Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
File:                     GtYaUvEILs9Ml7USK0YRIlBzRRs.mft (raw, json)
Hash identifier:          FeeiJBA2BuZrPRLk3iuUFFfESgBLN9AhY9Juracsi24=
Subject key identifier:   D6:E2:E7:C1:42:D6:57:63:9D:17:0E:B1:57:A2:8B:AB:A5:2E:F9:3F
Authority key identifier: 1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B
Certificate issuer:       /CN=1ad61a52f1082ecf4c97b5122b4611225073451b
Certificate serial:       01988BEADCC290DD0E39ABF92A54ABC0E916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
Manifest number:          1623
Signing time:             Fri 08 Aug 2025 23:01:21 +0000
Manifest this update:     Fri 08 Aug 2025 23:01:21 +0000
Manifest next update:     Sat 09 Aug 2025 23:01:21 +0000
Files and hashes:         1: GtYaUvEILs9Ml7USK0YRIlBzRRs.crl (hash: XGCsloxZq+dMdId5V09nmbfVq4Byo7EzIOy1+b8W5bc=)
                          2: rDCQZOSrxJZ5t1EHBcAmewJ2zuE.roa (hash: 5o5LCz2EfBpIGStnQttGujPIzxdxxRQF2IZp5UipRj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:dc:c2:90:dd:0e:39:ab:f9:2a:54:ab:c0:e9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ad61a52f1082ecf4c97b5122b4611225073451b
        Validity
            Not Before: Aug  8 23:01:21 2025 GMT
            Not After : Aug  9 23:01:21 2025 GMT
        Subject: CN=d6e2e7c142d657639d170eb157a28baba52ef93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5a:79:d4:b1:85:57:85:0f:03:87:19:2b:59:
                    d5:28:a5:13:96:96:ab:e1:7e:a1:ee:7d:f8:75:92:
                    f1:d1:0d:e5:35:7a:a2:c0:f8:c1:ec:1c:5e:31:c8:
                    b9:bd:a4:55:18:0b:ba:cf:9e:c4:41:69:53:93:df:
                    12:e3:54:44:0a:9c:9f:19:11:9f:82:11:b1:57:d0:
                    54:db:ba:f2:6b:cf:c6:b7:67:4d:7f:f1:25:34:98:
                    5a:39:5a:e0:52:02:38:62:31:c4:60:59:62:13:eb:
                    5c:62:43:d9:63:f9:88:1d:84:37:3e:9f:55:cf:d5:
                    3b:b8:d8:fc:fe:ec:0b:e9:bd:2f:3a:bd:76:17:be:
                    ab:2e:c6:3b:3c:14:c8:0f:f8:a9:53:60:5d:cf:80:
                    5c:fa:6d:9d:2f:6a:90:4b:e3:6e:c4:f6:c9:cf:c3:
                    da:74:36:cf:4b:37:0a:e5:b9:00:80:05:66:4c:1c:
                    8e:c9:82:6c:69:03:cb:af:f0:3e:31:b9:c5:99:18:
                    d5:06:87:57:20:8e:69:5c:ff:f6:11:d4:1b:b4:e2:
                    12:04:83:10:1d:e7:09:25:9f:5c:14:82:d2:e1:27:
                    cc:45:66:93:db:d0:75:0c:e4:15:9d:bc:d7:2f:fd:
                    ff:88:aa:30:84:f6:a4:29:ce:c7:2e:9d:41:63:e7:
                    cd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E2:E7:C1:42:D6:57:63:9D:17:0E:B1:57:A2:8B:AB:A5:2E:F9:3F
            X509v3 Authority Key Identifier:
