Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
File:                     gseGJ3lOh_-XGNsbDffu4u2zNZU.mft (raw, json)
Hash identifier:          3wyrIkcCoQCuHMorUr2Ilcu6Zs3FbF26lEVV+xmO7F0=
Subject key identifier:   30:0A:CE:19:3C:DC:AD:31:78:CE:1E:AD:FA:5E:B3:08:EE:5C:13:F1
Authority key identifier: 82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95
Certificate issuer:       /CN=82c78627794e87ff9718db1b0df7eee2edb33595
Certificate serial:       01968D022E5CD66FC57CC31EC3AA2834CC2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
Manifest number:          113F
Signing time:             Thu 01 May 2025 18:00:52 +0000
Manifest this update:     Thu 01 May 2025 18:00:52 +0000
Manifest next update:     Fri 02 May 2025 18:00:52 +0000
Files and hashes:         1: bYTh9rqmyoD0Z9Or16ek84SzWn4.roa (hash: 4klJmHJXl6kfKkt89+CuaKwDfZrFu99Y5sLGCeYnZ1E=)
                          2: gseGJ3lOh_-XGNsbDffu4u2zNZU.crl (hash: R1oOwjX8TbGql244tONWOnHhuL2l357+4lb4lvcD1ZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8d:02:2e:5c:d6:6f:c5:7c:c3:1e:c3:aa:28:34:cc:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82c78627794e87ff9718db1b0df7eee2edb33595
        Validity
            Not Before: May  1 18:00:52 2025 GMT
            Not After : May  2 18:00:52 2025 GMT
        Subject: CN=300ace193cdcad3178ce1eadfa5eb308ee5c13f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fe:69:54:96:84:39:cd:87:84:cd:1f:1d:0f:
                    62:9a:07:bd:cf:e3:c6:d7:8e:fc:f0:ea:b7:fb:9d:
                    5d:f2:c3:5c:57:60:e5:e7:f5:84:99:a7:cd:da:f6:
                    39:2c:e4:3a:9d:38:24:f4:90:e3:ed:92:1d:b4:0f:
                    93:b3:63:0c:c9:73:ba:3b:6a:c5:17:8c:3d:26:2d:
                    e3:e6:95:35:d2:e1:77:20:e9:1d:80:af:53:95:b8:
                    87:37:0b:3a:53:d9:f8:2c:be:24:8b:91:67:26:78:
                    c1:75:7a:d1:dc:92:1b:17:5d:2c:fa:d6:8b:82:4e:
                    3e:f0:53:e0:24:57:03:1e:a4:8f:14:42:e1:84:ce:
                    d0:00:c2:3c:bc:24:89:33:1d:cd:f8:47:10:02:a8:
                    b4:93:69:68:fd:6d:9d:8a:e3:88:0b:6b:d5:05:20:
                    6a:a7:b6:f3:e3:b1:21:99:72:b2:5a:22:c8:82:69:
                    f1:31:9a:2b:2e:76:07:18:56:8a:ef:a3:4b:b9:25:
                    60:9c:33:05:6c:8a:eb:ec:27:c9:d8:8e:47:22:7b:
                    53:b9:29:58:b1:26:1d:ec:06:10:d9:80:65:14:7c:
                    45:21:9a:d0:25:ff:e2:e2:c7:df:36:2a:5c:df:9d:
                    33:11:c3:1b:9f:10:38:67:53:2d:76:d4:4f:b1:ff:
                    e3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0A:CE:19:3C:DC:AD:31:78:CE:1E:AD:FA:5E:B3:08:EE:5C:13:F1
            X509v3 Authority Key Identifier:
