Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.mft
File:                     gyhvptp9JS54KPhJI_VZGRQrAH8.mft (raw, json)
Hash identifier:          QJvXowccOeg9qXJCzRW4D3O0jaCJ0OtjU31HNa7wbns=
Subject key identifier:   A7:57:A3:42:04:3D:BD:75:AB:09:71:8A:6D:6B:3C:A8:AD:9D:25:3B
Authority key identifier: 83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
Certificate issuer:       /CN=83286fa6da7d252e7828f84923f55919142b007f
Certificate serial:       0196A49C76B77E1B91F75D5D733B04D5809E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.mft
Manifest number:          1529
Signing time:             Tue 06 May 2025 08:00:39 +0000
Manifest this update:     Tue 06 May 2025 08:00:39 +0000
Manifest next update:     Wed 07 May 2025 08:00:39 +0000
Files and hashes:         1: 2Fa9I4eMPzfo939SHVylXbzPrz8.roa (hash: nGUhV51P4Xt7y4WWujwqar1e4qSQSqC/VceFTeZqU6Y=)
                          2: ZMF2Y9q561kXaTBQ4t89zr0lDYc.roa (hash: UdPY/zqbZWjWwLmgxqb4FQw1KPzVA4rF4zGBmlupa9U=)
                          3: eXq8qqCVTUpurhrwMS76Ftfg2Xw.roa (hash: BYkfcjQqotFe4I9Ab8fvUQ8zQzC2L9Hl2RpFT9l1Q4M=)
                          4: gyhvptp9JS54KPhJI_VZGRQrAH8.crl (hash: EOM01AoWt7DyhHve3bGyNZ2c7rSiTJ0QFAv2xSVLszw=)
                          5: zbHf3SPKUQqKlSY2p0HB9p9XL90.roa (hash: csBeTbNKWq57qRnNo/tNdPyrIrtIdDZKmu8r42Yia8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a4:9c:76:b7:7e:1b:91:f7:5d:5d:73:3b:04:d5:80:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83286fa6da7d252e7828f84923f55919142b007f
        Validity
            Not Before: May  6 08:00:39 2025 GMT
            Not After : May  7 08:00:39 2025 GMT
        Subject: CN=a757a342043dbd75ab09718a6d6b3ca8ad9d253b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b3:9f:7c:3f:19:34:84:8e:6d:66:72:58:c7:
                    b0:39:36:0c:2b:31:a6:2e:77:3d:1c:c6:d5:a4:b4:
                    5d:b0:b7:cc:6a:40:aa:44:ef:d8:7d:8f:9a:45:06:
                    83:9b:12:fa:e4:72:f3:5a:23:75:b4:4f:42:8c:77:
                    45:3d:1f:b2:56:3b:87:f9:7a:fa:d1:91:01:0a:f6:
                    cb:2d:64:76:f1:6f:96:fa:9a:6b:8e:76:60:c4:c0:
                    49:a1:a5:ef:3c:4c:94:60:fd:67:74:32:a2:62:28:
                    9f:bc:9b:d3:15:75:ca:ce:ca:60:27:5c:d9:16:f2:
                    54:25:f4:59:9d:d8:b3:a7:c6:bc:8f:17:92:04:5e:
                    20:c8:ca:da:c0:19:ed:ff:f1:a2:fe:c6:fb:95:d4:
                    77:cf:fa:9e:75:8e:42:f1:9f:72:d1:8d:ce:b9:ef:
                    b1:a9:63:e1:ea:6b:94:d5:c8:45:2a:71:81:8c:08:
                    fc:1a:43:26:3d:db:64:00:fa:7f:17:70:aa:b4:a0:
                    5e:2a:8b:df:03:29:ab:bc:d1:1a:69:af:ad:32:fa:
                    55:0f:56:26:6a:ec:d0:d3:2a:f3:86:c4:c2:b1:ed:
                    38:70:88:5e:10:5b:fb:0f:3a:b6:74:b2:3a:0b:aa:
                    98:5a:ba:ad:61:34:4d:69:bb:f0:1e:59:cd:74:d7:
