Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
File:                     GyHb_7GS4UkZz-J4a69EhAw6yjw.mft (raw, json)
Hash identifier:          nyY+9lmlCfGQsZUj7tzxLI4RRhzNwicbSg2HA9uEhwQ=
Subject key identifier:   82:10:30:48:AE:17:90:07:18:55:3F:56:03:03:C2:2C:84:31:F3:F2
Authority key identifier: 1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C
Certificate issuer:       /CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
Certificate serial:       0197B58E703C5AA173477532E5C6E481391C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
Manifest number:          15B8
Signing time:             Sat 28 Jun 2025 08:01:40 +0000
Manifest this update:     Sat 28 Jun 2025 08:01:40 +0000
Manifest next update:     Sun 29 Jun 2025 08:01:40 +0000
Files and hashes:         1: GyHb_7GS4UkZz-J4a69EhAw6yjw.crl (hash: akbX7zXMgsWMvyG/8eH5hwV262C52i5i8TZnWP/79fc=)
                          2: mvqabtX_vOansql-seMJOhDdwZw.roa (hash: P/IUoSGGXtH4YQtiGD2MIqmKWkm8ZG7EDvQk/wJS+50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 08:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:8e:70:3c:5a:a1:73:47:75:32:e5:c6:e4:81:39:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b21dbffb192e14919cfe2786baf44840c3aca3c
        Validity
            Not Before: Jun 28 08:01:40 2025 GMT
            Not After : Jun 29 08:01:40 2025 GMT
        Subject: CN=82103048ae17900718553f560303c22c8431f3f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ee:52:06:99:b2:72:86:48:c0:5e:99:82:77:
                    5f:73:5a:15:d2:cf:c0:62:0a:a3:09:ff:07:39:dd:
                    dc:89:52:ae:b6:f3:d0:cd:56:51:dc:bb:c7:55:ab:
                    bb:3d:fe:cf:a7:1c:dc:ce:8e:1a:20:82:f7:13:5e:
                    25:ab:f6:4e:b1:f0:28:27:84:e3:d8:1d:56:7c:ee:
                    df:27:a7:ab:9a:de:ba:a9:d7:41:b3:e5:e2:51:5e:
                    aa:f1:5c:62:7a:3b:ba:1a:90:00:9b:35:56:d3:ad:
                    3e:65:28:c4:46:c3:14:4e:75:d2:67:a1:4c:66:95:
                    0c:5b:97:7f:e5:7d:d3:d0:d6:29:9a:7c:26:11:b6:
                    28:51:db:91:a9:14:5e:ec:dd:36:32:2a:0f:7b:2e:
                    e1:9e:55:24:95:34:14:ea:9a:94:fe:db:7e:b1:b3:
                    db:66:af:57:50:63:eb:51:45:be:9b:c7:f2:b4:a1:
                    17:be:20:0d:91:ad:92:23:4a:c7:31:ab:3d:db:3b:
                    9e:f6:4c:70:8a:9c:90:d2:87:1b:77:ea:10:39:9f:
                    d5:5d:47:7b:77:50:62:96:aa:79:2c:36:a7:36:a1:
                    4f:39:01:12:9e:7a:8f:59:b8:68:f2:32:3a:ff:60:
                    64:b9:1c:9c:e1:b3:aa:18:a5:90:9b:f5:75:53:32:
                    53:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:10:30:48:AE:17:90:07:18:55:3F:56:03:03:C2:2C:84:31:F3:F2
            X509v3 Authority Key Identifier:
