Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
File:                     gxJNBBGiD9K7VGlw6oARbvJ226s.mft (raw, json)
Hash identifier:          tvlq2NT8akryrBXZ+45aRd/U4xXxMnRGQqENDI+SVAs=
Subject key identifier:   D7:BB:92:3E:75:91:9F:EA:A1:1E:54:C1:C0:E5:6D:C8:71:5E:4B:C6
Authority key identifier: 83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
Certificate issuer:       /CN=83124d0411a20fd2bb546970ea80116ef276dbab
Certificate serial:       0196A6C2050D4A71AF480907214669D2FF7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
Manifest number:          1528
Signing time:             Tue 06 May 2025 18:00:55 +0000
Manifest this update:     Tue 06 May 2025 18:00:55 +0000
Manifest next update:     Wed 07 May 2025 18:00:55 +0000
Files and hashes:         1: LjTHS4WiiLbIvDv29J3ieyKf9N4.roa (hash: 0M1gHDPS8KhOTlzfhUcKPBiuX1DLKJxKwDXRimBbw2c=)
                          2: gxJNBBGiD9K7VGlw6oARbvJ226s.crl (hash: bE93w9SAc4lXSVaRxvufmefDqHpxR/7vP/USW+gowMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 18:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:c2:05:0d:4a:71:af:48:09:07:21:46:69:d2:ff:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83124d0411a20fd2bb546970ea80116ef276dbab
        Validity
            Not Before: May  6 18:00:55 2025 GMT
            Not After : May  7 18:00:55 2025 GMT
        Subject: CN=d7bb923e75919feaa11e54c1c0e56dc8715e4bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ac:af:0a:50:0e:1e:a8:79:84:dd:8f:14:fe:
                    1e:99:9a:7f:75:8a:61:f1:3e:22:ac:19:08:35:c1:
                    53:f5:54:74:a3:ec:08:89:41:0e:f8:94:e7:7d:1d:
                    be:a1:ca:7a:ed:4b:0d:df:8e:86:e9:2e:79:0e:cf:
                    52:bd:5b:55:01:99:a3:b9:9d:b5:e9:fd:2b:f3:ba:
                    61:d9:4a:88:c3:41:0e:3b:3c:87:3f:b2:d8:20:b0:
                    b5:79:95:14:ed:02:8b:e3:3b:20:05:01:f5:bf:9f:
                    c4:1b:18:70:19:e5:5b:7e:ba:6f:d2:4b:b0:b5:bb:
                    2c:0f:60:82:eb:69:05:c3:98:e8:16:09:1d:52:0b:
                    7e:60:94:9c:70:c6:75:22:5c:39:9f:d4:7e:db:a9:
                    5e:aa:28:09:cc:e7:ce:72:f4:f8:f5:f5:bc:8e:19:
                    f2:ce:7e:d6:4a:ec:a5:86:29:20:01:c8:31:52:ed:
                    ef:e5:d1:52:f0:1b:f7:b4:1f:00:3c:9f:3e:ae:44:
                    8a:3d:77:aa:a1:82:83:f9:a8:1d:93:d2:22:57:85:
                    eb:dc:dc:48:e5:55:75:b0:21:4b:3b:5a:89:20:ba:
                    4a:8d:81:50:be:e7:51:21:69:29:c8:6f:6e:ba:41:
                    fd:d2:05:76:a0:89:fc:2a:93:d3:82:d7:1a:ee:cd:
                    58:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BB:92:3E:75:91:9F:EA:A1:1E:54:C1:C0:E5:6D:C8:71:5E:4B:C6