                    55:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:57:A3:42:04:3D:BD:75:AB:09:71:8A:6D:6B:3C:A8:AD:9D:25:3B
            X509v3 Authority Key Identifier:
                keyid:83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:71:61:e5:8d:d8:23:d8:4f:d5:75:21:8a:a2:ab:6a:31:e8:
         0a:ce:d7:33:50:55:61:47:35:30:89:27:67:47:e1:54:0b:ca:
         c7:ef:fa:58:f8:4c:69:08:53:76:fe:da:be:65:1f:d6:11:a5:
         47:8f:dd:8e:5d:2f:3d:ee:d1:f8:3b:df:5f:6a:05:84:f3:e6:
         96:1a:b5:14:78:27:93:ff:5d:7f:62:54:87:07:a4:c1:f7:8d:
         e8:04:c8:88:7a:1b:80:fe:24:40:5c:92:ee:4b:31:e1:fa:ac:
         e1:5a:2c:bd:13:9f:82:08:92:02:38:f8:2e:83:4e:a8:e8:96:
         5c:63:6a:d2:14:0c:46:23:ed:73:13:83:92:ee:40:5a:f3:4f:
         ea:9f:45:97:75:98:3b:c6:4e:80:37:62:1a:7b:da:52:b2:d3:
         f0:52:62:22:89:ce:d4:ed:4d:31:55:f2:35:3b:0c:ba:1f:c7:
         af:3a:a2:cb:fc:13:b5:c6:cd:85:6d:67:e5:0d:0b:a3:50:55:
         15:fc:9c:bf:ca:10:35:3c:21:06:f6:c9:1a:bf:f4:ea:b7:55:
         7e:88:6f:e4:03:f4:fd:39:0a:21:f4:2b:4f:f6:93:07:0e:2a:
         e9:c3:4c:79:00:f7:f6:90:b7:fa:fb:fb:55:5b:64:fb:f6:8b:
         5a:4f:0d:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaknHa3fhuR911dczsE1YCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMjg2ZmE2ZGE3ZDI1MmU3ODI4Zjg0OTIzZjU1OTE5MTQy
YjAwN2YwHhcNMjUwNTA2MDgwMDM5WhcNMjUwNTA3MDgwMDM5WjAzMTEwLwYDVQQD
EyhhNzU3YTM0MjA0M2RiZDc1YWIwOTcxOGE2ZDZiM2NhOGFkOWQyNTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbOffD8ZNISObWZyWMewOTYMKzGm
Lnc9HMbVpLRdsLfMakCqRO/YfY+aRQaDmxL65HLzWiN1tE9CjHdFPR+yVjuH+Xr6
0ZEBCvbLLWR28W+W+pprjnZgxMBJoaXvPEyUYP1ndDKiYiifvJvTFXXKzspgJ1zZ
FvJUJfRZndizp8a8jxeSBF4gyMrawBnt//Gi/sb7ldR3z/qedY5C8Z9y0Y3Oue+x
qWPh6muU1chFKnGBjAj8GkMmPdtkAPp/F3CqtKBeKovfAymrvNEaaa+tMvpVD1Ym
auzQ0yrzhsTCse04cIheEFv7Dzq2dLI6C6qYWrqtYTRNabvwHlnNdNdVnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdXo0IEPb11qwlxim1rPKitnSU7MB8GA1UdIwQY
MBaAFIMob6bafSUueCj4SSP1WRkUKwB/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3lodnB0cDlKUzU0S1BoSklfVlpHUlFyQUg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lYzU4M2QtMWFiYS00Nzk4LTg4MTct
ZDZjOWM2ZTg2OTIzLzEvZ3lodnB0cDlKUzU0S1BoSklfVlpHUlFyQUg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9lYzU4M2QtMWFiYS00Nzk4LTg4MTctZDZjOWM2ZTg2OTIz
LzEvZ3lodnB0cDlKUzU0S1BoSklfVlpHUlFyQUg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHFh5Y3Y
I9hP1XUhiqKrajHoCs7XM1BVYUc1MIknZ0fhVAvKx+/6WPhMaQhTdv7avmUf1hGl
R4/djl0vPe7R+DvfX2oFhPPmlhq1FHgnk/9df2JUhwekwfeN6ATIiHobgP4kQFyS
7ksx4fqs4VosvROfggiSAjj4LoNOqOiWXGNq0hQMRiPtcxODku5AWvNP6p9Fl3WY
O8ZOgDdiGnvaUrLT8FJiIonO1O1NMVXyNTsMuh/Hrzqiy/wTtcbNhW1n5Q0Lo1BV
Ffycv8oQNTwhBvbJGr/06rdVfohv5AP0/TkKIfQrT/aTBw4q6cNMeQD39pC3+vv7
VVtk+/aLWk8Nvw==
-----END CERTIFICATE-----
Generated at Tue May 6 18:50:23 2025 by rpki-client