Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
File:                     gcAMyMc9EUHIklTtVWqNASypAiY.mft (raw, json)
Hash identifier:          ZjRsLBqUAsnhcKf8A3z6WUB4p5KSzxXk96sZo+tGok8=
Subject key identifier:   68:49:CD:EE:90:22:9F:0A:7A:AB:A2:F5:34:DF:F9:6C:27:DE:FF:B3
Authority key identifier: 81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26
Certificate issuer:       /CN=81c00cc8c73d1141c89254ed556a8d012ca90226
Certificate serial:       0196DC2FC93233D8013798118504E276B77B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
Manifest number:          0791
Signing time:             Sat 17 May 2025 03:00:41 +0000
Manifest this update:     Sat 17 May 2025 03:00:41 +0000
Manifest next update:     Sun 18 May 2025 03:00:41 +0000
Files and hashes:         1: Oem3WDZnY6cSIaGyLYBEI1Ng_fU.roa (hash: A6c2c+PXtuhOYqewWMvzWTg68sLONrRYQPMKhm+zXUU=)
                          2: gcAMyMc9EUHIklTtVWqNASypAiY.crl (hash: UNyGrNf1S0ke2LISWwqzxjZRQJX36hj9m/oe4hcx8TY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 May 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:dc:2f:c9:32:33:d8:01:37:98:11:85:04:e2:76:b7:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c00cc8c73d1141c89254ed556a8d012ca90226
        Validity
            Not Before: May 17 03:00:41 2025 GMT
            Not After : May 18 03:00:41 2025 GMT
        Subject: CN=6849cdee90229f0a7aaba2f534dff96c27deffb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d4:b2:4d:6a:65:2c:a2:24:e3:0c:bc:af:41:
                    cf:84:8d:6c:45:58:6e:26:91:52:34:5e:d1:29:f2:
                    eb:5a:85:15:83:aa:a9:c9:e7:e4:7f:1e:bc:c7:d8:
                    62:9e:7d:4a:67:8e:4a:4a:31:61:bd:db:a6:1a:45:
                    0b:4f:a1:b8:ca:c8:8a:8b:e1:8c:9a:44:b3:ae:20:
                    51:cc:f1:11:5a:93:bd:bc:b4:5c:17:83:74:55:b4:
                    52:91:99:c9:b3:3f:79:2c:05:51:78:12:8a:89:85:
                    de:ea:f3:4c:61:73:3d:f5:e3:1c:4b:95:15:c7:71:
                    fe:27:3b:4b:a5:b7:d5:a3:52:48:14:53:cd:71:81:
                    ad:36:c8:b5:0b:71:00:28:45:c5:27:76:58:c3:80:
                    c4:3a:3f:06:4a:4d:cf:ed:60:43:ce:44:95:c1:fd:
                    be:8a:d3:a8:3f:ed:4f:d4:59:9e:82:16:af:9e:7a:
                    6c:60:9f:3e:a7:ca:03:7e:fb:f4:1b:86:c3:bc:d8:
                    e1:71:d8:2a:d0:66:8c:be:1a:35:36:5f:80:d5:65:
                    dd:5d:1b:53:e6:55:ee:25:2d:dd:db:06:ae:b5:66:
                    3a:3c:32:99:fe:99:ec:d3:5b:d4:7f:be:22:55:f0:
                    48:f1:53:fd:2f:b1:b2:cc:33:4e:b3:25:5c:1b:f8:
                    07:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:49:CD:EE:90:22:9F:0A:7A:AB:A2:F5:34:DF:F9:6C:27:DE:FF:B3
            X509v3 Authority Key Identifier:
                keyid:81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:97:f7:e6:63:9c:b5:cf:ff:55:a0:05:1f:e7:7f:b0:18:86:
         27:52:63:b2:9b:d0:ca:f2:19:50:45:0d:94:f4:45:04:e1:23:
         3e:1b:fe:ae:61:7f:75:8e:59:82:24:22:21:65:ff:9c:bd:33:
         71:36:f8:08:04:6f:dc:c6:bc:45:cf:fa:64:68:bb:c8:cc:18:
         1f:52:da:5a:70:39:10:c3:00:ab:67:60:2f:9d:30:2a:8e:31:
         55:61:b7:87:9f:b7:64:a6:74:44:c7:d1:a3:68:a2:db:dc:05:
         cb:83:74:77:6f:73:23:8e:e5:2b:31:42:02:dd:16:ae:09:dc:
         2e:4b:48:22:72:a1:41:51:81:8b:d7:07:7f:dd:7d:07:af:d6:
         3d:b7:89:a2:b7:f3:43:67:dd:d6:95:f4:f8:2e:d7:14:57:ca:
         f7:1f:43:49:c6:b1:cf:c9:fe:f2:8f:79:a8:52:29:d0:bd:f7:
         48:d1:d9:3e:e1:81:f3:f4:0e:34:43:2f:88:60:1d:0d:59:28:
         99:48:69:37:b5:f3:69:6e:ce:34:15:b5:88:c4:4a:98:c6:bb:
         9a:59:55:09:de:51:c5:cc:91:1d:f3:77:6c:04:11:18:9d:e7:
         b1:6b:81:e6:ed:86:1d:19:9c:83:e8:e7:cc:71:eb:02:e6:07:
         61:c1:6e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:27:53 2025 by rpki-client