Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft
File:                     gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft (raw, json)
Hash identifier:          HjUVkTH2GR9vx+/OwcnabM5NKUDS4odoJ5twJLv63Ks=
Subject key identifier:   F9:9A:9B:10:1E:1E:D3:E1:37:91:CE:72:9D:60:72:F5:F5:A8:ED:35
Authority key identifier: 83:07:6F:3A:B3:EF:AA:63:28:F0:A3:8F:CF:4A:7F:96:30:04:B7:77
Certificate issuer:       /CN=83076f3ab3efaa6328f0a38fcf4a7f963004b777
Certificate serial:       01976A05FB3533A22052E65C2890DFF5ADEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft
Manifest number:          158C
Signing time:             Fri 13 Jun 2025 16:01:06 +0000
Manifest this update:     Fri 13 Jun 2025 16:01:06 +0000
Manifest next update:     Sat 14 Jun 2025 16:01:06 +0000
Files and hashes:         1: C5Qw-UH6XV_4ro5rbdk-3jWZdWA.roa (hash: aPq4TUMBz8klCiNKwnIuLbD4QdlJvKpZ22r6ylx0Jvs=)
                          2: gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl (hash: jfFpSj/Yyb2J8uRkgCzjH5SYNWYGF5VnH7n8ekULqv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:fb:35:33:a2:20:52:e6:5c:28:90:df:f5:ad:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83076f3ab3efaa6328f0a38fcf4a7f963004b777
        Validity
            Not Before: Jun 13 16:01:06 2025 GMT
            Not After : Jun 14 16:01:06 2025 GMT
        Subject: CN=f99a9b101e1ed3e13791ce729d6072f5f5a8ed35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5e:66:74:ef:5b:ac:d7:ce:dd:ad:39:f6:eb:
                    d4:d3:80:6a:72:a4:af:5a:15:1b:ac:20:f4:fb:1c:
                    c4:2f:84:b6:bc:e4:14:e0:ef:4a:c6:21:5a:a6:c3:
                    6f:bd:c1:6b:b9:15:c1:f8:2d:e1:cd:14:63:37:23:
                    d6:04:42:5e:71:4b:be:15:bf:4a:ff:ed:c8:31:29:
                    f9:3f:d4:c3:b5:e9:78:76:4a:55:4d:f5:49:b5:9e:
                    00:4f:57:cb:53:d4:81:0d:5b:22:bb:ae:0e:75:17:
                    0d:cb:0f:d7:cc:3d:45:2b:e9:33:38:87:6a:96:14:
                    c5:d1:5d:6c:77:f4:b6:ca:bf:8a:ea:a6:eb:df:cd:
                    2f:84:34:34:9b:a8:84:98:c3:d2:d5:da:84:38:03:
                    d3:b0:de:55:7a:7e:f5:79:b0:31:4e:5e:e1:ec:7a:
                    ee:96:82:24:63:a4:7b:20:26:6f:8f:c6:88:d0:53:
                    e6:a9:9c:c1:b7:f7:e1:de:79:94:9f:f9:25:8d:a2:
                    5b:c3:70:f8:67:b0:08:dd:e3:b2:8a:29:48:20:fe:
                    be:34:af:91:33:59:a8:64:50:63:d8:f6:03:bc:4b:
                    49:d4:90:90:94:57:77:27:f9:51:24:94:48:cd:29:
                    42:e1:f9:0c:07:3e:58:0e:ff:a9:ae:2e:5a:5e:b8:
                    fa:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:9A:9B:10:1E:1E:D3:E1:37:91:CE:72:9D:60:72:F5:F5:A8:ED:35
            X509v3 Authority Key Identifier:
                keyid:83:07:6F:3A:B3:EF:AA:63:28:F0:A3:8F:CF:4A:7F:96:30:04:B7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:6a:9a:ad:cd:fa:a0:2c:f0:f6:88:59:85:81:68:0e:61:91:
         a7:ad:43:22:f7:12:76:96:52:de:56:5b:11:eb:b9:6b:eb:10:
         7d:20:65:a9:04:72:0f:5a:02:78:23:06:ae:5f:31:cc:d3:be:
         20:5e:22:28:1b:34:d6:1a:ad:18:1e:c6:a1:3e:92:73:c1:b7:
         2d:84:60:3e:0b:e2:e2:00:f9:2d:2c:96:18:97:46:e0:98:e8:
         c0:fa:08:27:c0:b3:ea:48:d1:a2:cd:f7:b2:d4:76:f9:be:8c:
         bf:4b:1e:4e:ea:22:62:4f:9f:29:29:d5:c9:09:6a:33:a8:49:
         11:10:88:9f:17:a3:c7:b4:03:5a:38:75:b5:e5:df:c6:56:3f:
         ea:a6:8e:25:c8:d2:91:6d:af:a1:80:e4:38:e7:e9:37:94:fb:
         60:25:7b:2c:1e:c6:55:ff:54:6d:58:b7:c2:7d:c2:b7:93:4e:
         64:0f:59:1f:05:c8:97:de:3c:4a:67:ad:f9:79:ea:7d:1d:20:
         cf:0e:9f:e7:69:52:a4:4e:3d:48:3f:05:0e:6d:1d:57:b3:4c:
         73:76:d6:65:29:11:2e:72:07:63:2e:95:d4:92:51:82:83:93:
         b3:08:8b:fe:43:ad:de:09:ef:6e:50:b6:71:10:99:64:d5:2b:
         37:91:a7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:04:04 2025 by rpki-client