Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
File:                     gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft (raw, json)
Hash identifier:          NVdt57swyo+r0BmhP0eGZRDLLEKoxnXbwgFihSEy2DE=
Subject key identifier:   A0:76:29:1F:80:A8:15:A6:DA:08:B1:22:A2:3B:95:5B:1F:0E:F6:48
Authority key identifier: 82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1
Certificate issuer:       /CN=8293905afa134944f0630c949f3abda40646dac1
Certificate serial:       0196D62DCB8109E6EE12133120821CF1ED14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
Manifest number:          1542
Signing time:             Thu 15 May 2025 23:00:47 +0000
Manifest this update:     Thu 15 May 2025 23:00:47 +0000
Manifest next update:     Fri 16 May 2025 23:00:47 +0000
Files and hashes:         1: gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl (hash: O63PKL6U60tIrJX9a3ratkJUCAimHq94gIFItNr53i4=)
                          2: xqh-TDqxA6PFl_pLopVGhxzgy70.roa (hash: PFQ4rC1LE7WPTBJwr+kRgUbb+SgESq5u6lAAWw+3gVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d6:2d:cb:81:09:e6:ee:12:13:31:20:82:1c:f1:ed:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8293905afa134944f0630c949f3abda40646dac1
        Validity
            Not Before: May 15 23:00:47 2025 GMT
            Not After : May 16 23:00:47 2025 GMT
        Subject: CN=a076291f80a815a6da08b122a23b955b1f0ef648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9c:76:0b:66:76:84:a0:e9:8e:18:96:a4:95:
                    73:09:d0:89:f3:4f:b5:62:b0:7e:d9:a3:33:d4:eb:
                    76:68:47:1b:dc:3f:c0:12:b6:c4:00:d1:46:6f:07:
                    0c:2e:4a:2b:be:6f:a9:f0:d6:65:df:f0:77:b4:47:
                    ee:ae:44:87:2c:6f:f6:c1:a1:5f:42:dc:57:2e:34:
                    0a:85:e8:d9:9e:bf:35:22:90:f1:70:31:ce:71:c4:
                    cd:6b:16:f6:c7:0f:44:dc:76:f6:60:55:d9:ae:74:
                    7a:14:8e:9a:f4:50:47:e6:36:bc:ea:89:57:60:c9:
                    6b:77:47:f4:be:59:ab:73:54:71:70:48:4b:dd:bc:
                    cb:17:6d:3c:d9:36:6e:4a:b4:b1:75:13:b6:1c:5e:
                    35:6c:2b:c6:a6:23:ae:31:33:9f:c3:5f:94:f6:ae:
                    21:39:91:d3:e8:69:9e:04:43:e3:ab:b6:8c:8a:13:
                    98:07:e5:74:67:50:a4:47:1d:db:b1:11:11:e2:eb:
                    4d:d3:6d:73:67:b3:37:b3:44:6e:ed:f9:31:f4:3f:
                    49:d8:28:4f:e1:03:5d:f2:54:43:eb:6a:10:82:d7:
                    a2:0a:2a:f0:0f:af:52:f7:2b:66:ea:da:2e:7e:dd:
                    b8:2d:9a:1e:ae:89:39:5e:40:0c:a5:7f:5f:11:84:
                    a6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:76:29:1F:80:A8:15:A6:DA:08:B1:22:A2:3B:95:5B:1F:0E:F6:48