            X509v3 Authority Key Identifier:
                keyid:83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:fa:89:30:23:10:e2:2b:da:fd:4f:20:cc:0b:0a:2a:6a:2e:
         a6:ef:00:88:79:b4:72:93:a2:e1:3e:0e:94:4a:e4:93:c2:af:
         c2:99:89:63:21:c5:eb:ed:35:50:de:dc:2d:51:50:c1:49:e0:
         34:05:d3:3f:56:a0:a8:16:e3:e6:2d:3f:51:7a:6c:ab:a6:6a:
         9d:4b:d1:3e:d4:23:01:0b:c7:14:1d:a9:c9:1b:f8:57:86:a6:
         16:dc:1c:ab:f4:1b:47:4e:82:11:e2:14:58:93:e6:39:0b:53:
         3e:b9:d0:01:35:b9:08:22:15:8a:0b:a3:eb:38:12:77:e8:32:
         6c:ef:89:ad:58:6b:2d:02:06:2e:a8:13:c3:2b:a3:cc:1c:58:
         21:b4:21:32:cd:ae:70:a0:2a:36:7c:23:6e:44:60:f2:a4:05:
         45:c6:aa:f1:b4:76:27:14:ab:64:24:95:5a:6e:93:ab:08:db:
         ed:f1:c4:22:04:34:06:c1:37:7b:b5:a1:f5:a1:43:45:89:83:
         9f:17:f0:4d:a0:ce:08:ff:a1:2e:31:23:62:58:a9:cb:6a:c8:
         1b:0f:8e:a5:91:51:71:24:80:a1:89:bd:08:3d:25:6e:47:43:
         ed:33:e4:a4:95:2e:7c:f0:68:c4:34:05:45:5d:c0:af:82:88:
         3c:4f:d1:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZamwgUNSnGvSAkHIUZp0v99MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMTI0ZDA0MTFhMjBmZDJiYjU0Njk3MGVhODAxMTZlZjI3
NmRiYWIwHhcNMjUwNTA2MTgwMDU1WhcNMjUwNTA3MTgwMDU1WjAzMTEwLwYDVQQD
EyhkN2JiOTIzZTc1OTE5ZmVhYTExZTU0YzFjMGU1NmRjODcxNWU0YmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6yvClAOHqh5hN2PFP4emZp/dYph
8T4irBkINcFT9VR0o+wIiUEO+JTnfR2+ocp67UsN346G6S55Ds9SvVtVAZmjuZ21
6f0r87ph2UqIw0EOOzyHP7LYILC1eZUU7QKL4zsgBQH1v5/EGxhwGeVbfrpv0kuw
tbssD2CC62kFw5joFgkdUgt+YJSccMZ1Ilw5n9R+26leqigJzOfOcvT49fW8jhny
zn7WSuylhikgAcgxUu3v5dFS8Bv3tB8APJ8+rkSKPXeqoYKD+agdk9IiV4Xr3NxI
5VV1sCFLO1qJILpKjYFQvudRIWkpyG9uukH90gV2oIn8KpPTgtca7s1YgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNe7kj51kZ/qoR5UwcDlbchxXkvGMB8GA1UdIwQY
MBaAFIMSTQQRog/Su1RpcOqAEW7ydturMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYzdiMmUtMjQyYS00MzM2LWIwZmIt
ZmNmMGYxNTk0ZDJmLzEvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yYzdiMmUtMjQyYS00MzM2LWIwZmItZmNmMGYxNTk0ZDJm
LzEvZ3hKTkJCR2lEOUs3VkdsdzZvQVJidkoyMjZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvqJMCMQ
4iva/U8gzAsKKmoupu8AiHm0cpOi4T4OlErkk8KvwpmJYyHF6+01UN7cLVFQwUng
NAXTP1agqBbj5i0/UXpsq6ZqnUvRPtQjAQvHFB2pyRv4V4amFtwcq/QbR06CEeIU
WJPmOQtTPrnQATW5CCIViguj6zgSd+gybO+JrVhrLQIGLqgTwyujzBxYIbQhMs2u
cKAqNnwjbkRg8qQFRcaq8bR2JxSrZCSVWm6Tqwjb7fHEIgQ0BsE3e7Wh9aFDRYmD
nxfwTaDOCP+hLjEjYlipy2rIGw+OpZFRcSSAoYm9CD0lbkdD7TPkpJUufPBoxDQF
RV3Ar4KIPE/RyA==
-----END CERTIFICATE-----
Generated at Wed May 7 03:00:21 2025 by rpki-client