                keyid:82:C7:86:27:79:4E:87:FF:97:18:DB:1B:0D:F7:EE:E2:ED:B3:35:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gseGJ3lOh_-XGNsbDffu4u2zNZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e1849f-24a6-4f92-8063-626fc0403ac9/1/gseGJ3lOh_-XGNsbDffu4u2zNZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:0c:91:1a:ce:79:0b:41:eb:a9:6c:08:6c:c1:bc:26:40:b5:
         53:dc:52:44:16:0e:0e:38:c0:b2:02:f3:33:4f:c9:59:4f:63:
         f2:ae:bf:b7:92:7d:90:ed:1a:79:47:d3:76:cb:9d:91:64:ec:
         47:b8:e0:99:d4:0a:37:46:1a:ae:e9:9a:3d:9d:55:36:e5:4b:
         78:10:ca:61:29:3e:ef:05:c5:0d:97:5f:b9:95:41:99:75:bd:
         4e:3e:78:b4:9c:82:27:c6:ad:11:ef:84:c3:a9:bd:a7:61:b5:
         62:c4:82:b2:79:78:55:76:da:32:28:65:74:35:cf:32:ed:44:
         dd:f5:64:7e:60:d3:2f:5e:6c:95:3c:83:ef:22:54:f0:7b:99:
         cf:a4:0d:ad:b0:da:4b:96:52:95:20:f3:df:0c:0c:ca:e7:ac:
         e4:56:06:34:b6:52:c7:8c:af:d1:b2:aa:54:dc:49:93:c9:a9:
         35:c6:18:41:46:aa:d1:2f:ca:7a:32:30:1a:6c:eb:67:a2:41:
         07:19:2d:36:63:96:20:03:d8:c9:52:71:81:2b:ce:4f:76:af:
         8e:bf:fe:aa:8a:e3:6d:c1:83:e1:3d:fe:37:a4:00:4b:25:95:
         01:45:59:cb:59:6e:17:2a:8a:a1:c1:8e:eb:90:26:c9:b4:4b:
         eb:ab:2e:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaNAi5c1m/FfMMew6ooNMwqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYzc4NjI3Nzk0ZTg3ZmY5NzE4ZGIxYjBkZjdlZWUyZWRi
MzM1OTUwHhcNMjUwNTAxMTgwMDUyWhcNMjUwNTAyMTgwMDUyWjAzMTEwLwYDVQQD
EygzMDBhY2UxOTNjZGNhZDMxNzhjZTFlYWRmYTVlYjMwOGVlNWMxM2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv5pVJaEOc2HhM0fHQ9imge9z+PG
14788Oq3+51d8sNcV2Dl5/WEmafN2vY5LOQ6nTgk9JDj7ZIdtA+Ts2MMyXO6O2rF
F4w9Ji3j5pU10uF3IOkdgK9TlbiHNws6U9n4LL4ki5FnJnjBdXrR3JIbF10s+taL
gk4+8FPgJFcDHqSPFELhhM7QAMI8vCSJMx3N+EcQAqi0k2lo/W2diuOIC2vVBSBq
p7bz47EhmXKyWiLIgmnxMZorLnYHGFaK76NLuSVgnDMFbIrr7CfJ2I5HIntTuSlY
sSYd7AYQ2YBlFHxFIZrQJf/i4sffNipc350zEcMbnxA4Z1MtdtRPsf/jjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAKzhk83K0xeM4erfpeswjuXBPxMB8GA1UdIwQY
MBaAFILHhid5Tof/lxjbGw337uLtszWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lMTg0OWYtMjRhNi00ZjkyLTgwNjMt
NjI2ZmMwNDAzYWM5LzEvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9lMTg0OWYtMjRhNi00ZjkyLTgwNjMtNjI2ZmMwNDAzYWM5
LzEvZ3NlR0ozbE9oXy1YR05zYkRmZnU0dTJ6TlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQyRGs55
C0HrqWwIbMG8JkC1U9xSRBYODjjAsgLzM0/JWU9j8q6/t5J9kO0aeUfTdsudkWTs
R7jgmdQKN0YarumaPZ1VNuVLeBDKYSk+7wXFDZdfuZVBmXW9Tj54tJyCJ8atEe+E
w6m9p2G1YsSCsnl4VXbaMihldDXPMu1E3fVkfmDTL15slTyD7yJU8HuZz6QNrbDa
S5ZSlSDz3wwMyues5FYGNLZSx4yv0bKqVNxJk8mpNcYYQUaq0S/KejIwGmzrZ6JB
BxktNmOWIAPYyVJxgSvOT3avjr/+qorjbcGD4T3+N6QASyWVAUVZy1luFyqKocGO
65AmybRL66suuA==
-----END CERTIFICATE-----
Generated at Fri May 2 01:17:01 2025 by rpki-client