Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
File:                     GYC7us-p483M9sDpNTYaerJ9oU0.mft (raw, json)
Hash identifier:          9dFmMEPlAZ0pCxHF4ypMaJFCybaW1nPwUFhkas60OIg=
Subject key identifier:   6F:2C:AD:FB:51:52:F8:66:3E:1A:15:81:77:B3:86:39:A4:E7:0E:86
Authority key identifier: 19:80:BB:BA:CF:A9:E3:CD:CC:F6:C0:E9:35:36:1A:7A:B2:7D:A1:4D
Certificate issuer:       /CN=1980bbbacfa9e3cdccf6c0e935361a7ab27da14d
Certificate serial:       0197B77C1FABCCD0A5E36E022C8AF2275A32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 17:00:54 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:54 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:54 +0000
Files and hashes:         1: Da6dAF-NGphy1zgRhDQ05RyQ1mQ.roa (hash: R5La2aCfCSDGzXotldIBaostZmuzpfxF11D1+dvqQ6Q=)
                          2: GYC7us-p483M9sDpNTYaerJ9oU0.crl (hash: /kGR/73joq4BPtpcDapMwWSpquOpEuEKkJj9xPucwZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:1f:ab:cc:d0:a5:e3:6e:02:2c:8a:f2:27:5a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1980bbbacfa9e3cdccf6c0e935361a7ab27da14d
        Validity
            Not Before: Jun 28 17:00:54 2025 GMT
            Not After : Jun 29 17:00:54 2025 GMT
        Subject: CN=6f2cadfb5152f8663e1a158177b38639a4e70e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:40:59:f7:3f:09:c3:f8:01:b6:c8:ae:e2:53:
                    8d:13:52:e6:7d:d9:54:59:81:a9:74:66:16:d1:ab:
                    ae:51:1e:3d:a1:ec:34:44:86:e6:80:8d:c7:de:92:
                    dd:bc:5c:87:59:d7:7a:e5:79:d7:69:e8:02:25:60:
                    38:23:51:93:4e:e9:44:2e:b9:f6:78:b5:2e:4c:c5:
                    32:3b:e8:a9:21:9a:33:58:cb:63:7c:f3:9a:0b:a4:
                    33:db:8e:84:e8:c9:49:20:28:01:d8:40:83:0b:fc:
                    94:50:68:27:13:86:5f:de:b6:47:ff:d9:08:0d:04:
                    aa:b3:c9:b1:2f:ce:31:c6:28:bd:33:cc:89:0e:f1:
                    5f:29:7b:c8:21:6e:06:91:9e:1e:4b:51:a6:ff:42:
                    c9:9c:f4:17:62:38:eb:b9:fb:0b:d7:2a:2d:ad:99:
                    af:03:0e:5d:98:d7:86:d0:6e:0a:da:ce:1e:0f:b5:
                    15:86:02:3c:4a:24:25:05:6c:63:c5:11:ed:fb:65:
                    40:a3:08:2f:22:4d:df:3e:20:62:27:2f:5d:7f:4d:
                    fd:97:db:64:14:05:61:90:4f:d8:4d:9d:fd:33:b1:
                    7a:13:df:b1:97:40:7d:ec:b8:d5:26:35:1b:78:82:
                    c7:ec:9d:d1:14:1c:24:bd:77:0d:af:0a:f7:b6:67:
                    28:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2C:AD:FB:51:52:F8:66:3E:1A:15:81:77:B3:86:39:A4:E7:0E:86
            X509v3 Authority Key Identifier:
                keyid:19:80:BB:BA:CF:A9:E3:CD:CC:F6:C0:E9:35:36:1A:7A:B2:7D:A1:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b2:1e:7d:12:96:a0:1e:d9:de:fe:41:bb:53:1b:a3:d1:0e:
         a5:a3:a2:44:c0:e8:c9:d0:34:c8:7d:ac:ae:1d:cc:1d:83:d2:
         46:bc:a5:5d:45:db:21:75:5d:6d:e3:e1:be:ee:19:c0:68:9e:
         c7:e6:fb:4f:c8:47:d7:4b:3d:57:2b:e2:ed:9e:4f:37:e0:e3:
         67:8f:a5:61:e6:b8:ec:19:79:fe:7c:b3:0d:1a:7f:e4:ae:3e:
         0e:8d:3a:f3:06:76:56:46:a7:b1:e6:85:b9:f7:4d:4b:9e:9d:
         93:80:c5:d3:75:b7:b5:00:ef:e8:31:0a:f9:ad:04:2a:37:91:
         37:b2:05:de:d0:80:74:2c:1d:1e:24:04:f2:50:42:9f:3b:b3:
         4a:06:51:20:c1:b8:57:62:16:6c:83:cb:ab:56:d8:a4:95:ef:
         ad:0f:6b:a0:e5:10:58:e3:85:ac:b0:2c:5a:98:bc:b9:ce:c6:
         40:ef:4d:48:1c:22:c4:21:2c:68:05:a9:16:73:1c:e3:07:8c:
         93:06:9d:d1:50:4b:58:33:ad:8e:af:7d:f0:c5:85:38:a2:95:
         11:d2:d5:a2:98:79:e2:56:bc:e2:da:6a:40:0b:4c:72:36:a4:
         41:e5:a0:5e:56:3d:d3:1f:91:94:11:06:89:81:b7:74:4d:3e:
         93:74:c3:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fB+rzNCl424CLIryJ1oyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ODBiYmJhY2ZhOWUzY2RjY2Y2YzBlOTM1MzYxYTdhYjI3
ZGExNGQwHhcNMjUwNjI4MTcwMDU0WhcNMjUwNjI5MTcwMDU0WjAzMTEwLwYDVQQD
Eyg2ZjJjYWRmYjUxNTJmODY2M2UxYTE1ODE3N2IzODYzOWE0ZTcwZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0BZ9z8Jw/gBtsiu4lONE1LmfdlU
WYGpdGYW0auuUR49oew0RIbmgI3H3pLdvFyHWdd65XnXaegCJWA4I1GTTulELrn2
eLUuTMUyO+ipIZozWMtjfPOaC6Qz246E6MlJICgB2ECDC/yUUGgnE4Zf3rZH/9kI
DQSqs8mxL84xxii9M8yJDvFfKXvIIW4GkZ4eS1Gm/0LJnPQXYjjrufsL1yotrZmv
Aw5dmNeG0G4K2s4eD7UVhgI8SiQlBWxjxRHt+2VAowgvIk3fPiBiJy9df039l9tk
FAVhkE/YTZ39M7F6E9+xl0B97LjVJjUbeILH7J3RFBwkvXcNrwr3tmcocQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8srftRUvhmPhoVgXezhjmk5w6GMB8GA1UdIwQY
MBaAFBmAu7rPqePNzPbA6TU2GnqyfaFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1lDN3VzLXA0ODNNOXNEcE5UWWFlcko5b1UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80NzY1ZTgtNjFiOC00MGM3LTg0N2Yt
ZGNjZTBjOWY0ZDk0LzEvR1lDN3VzLXA0ODNNOXNEcE5UWWFlcko5b1UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny80NzY1ZTgtNjFiOC00MGM3LTg0N2YtZGNjZTBjOWY0ZDk0
LzEvR1lDN3VzLXA0ODNNOXNEcE5UWWFlcko5b1UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLIefRKW
oB7Z3v5Bu1Mbo9EOpaOiRMDoydA0yH2srh3MHYPSRrylXUXbIXVdbePhvu4ZwGie
x+b7T8hH10s9Vyvi7Z5PN+DjZ4+lYea47Bl5/nyzDRp/5K4+Do068wZ2VkanseaF
ufdNS56dk4DF03W3tQDv6DEK+a0EKjeRN7IF3tCAdCwdHiQE8lBCnzuzSgZRIMG4
V2IWbIPLq1bYpJXvrQ9roOUQWOOFrLAsWpi8uc7GQO9NSBwixCEsaAWpFnMc4weM
kwad0VBLWDOtjq998MWFOKKVEdLVoph54la84tpqQAtMcjakQeWgXlY90x+RlBEG
iYG3dE0+k3TDIA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:58:00 2025 by rpki-client