdNaGVpZl9ESVFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81Nzg2MGEtZGQ1ZS00NmU4LTllY2It
ZDA3OGVlYzgyYjJhLzEvRzVnb2ctSGZ2MFl6NEl3TFdNaGVpZl9ESVFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS81Nzg2MGEtZGQ1ZS00NmU4LTllY2ItZDA3OGVlYzgyYjJh
LzEvRzVnb2ctSGZ2MFl6NEl3TFdNaGVpZl9ESVFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwyDG3sLD
FLjh+EEAsVNpy+LDPHsEV4wfLh5NyflpY+zeCVUlsNslDfQDEGUfs3GwFGe7LFos
oZXa9OIRUWKjrfCTZM9jAAd7NALLqhneauhVSyHUj/Q1XD75ccHkfZo+yj//a1KK
1eXf4fzuvJqn/qy9zO+M4N6psLl6yF1fNWus3z+p1Uh4pDAeb7nZhxuJXwgQQcCI
TTpUqbu+SC34IGcEHseQ5r/fh8mFNuOBI9aeIRU812WHhTlQFh4+V9TRCkyW9s9v
I64PU+fwO6TA1sdVPt5K4j0NO3T1iI34XriXrXREuqjvpq0lUi95e2ZELPPe3EN4
Lesz+Ib2ytmaEQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:24 2025 by rpki-client