Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
File:                     GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft (raw, json)
Hash identifier:          jdf2BJNQaw03W6Mrhm6fPbsnUZEXLfJNwVRVvJhewRs=
Subject key identifier:   6A:C0:E1:96:B3:F8:BD:57:8D:FF:94:8B:4C:37:74:1D:1B:B4:AC:67
Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Certificate issuer:       /CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Certificate serial:       0196B8916C6EFF46E412C4C83838AE578232
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
Manifest number:          1537
Signing time:             Sat 10 May 2025 05:01:00 +0000
Manifest this update:     Sat 10 May 2025 05:01:00 +0000
Manifest next update:     Sun 11 May 2025 05:01:00 +0000
Files and hashes:         1: 1iYEgcqm-mVKBLd2WjzT59pt1Xw.roa (hash: ewHcbw+PNeGShWbnRhXrGjXtzrFjBvJAIqeP6DT6ZjQ=)
                          2: GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl (hash: 2jLeuqr0Sm3Q1UL+FWos8HyEiTNbZ6c3NJSI+QPxmaQ=)
                          3: _YBrb9GHmCpqMjy8GFwAvwaPx90.roa (hash: XWiWSnDHqy5A+xwKGiqSBQrfe6N7eyh2EySgoK4VNNw=)
                          4: lCgKihl6lv9I1HmInNqD60nii-E.roa (hash: +eRiAGt7XlmYsCebRhtIL5+eM1SWrg49PToO3o+8iRc=)
                          5: mmY1ARivIWLIbuStJrmVTjbcqd0.roa (hash: pdFIZbB/0pJ15uLsSovmly6F7hKCHQG6LxPg19m7f9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:91:6c:6e:ff:46:e4:12:c4:c8:38:38:ae:57:82:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
        Validity
            Not Before: May 10 05:01:00 2025 GMT
            Not After : May 11 05:01:00 2025 GMT
        Subject: CN=6ac0e196b3f8bd578dff948b4c37741d1bb4ac67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:13:bf:94:14:7e:e0:d0:23:3c:e8:dd:01:00:
                    40:e0:d4:1a:ea:91:25:0a:b3:1b:ec:1a:22:33:83:
                    69:b9:f3:ca:38:b8:1c:b8:8d:65:92:c1:44:57:eb:
                    51:1d:4f:a3:2a:16:37:23:44:b2:21:45:01:18:f9:
                    86:05:8f:86:96:8e:ff:01:88:eb:74:2d:4a:1d:10:
                    67:bf:c1:3e:d2:bb:f5:2a:8a:11:ad:33:fa:3d:07:
                    1e:7e:de:08:5d:8a:fe:b1:92:70:c4:89:16:45:c2:
                    1d:10:6b:dd:54:5d:ef:7c:b2:1d:87:5e:ce:cb:e9:
                    c2:c6:ff:55:29:32:e8:b6:c3:f2:35:e4:1b:78:71:
                    fe:97:29:0d:09:f4:04:36:f9:ce:35:65:46:08:50:
                    f8:11:ec:b0:c2:83:e8:a2:b2:f3:34:b0:71:bd:09:
                    71:06:00:3d:fb:f7:bc:b4:97:91:18:e1:d4:76:9e:
                    08:47:ad:62:97:ba:fe:ad:f2:36:6a:98:97:66:fe:
                    9b:6d:2c:70:36:2e:14:5b:95:00:95:14:21:b6:35:
                    21:e1:20:7e:f2:63:6f:6d:4c:1f:53:3d:dc:94:51:
                    66:05:be:82:2e:df:d2:85:96:41:7b:fd:f3:87:d8:
                    6a:a5:8e:a3:72:df:f0:f5:ca:b4:a0:23:4f:5e:55:
                    9f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C0:E1:96:B3:F8:BD:57:8D:FF:94:8B:4C:37:74:1D:1B:B4:AC:67
            X509v3 Authority Key Identifier:
                keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:23:fa:c2:5b:7c:8a:13:03:d0:9e:31:17:fc:38:40:7d:2a:
         c5:35:e4:e0:00:ed:c3:80:98:cf:ae:60:ef:20:50:dd:9a:68:
         53:5b:5d:25:76:bb:f6:43:a5:05:06:ff:6d:04:e2:6e:b5:34:
         7a:4a:b1:44:ae:58:4d:54:56:8f:58:0e:69:3f:5d:d2:81:0e:
         48:f6:df:74:b9:ee:50:d4:d3:c3:5a:4c:75:60:98:c9:09:f0:
         73:f8:98:0a:42:5a:bd:d9:d7:78:c1:a6:57:d9:a6:97:71:f2:
         3c:76:9d:3f:aa:6a:f3:06:a8:fe:29:96:90:88:cd:ea:6a:13:
         c5:70:d6:97:64:2c:96:6e:b7:4f:6f:f0:e2:98:a8:22:42:83:
         8c:c6:85:59:0e:5d:6a:8d:43:b5:53:f0:13:f2:06:4e:79:21:
         54:61:6e:d9:a4:63:fe:cf:69:4d:46:8d:c7:ad:46:a4:ff:47:
         58:cd:47:a3:d7:1a:06:82:19:7c:fb:84:58:f2:05:3c:93:5f:
         1b:96:44:4e:32:0a:ab:86:12:d8:d3:eb:e2:aa:c1:fc:1b:65:
         7b:95:f4:f7:17:3a:cd:ca:98:b2:89:23:53:21:84:f3:0e:e7:
         32:82:9c:ce:ca:3b:22:94:03:41:85:51:4f:ed:c5:04:04:ca:
         14:8b:13:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4kWxu/0bkEsTIODiuV4IyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MDRjZTI4ZWFlNjgyYzk3YWNkMmQ4NjJmZWUyODk3YzNi
MDk2ZmQwHhcNMjUwNTEwMDUwMTAwWhcNMjUwNTExMDUwMTAwWjAzMTEwLwYDVQQD
Eyg2YWMwZTE5NmIzZjhiZDU3OGRmZjk0OGI0YzM3NzQxZDFiYjRhYzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xO/lBR+4NAjPOjdAQBA4NQa6pEl
CrMb7BoiM4NpufPKOLgcuI1lksFEV+tRHU+jKhY3I0SyIUUBGPmGBY+Glo7/AYjr
dC1KHRBnv8E+0rv1KooRrTP6PQceft4IXYr+sZJwxIkWRcIdEGvdVF3vfLIdh17O
y+nCxv9VKTLotsPyNeQbeHH+lykNCfQENvnONWVGCFD4EeywwoPoorLzNLBxvQlx
BgA9+/e8tJeRGOHUdp4IR61il7r+rfI2apiXZv6bbSxwNi4UW5UAlRQhtjUh4SB+
8mNvbUwfUz3clFFmBb6CLt/ShZZBe/3zh9hqpY6jct/w9cq0oCNPXlWfxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrA4Zaz+L1Xjf+Ui0w3dB0btKxnMB8GA1UdIwQY
MBaAFBkEzijq5oLJes0thi/uKJfDsJb9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDkt
MTVkNWRlYjIyOGRkLzEvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDktMTVkNWRlYjIyOGRk
LzEvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyP6wlt8
ihMD0J4xF/w4QH0qxTXk4ADtw4CYz65g7yBQ3ZpoU1tdJXa79kOlBQb/bQTibrU0
ekqxRK5YTVRWj1gOaT9d0oEOSPbfdLnuUNTTw1pMdWCYyQnwc/iYCkJavdnXeMGm
V9mml3HyPHadP6pq8wao/imWkIjN6moTxXDWl2Qslm63T2/w4pioIkKDjMaFWQ5d
ao1DtVPwE/IGTnkhVGFu2aRj/s9pTUaNx61GpP9HWM1Ho9caBoIZfPuEWPIFPJNf
G5ZETjIKq4YS2NPr4qrB/Btle5X09xc6zcqYsokjUyGE8w7nMoKczso7IpQDQYVR
T+3FBATKFIsTfA==
-----END CERTIFICATE-----
Generated at Sat May 10 08:22:04 2025 by rpki-client