            X509v3 Authority Key Identifier:
                keyid:82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:77:3b:f8:3f:84:20:27:60:f3:0b:ea:60:fa:b1:67:82:bf:
         81:67:07:10:44:93:10:8d:9e:a0:91:ef:31:ff:f6:c1:ad:ab:
         91:e4:3c:86:3a:f3:05:d4:13:a3:c3:57:fe:91:21:c3:4d:44:
         31:c2:94:cd:4e:d5:89:f3:40:e6:d7:86:d8:2f:86:5d:e3:c0:
         b5:ce:ce:ac:52:e7:6e:cb:1f:02:78:fe:f9:71:89:9c:11:07:
         b1:ce:60:d9:fa:a5:79:39:12:1a:64:43:a7:ca:5c:57:45:6c:
         a5:a6:31:b5:f1:d9:70:47:e7:2b:39:a8:57:03:db:09:ab:cd:
         cf:d1:5d:a7:39:49:92:67:2f:4a:fc:30:98:69:fa:fc:c8:4f:
         1d:f7:39:33:24:e7:85:3c:20:2a:62:53:ed:7d:79:96:56:ab:
         ee:36:5c:d5:70:18:c7:82:a5:e2:9c:a4:00:45:a0:b7:62:b9:
         51:e3:f4:03:86:e0:81:47:0a:80:b7:fb:ff:8b:4e:5d:fb:38:
         51:35:b0:d3:37:01:45:03:03:91:5d:a9:dc:f4:8d:62:7f:b1:
         86:31:a8:3a:88:3d:e9:d2:a5:6d:ce:c2:20:38:cc:ec:43:e6:
         2e:bf:1e:fa:42:33:47:3c:53:45:63:ac:2a:98:b2:c2:61:7b:
         69:76:b6:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbWLcuBCebuEhMxIIIc8e0UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyOTM5MDVhZmExMzQ5NDRmMDYzMGM5NDlmM2FiZGE0MDY0
NmRhYzEwHhcNMjUwNTE1MjMwMDQ3WhcNMjUwNTE2MjMwMDQ3WjAzMTEwLwYDVQQD
EyhhMDc2MjkxZjgwYTgxNWE2ZGEwOGIxMjJhMjNiOTU1YjFmMGVmNjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5x2C2Z2hKDpjhiWpJVzCdCJ80+1
YrB+2aMz1Ot2aEcb3D/AErbEANFGbwcMLkorvm+p8NZl3/B3tEfurkSHLG/2waFf
QtxXLjQKhejZnr81IpDxcDHOccTNaxb2xw9E3Hb2YFXZrnR6FI6a9FBH5ja86olX
YMlrd0f0vlmrc1RxcEhL3bzLF2082TZuSrSxdRO2HF41bCvGpiOuMTOfw1+U9q4h
OZHT6GmeBEPjq7aMihOYB+V0Z1CkRx3bsRER4utN021zZ7M3s0Ru7fkx9D9J2ChP
4QNd8lRD62oQgteiCirwD69S9ytm6touft24LZoerok5XkAMpX9fEYSmQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKB2KR+AqBWm2gixIqI7lVsfDvZIMB8GA1UdIwQY
MBaAFIKTkFr6E0lE8GMMlJ86vaQGRtrBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3BPUVd2b1RTVVR3WXd5VW56cTlwQVpHMnNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9lMWMzNzMtNjRmOC00MjI2LTkwNDQt
ODEwOTVhMTNiOWRlLzEvZ3BPUVd2b1RTVVR3WXd5VW56cTlwQVpHMnNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9lMWMzNzMtNjRmOC00MjI2LTkwNDQtODEwOTVhMTNiOWRl
LzEvZ3BPUVd2b1RTVVR3WXd5VW56cTlwQVpHMnNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3c7+D+E
ICdg8wvqYPqxZ4K/gWcHEESTEI2eoJHvMf/2wa2rkeQ8hjrzBdQTo8NX/pEhw01E
McKUzU7VifNA5teG2C+GXePAtc7OrFLnbssfAnj++XGJnBEHsc5g2fqleTkSGmRD
p8pcV0VspaYxtfHZcEfnKzmoVwPbCavNz9FdpzlJkmcvSvwwmGn6/MhPHfc5MyTn
hTwgKmJT7X15llar7jZc1XAYx4Kl4pykAEWgt2K5UeP0A4bggUcKgLf7/4tOXfs4
UTWw0zcBRQMDkV2p3PSNYn+xhjGoOog96dKlbc7CIDjM7EPmLr8e+kIzRzxTRWOs
KpiywmF7aXa2pQ==
-----END CERTIFICATE-----
Generated at Fri May 16 06:31:52 2025 by rpki-client