                keyid:1B:21:DB:FF:B1:92:E1:49:19:CF:E2:78:6B:AF:44:84:0C:3A:CA:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyHb_7GS4UkZz-J4a69EhAw6yjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/066221-0eeb-42d9-9c07-fc69e0bca622/1/GyHb_7GS4UkZz-J4a69EhAw6yjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:be:d5:99:a9:90:9a:d4:14:12:73:4d:ae:c6:55:f2:23:9a:
         d4:42:82:cf:e0:b1:74:5e:d6:db:fe:21:78:06:ad:43:3e:ec:
         91:21:fb:4c:eb:3e:c0:b1:03:6c:b7:65:9e:3d:7f:15:72:64:
         9b:4f:05:a1:1d:4f:ec:ac:09:e8:4c:6e:1b:ef:d3:60:f0:69:
         7f:38:67:6e:ac:4d:19:19:48:b1:b8:3f:5c:38:65:68:4d:4e:
         7a:4e:91:17:c1:1e:02:ac:70:d4:2e:de:3b:e1:1b:8b:d1:23:
         94:da:22:77:a6:13:56:73:ba:26:c4:e7:64:dd:a8:bb:06:0b:
         bd:84:f7:be:95:01:66:07:69:75:a3:15:e9:d3:fe:a9:5b:0a:
         02:fd:a3:3d:8a:79:70:4f:43:75:cc:36:e5:f3:6d:47:de:4d:
         c7:46:13:ce:2e:84:98:bf:04:b9:6c:ef:ea:ee:fb:6e:ef:9f:
         79:a1:f1:d9:1b:e2:56:19:92:b5:46:d5:e7:55:01:70:e0:6a:
         3c:3c:60:f5:b0:36:cf:2c:7b:6a:bf:4c:95:67:b1:5c:85:84:
         f5:71:75:aa:00:63:39:4c:33:88:f9:3d:e6:24:a8:06:34:9b:
         b8:5a:52:75:b8:7f:b9:4f:09:29:13:72:41:c2:f3:c7:86:16:
         f9:e1:ec:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1jnA8WqFzR3Uy5cbkgTkcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMjFkYmZmYjE5MmUxNDkxOWNmZTI3ODZiYWY0NDg0MGMz
YWNhM2MwHhcNMjUwNjI4MDgwMTQwWhcNMjUwNjI5MDgwMTQwWjAzMTEwLwYDVQQD
Eyg4MjEwMzA0OGFlMTc5MDA3MTg1NTNmNTYwMzAzYzIyYzg0MzFmM2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO5SBpmycoZIwF6Zgndfc1oV0s/A
YgqjCf8HOd3ciVKutvPQzVZR3LvHVau7Pf7Ppxzczo4aIIL3E14lq/ZOsfAoJ4Tj
2B1WfO7fJ6ermt66qddBs+XiUV6q8Vxieju6GpAAmzVW060+ZSjERsMUTnXSZ6FM
ZpUMW5d/5X3T0NYpmnwmEbYoUduRqRRe7N02MioPey7hnlUklTQU6pqU/tt+sbPb
Zq9XUGPrUUW+m8fytKEXviANka2SI0rHMas92zue9kxwipyQ0ocbd+oQOZ/VXUd7
d1Bilqp5LDanNqFPOQESnnqPWbho8jI6/2BkuRyc4bOqGKWQm/V1UzJTFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIQMEiuF5AHGFU/VgMDwiyEMfPyMB8GA1UdIwQY
MBaAFBsh2/+xkuFJGc/ieGuvRIQMOso8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3lIYl83R1M0VWtaei1KNGE2OUVoQXc2eWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8wNjYyMjEtMGVlYi00MmQ5LTljMDct
ZmM2OWUwYmNhNjIyLzEvR3lIYl83R1M0VWtaei1KNGE2OUVoQXc2eWp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8wNjYyMjEtMGVlYi00MmQ5LTljMDctZmM2OWUwYmNhNjIy
LzEvR3lIYl83R1M0VWtaei1KNGE2OUVoQXc2eWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUL7VmamQ
mtQUEnNNrsZV8iOa1EKCz+CxdF7W2/4heAatQz7skSH7TOs+wLEDbLdlnj1/FXJk
m08FoR1P7KwJ6ExuG+/TYPBpfzhnbqxNGRlIsbg/XDhlaE1Oek6RF8EeAqxw1C7e
O+Ebi9EjlNoid6YTVnO6JsTnZN2ouwYLvYT3vpUBZgdpdaMV6dP+qVsKAv2jPYp5
cE9Ddcw25fNtR95Nx0YTzi6EmL8EuWzv6u77bu+feaHx2RviVhmStUbV51UBcOBq
PDxg9bA2zyx7ar9MlWexXIWE9XF1qgBjOUwziPk95iSoBjSbuFpSdbh/uU8JKRNy
QcLzx4YW+eHsAw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:00 2025 by rpki-client