Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft
File:                     gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft (raw, json)
Hash identifier:          yKJdbUdznNCcnbQVu6MjiQ944jCOMsdLvzRdyEAKfRY=
Subject key identifier:   BA:AA:65:AF:9E:99:E4:84:75:98:10:37:0F:01:F4:B8:B4:5A:89:31
Authority key identifier: 83:07:6F:3A:B3:EF:AA:63:28:F0:A3:8F:CF:4A:7F:96:30:04:B7:77
Certificate issuer:       /CN=83076f3ab3efaa6328f0a38fcf4a7f963004b777
Certificate serial:       01987298BE5EBD10DE52ED04AEC566D3849A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft
Manifest number:          1615
Signing time:             Mon 04 Aug 2025 01:01:09 +0000
Manifest this update:     Mon 04 Aug 2025 01:01:09 +0000
Manifest next update:     Tue 05 Aug 2025 01:01:09 +0000
Files and hashes:         1: C5Qw-UH6XV_4ro5rbdk-3jWZdWA.roa (hash: aPq4TUMBz8klCiNKwnIuLbD4QdlJvKpZ22r6ylx0Jvs=)
                          2: gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl (hash: fXnl7XcSPdCfUG4vrNc/7gSuZUgQgwaMphVqalWpWts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:be:5e:bd:10:de:52:ed:04:ae:c5:66:d3:84:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83076f3ab3efaa6328f0a38fcf4a7f963004b777
        Validity
            Not Before: Aug  4 01:01:09 2025 GMT
            Not After : Aug  5 01:01:09 2025 GMT
        Subject: CN=baaa65af9e99e484759810370f01f4b8b45a8931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:12:86:e5:08:bc:ea:6e:3e:1c:c1:7f:69:8e:
                    12:76:5b:40:d7:21:c9:6c:79:ce:bc:71:8d:fe:a2:
                    ab:2a:48:67:90:c1:ea:25:88:63:f7:62:c9:44:32:
                    17:c2:43:5a:fe:a8:d6:3e:57:23:d5:8c:26:4a:81:
                    9b:4d:f7:6b:5f:3d:10:a8:17:ba:66:94:37:40:9b:
                    14:c6:e9:b8:de:4e:c2:20:35:74:7c:4f:8c:7a:33:
                    04:a7:c0:38:91:3a:fe:c6:85:5d:2c:34:c8:30:37:
                    f8:49:40:73:1e:a0:4b:f4:9c:a3:9d:0e:71:0a:0d:
                    ad:11:9a:89:05:3b:8e:ae:d1:75:0a:2c:00:71:70:
                    75:c0:49:62:f3:3e:f1:69:46:a2:19:63:8c:43:df:
                    94:f6:32:fe:f1:b1:9c:7b:36:6b:98:82:47:69:ac:
                    cd:2c:45:f2:7b:19:b8:a3:a5:5d:24:aa:ee:0a:36:
                    e6:8b:5c:aa:ff:73:00:49:0e:1d:25:e7:90:e4:5e:
                    f5:c6:fd:af:cf:04:3c:78:a1:0e:a4:99:27:00:36:
                    e2:4a:5d:1b:28:07:60:dc:61:97:36:50:c3:12:b1:
                    d8:4e:d1:71:2b:04:c0:97:38:63:5c:b3:77:41:45:
                    11:6c:f4:db:3b:b1:e0:da:47:60:da:5f:10:00:11:
                    5a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AA:65:AF:9E:99:E4:84:75:98:10:37:0F:01:F4:B8:B4:5A:89:31
            X509v3 Authority Key Identifier:
                keyid:83:07:6F:3A:B3:EF:AA:63:28:F0:A3:8F:CF:4A:7F:96:30:04:B7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:60:85:8b:5e:60:de:06:7a:a1:18:75:98:92:0c:a7:03:5b:
         58:88:df:2b:35:a4:43:75:9b:82:de:42:d2:c1:ca:7a:5e:58:
         f4:21:90:95:b5:56:3c:e0:21:0d:9c:4e:ff:c2:c9:42:e0:41:
         f6:d2:50:8a:bc:cb:e0:bd:52:44:98:10:1e:ce:52:62:d4:87:
         5c:97:96:44:c0:a9:07:e2:04:f5:80:2c:70:fd:6c:0b:dc:b3:
         54:01:53:e3:06:12:9c:cc:2d:4d:27:6e:0c:25:b1:b5:79:7f:
         6d:f1:20:ae:d3:ac:5f:1c:d3:16:97:61:77:72:01:52:fd:09:
         ec:f9:47:35:d7:e4:30:1b:7f:cc:97:af:aa:d2:e0:5b:84:38:
         0c:63:49:70:a9:07:34:7e:f7:a1:64:5a:a1:10:ce:f8:35:31:
         18:e2:b9:20:14:5e:7b:37:74:bb:50:95:38:dc:37:92:7a:fd:
         02:47:9a:b4:dc:93:73:39:aa:ad:a9:2c:6c:73:8b:1d:00:2f:
         91:39:33:9e:2e:7f:0f:1e:f1:b1:fa:9b:90:fa:4c:f6:f8:7c:
         75:ab:2d:31:2f:6c:a8:c0:4c:7a:77:48:e3:fa:8c:ec:97:15:
         c6:bc:92:ef:d9:3a:85:66:04:87:b3:47:c8:69:52:34:e8:1d:
         03:22:31:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymL5evRDeUu0ErsVm04SaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDc2ZjNhYjNlZmFhNjMyOGYwYTM4ZmNmNGE3Zjk2MzAw
NGI3NzcwHhcNMjUwODA0MDEwMTA5WhcNMjUwODA1MDEwMTA5WjAzMTEwLwYDVQQD
EyhiYWFhNjVhZjllOTllNDg0NzU5ODEwMzcwZjAxZjRiOGI0NWE4OTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRKG5Qi86m4+HMF/aY4SdltA1yHJ
bHnOvHGN/qKrKkhnkMHqJYhj92LJRDIXwkNa/qjWPlcj1YwmSoGbTfdrXz0QqBe6
ZpQ3QJsUxum43k7CIDV0fE+MejMEp8A4kTr+xoVdLDTIMDf4SUBzHqBL9JyjnQ5x
Cg2tEZqJBTuOrtF1CiwAcXB1wEli8z7xaUaiGWOMQ9+U9jL+8bGcezZrmIJHaazN
LEXyexm4o6VdJKruCjbmi1yq/3MASQ4dJeeQ5F71xv2vzwQ8eKEOpJknADbiSl0b
KAdg3GGXNlDDErHYTtFxKwTAlzhjXLN3QUURbPTbO7Hg2kdg2l8QABFaaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqqZa+emeSEdZgQNw8B9Li0WokxMB8GA1UdIwQY
MBaAFIMHbzqz76pjKPCjj89Kf5YwBLd3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3dkdk9yUHZxbU1vOEtPUHowcF9sakFFdDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iODhlMGMtMjRjZi00ZmVjLWIxMTgt
OWE2ZGYzOTU5MmM3LzEvZ3dkdk9yUHZxbU1vOEtPUHowcF9sakFFdDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9iODhlMGMtMjRjZi00ZmVjLWIxMTgtOWE2ZGYzOTU5MmM3
LzEvZ3dkdk9yUHZxbU1vOEtPUHowcF9sakFFdDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWCFi15g
3gZ6oRh1mJIMpwNbWIjfKzWkQ3Wbgt5C0sHKel5Y9CGQlbVWPOAhDZxO/8LJQuBB
9tJQirzL4L1SRJgQHs5SYtSHXJeWRMCpB+IE9YAscP1sC9yzVAFT4wYSnMwtTSdu
DCWxtXl/bfEgrtOsXxzTFpdhd3IBUv0J7PlHNdfkMBt/zJevqtLgW4Q4DGNJcKkH
NH73oWRaoRDO+DUxGOK5IBReezd0u1CVONw3knr9AkeatNyTczmqraksbHOLHQAv
kTkzni5/Dx7xsfqbkPpM9vh8dastMS9sqMBMendI4/qM7JcVxryS79k6hWYEh7NH
yGlSNOgdAyIx5Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:32 2025 by rpki-client