                keyid:1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:c3:60:fe:c4:6f:f7:50:6a:20:d8:74:08:31:1a:70:11:ca:
         e7:93:dc:ad:45:7c:28:4c:2e:ab:e3:b0:27:a9:d9:6e:fc:96:
         f6:25:c4:95:85:2f:af:35:23:92:6c:b1:a3:d5:d5:07:99:5d:
         dd:bc:d1:56:0b:41:1a:7a:88:af:9e:de:92:fe:d3:1f:08:da:
         3d:27:b3:7c:3f:4a:b6:6b:68:76:73:dc:5e:17:35:6a:07:a0:
         81:b0:45:f5:91:ea:c1:66:b6:06:28:36:55:ff:f8:2c:0e:d2:
         f5:d5:b4:d6:31:49:4e:96:6f:24:f7:f1:07:77:97:33:12:ca:
         d6:55:54:d7:c6:37:47:a7:fb:ab:6a:ed:65:66:f5:b3:d7:89:
         94:67:f1:32:2b:e2:a6:9c:12:b1:29:09:62:8c:ab:b2:63:4d:
         0b:82:33:c5:bd:56:e3:77:6f:68:d3:a8:dc:5c:aa:1c:a5:d2:
         19:64:80:ef:42:ba:37:c7:52:53:b6:35:b2:f7:38:c3:22:1e:
         f8:6f:ee:fa:22:4f:e8:e4:58:a2:2b:c3:1e:dc:ef:17:e3:3c:
         19:3d:d6:f6:7a:b7:1e:ce:08:18:2a:5c:81:0b:33:08:67:dc:
         45:00:6e:bd:f9:81:03:8a:a5:ad:c3:e0:3f:f9:26:d6:df:3e:
         9b:af:6d:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiL6tzCkN0OOav5KlSrwOkWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZDYxYTUyZjEwODJlY2Y0Yzk3YjUxMjJiNDYxMTIyNTA3
MzQ1MWIwHhcNMjUwODA4MjMwMTIxWhcNMjUwODA5MjMwMTIxWjAzMTEwLwYDVQQD
EyhkNmUyZTdjMTQyZDY1NzYzOWQxNzBlYjE1N2EyOGJhYmE1MmVmOTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplp51LGFV4UPA4cZK1nVKKUTlpar
4X6h7n34dZLx0Q3lNXqiwPjB7BxeMci5vaRVGAu6z57EQWlTk98S41RECpyfGRGf
ghGxV9BU27rya8/Gt2dNf/ElNJhaOVrgUgI4YjHEYFliE+tcYkPZY/mIHYQ3Pp9V
z9U7uNj8/uwL6b0vOr12F76rLsY7PBTID/ipU2Bdz4Bc+m2dL2qQS+NuxPbJz8Pa
dDbPSzcK5bkAgAVmTByOyYJsaQPLr/A+MbnFmRjVBodXII5pXP/2EdQbtOISBIMQ
HecJJZ9cFILS4SfMRWaT29B1DOQVnbzXL/3/iKowhPakKc7HLp1BY+fNbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbi58FC1ldjnRcOsVeii6ulLvk/MB8GA1UdIwQY
MBaAFBrWGlLxCC7PTJe1EitGESJQc0UbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3RZYVV2RUlMczlNbDdVU0swWVJJbEJ6UlJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81OWQ1NTUtMjBiZC00YzQyLTg0YmEt
NzJjZTk1YmE5YWZhLzEvR3RZYVV2RUlMczlNbDdVU0swWVJJbEJ6UlJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81OWQ1NTUtMjBiZC00YzQyLTg0YmEtNzJjZTk1YmE5YWZh
LzEvR3RZYVV2RUlMczlNbDdVU0swWVJJbEJ6UlJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA58Ng/sRv
91BqINh0CDEacBHK55PcrUV8KEwuq+OwJ6nZbvyW9iXElYUvrzUjkmyxo9XVB5ld
3bzRVgtBGnqIr57ekv7THwjaPSezfD9KtmtodnPcXhc1ageggbBF9ZHqwWa2Big2
Vf/4LA7S9dW01jFJTpZvJPfxB3eXMxLK1lVU18Y3R6f7q2rtZWb1s9eJlGfxMivi
ppwSsSkJYoyrsmNNC4Izxb1W43dvaNOo3FyqHKXSGWSA70K6N8dSU7Y1svc4wyIe
+G/u+iJP6ORYoivDHtzvF+M8GT3W9nq3Hs4IGCpcgQszCGfcRQBuvfmBA4qlrcPg
P/km1t8+m69tBw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:10:05 2025 by rpki-client