Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
File:                     GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft (raw, json)
Hash identifier:          fx4TwHiDBX8Jg9ik/mp4TNAYO/TqmsuARfcLenk0W50=
Subject key identifier:   58:A0:05:FC:2F:9B:A8:B7:2E:69:FD:BE:39:DE:D6:74:07:B1:1B:4A
Authority key identifier: 1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6
Certificate issuer:       /CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6
Certificate serial:       0198D660800651D89971AD4977A5338403FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
Manifest number:          118E
Signing time:             Sat 23 Aug 2025 10:01:45 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:45 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:45 +0000
Files and hashes:         1: GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl (hash: yRRAxXmkY5gOQskZH5TVif2cP/w5QkqHfaCbulIxxR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:80:06:51:d8:99:71:ad:49:77:a5:33:84:03:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6
        Validity
            Not Before: Aug 23 10:01:45 2025 GMT
            Not After : Aug 24 10:01:45 2025 GMT
        Subject: CN=58a005fc2f9ba8b72e69fdbe39ded67407b11b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c4:b9:00:f9:9a:20:5b:b3:1f:95:6e:7d:52:
                    89:31:2e:f7:cb:5c:8b:b9:63:08:a0:40:c0:96:f2:
                    cf:9b:e0:10:37:cc:7b:5b:de:ba:0d:0b:1a:8b:c8:
                    e9:54:82:4a:4f:8b:5e:a0:6a:c4:df:a6:16:fd:4d:
                    be:99:63:88:1b:ad:7b:1c:a0:15:11:a8:38:92:40:
                    2e:94:88:b7:98:c8:bd:f1:86:a8:53:3d:5f:13:07:
                    fd:e4:7b:81:da:ea:69:34:a0:ec:a1:8a:8c:5f:52:
                    4e:aa:4d:68:d1:e8:9b:65:68:d3:3f:67:60:f6:73:
                    72:9c:fe:0f:fa:71:5b:65:7c:53:59:38:76:73:4b:
                    b1:e1:fd:5c:00:63:af:a4:68:38:52:81:f5:54:81:
                    ac:f3:07:6d:ba:84:f8:b1:a8:db:d4:da:a0:c5:d7:
                    d2:d8:ce:18:08:e9:cd:f2:fc:48:c4:19:e8:82:65:
                    87:12:f8:e0:a7:54:24:3f:9b:c7:e9:c8:61:12:6e:
                    18:75:02:ae:42:cf:39:2a:b2:84:cd:0d:b2:6c:3a:
                    25:63:28:51:07:bc:00:42:4c:fc:e1:e3:64:3f:74:
                    2c:3d:72:a9:75:5e:ec:5a:80:8e:31:b9:b7:30:29:
                    56:a1:92:05:98:4f:8e:91:19:df:88:54:9b:82:0c:
                    72:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A0:05:FC:2F:9B:A8:B7:2E:69:FD:BE:39:DE:D6:74:07:B1:1B:4A
            X509v3 Authority Key Identifier:
                keyid:1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:6f:c5:50:e8:62:fd:03:ac:e5:75:f6:1f:ab:bc:1e:5d:64:
         26:4f:91:45:17:5b:93:bc:11:a2:76:dc:01:1c:e3:73:a7:9c:
         ef:a8:b1:40:39:a0:f9:f3:9a:36:47:59:da:da:b8:42:01:25:
         ac:34:c4:46:8e:69:28:b4:6e:85:43:18:8f:e2:c3:8d:a0:92:
         b8:e4:97:ec:fd:eb:9f:50:89:7d:39:83:39:42:d5:95:01:a2:
         f5:57:83:7b:19:27:40:ee:d7:05:fb:b7:08:e5:9b:11:39:0e:
         95:87:14:0a:2e:ef:a2:f0:cf:c4:3d:50:08:b5:09:e9:5b:5b:
         02:e7:63:96:78:fc:b4:03:e7:53:fd:43:e1:03:b5:04:4c:03:
         95:e3:cd:aa:38:be:59:a0:57:c3:b8:58:5c:b4:c8:05:29:71:
         3a:ea:92:fa:17:e0:7e:73:9a:eb:23:ff:6e:f6:03:07:3d:d6:
         62:18:ac:2b:8a:f2:b9:df:9f:f9:ba:f2:e5:24:a8:1f:8c:2d:
         43:85:a3:5c:e3:4c:99:ef:92:5a:5b:1c:6b:5e:89:46:1d:32:
         53:a9:df:ad:8a:3f:01:ed:38:68:da:63:eb:a6:ee:6b:e2:ee:
         e8:e7:4a:64:90:1d:30:67:35:4d:ae:47:3d:a4:ca:ca:3d:3f:
         bd:8d:3d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:07:14 2025 by rpki-client