Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
File:                     gV_CISVyYlbWo189oo91E90xwf4.mft (raw, json)
Hash identifier:          4mLQDF67ZXg6/3FvtCkORbcpTFr2aD7sz4kLYK3QBns=
Subject key identifier:   92:E5:EE:BF:BB:81:36:9C:B5:68:8F:B0:8A:F3:AA:EE:0E:C4:FE:90
Authority key identifier: 81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE
Certificate issuer:       /CN=815fc22125726256d6a35f3da28f7513dd31c1fe
Certificate serial:       0196A3531E92D70D4666B8F42EE482177706
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
Manifest number:          14B7
Signing time:             Tue 06 May 2025 02:00:55 +0000
Manifest this update:     Tue 06 May 2025 02:00:55 +0000
Manifest next update:     Wed 07 May 2025 02:00:55 +0000
Files and hashes:         1: aBrEW06-xKv77MgMEwK2_lYbz-I.roa (hash: RP6KdM7YV2WY/3+umq6rKSdZ3FIW7gCCmbirjcfrx/0=)
                          2: gV_CISVyYlbWo189oo91E90xwf4.crl (hash: QntIEw/Gz+0BVjww8gyTo6wOxoIOm/1LtCueyqxl89Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:53:1e:92:d7:0d:46:66:b8:f4:2e:e4:82:17:77:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815fc22125726256d6a35f3da28f7513dd31c1fe
        Validity
            Not Before: May  6 02:00:55 2025 GMT
            Not After : May  7 02:00:55 2025 GMT
        Subject: CN=92e5eebfbb81369cb5688fb08af3aaee0ec4fe90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:de:ec:b9:27:c9:fa:40:9b:42:30:f9:23:3b:
                    ec:25:9d:71:18:ff:b6:cd:f1:c2:6e:09:6d:62:f2:
                    5d:fd:57:30:54:64:ef:53:02:a4:40:c9:f6:24:a0:
                    fd:d5:8c:a8:79:85:0d:83:be:c7:2d:bd:5d:4b:61:
                    64:7e:8b:0f:48:90:80:98:6b:6a:8f:f1:62:a9:20:
                    1f:b0:d1:16:02:bf:95:5c:1a:a6:08:ba:73:3c:c8:
                    cc:a0:65:cf:f5:11:40:bb:28:7a:9a:04:ee:77:52:
                    9c:0e:b3:6a:5e:ac:a0:d5:3c:80:fb:61:c7:92:37:
                    62:e5:37:55:01:9f:84:32:b3:c4:6e:84:d2:80:6d:
                    af:06:3c:ae:1e:d5:ec:d3:2a:4a:fe:d4:9c:89:fb:
                    de:83:5b:46:34:c9:56:39:07:6c:f5:24:62:2b:ea:
                    48:d7:61:6d:8b:ce:fe:4a:60:42:de:c0:f8:b6:b5:
                    67:76:53:e3:a2:85:5d:78:b6:75:55:f2:87:90:c1:
                    26:a8:04:53:4c:cc:bf:b4:73:16:b9:de:c1:56:c9:
                    57:ae:15:81:ba:94:3f:44:79:08:f6:a6:4e:d9:15:
                    a4:df:8d:2a:b2:d4:ef:64:fe:dc:6c:cc:47:c4:82:
                    3d:77:04:2c:0e:a6:65:6f:ad:46:dd:32:bb:26:ac:
                    65:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E5:EE:BF:BB:81:36:9C:B5:68:8F:B0:8A:F3:AA:EE:0E:C4:FE:90
            X509v3 Authority Key Identifier:
                keyid:81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:09:1b:d9:5d:e4:c9:64:bf:74:47:ea:b8:7d:f4:95:c1:2b:
         c4:7e:89:c3:11:7c:b7:57:21:b5:b1:a3:00:bf:9e:9c:2a:11:
         45:9b:1a:c5:b1:b6:e9:48:82:9b:57:09:cb:bb:e3:02:99:6b:
         e2:31:af:4a:34:88:e6:36:4b:58:92:ce:e4:3b:37:fa:9b:07:
         bf:30:38:40:03:ab:f2:fa:a4:76:f5:4e:ed:c2:4e:f2:f0:ad:
         a6:dd:34:9b:60:47:30:0f:dc:88:6b:12:ab:fa:e7:b2:f3:4b:
         33:1e:be:4e:72:a8:66:50:62:c0:42:6c:49:fd:22:52:d1:d2:
         34:49:19:d8:a9:6e:f4:1f:09:30:8b:1d:d4:7d:64:af:61:de:
         4a:12:1f:c6:65:52:d2:1c:33:ce:5a:89:ed:2d:a9:e6:97:be:
         72:f9:25:49:e2:5b:4f:11:3a:f7:04:0d:17:b6:02:69:3c:6c:
         3c:51:3b:f4:a9:b2:ca:2f:5f:a9:e2:3b:9c:85:ff:85:1e:18:
         17:b0:5f:0c:c7:81:92:ec:24:43:3c:b9:2b:51:c6:4c:8e:dd:
         d8:d9:b9:1e:d4:8d:69:6c:ec:56:74:21:a2:c9:9b:19:5a:8e:
         f1:c2:ff:88:83:aa:9f:a5:5c:85:39:83:dc:e5:af:92:35:64:
         46:d1:13:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:23:30 2025 by rpki-client