Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
File:                     GUwuZp9lV99OPUmk8mW1QReS_6A.mft (raw, json)
Hash identifier:          vmUsr2Fe5BJW9cEV3rx71+obLjwG0/2H19IDqpu2xRg=
Subject key identifier:   E0:C6:FF:A6:01:39:8D:79:D0:27:7E:AE:23:8F:75:59:3C:D1:73:8F
Authority key identifier: 19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0
Certificate issuer:       /CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
Certificate serial:       0196C3B970DA5CFA5FA5667DFC37D7F94AEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
Manifest number:          0C95
Signing time:             Mon 12 May 2025 09:00:32 +0000
Manifest this update:     Mon 12 May 2025 09:00:32 +0000
Manifest next update:     Tue 13 May 2025 09:00:32 +0000
Files and hashes:         1: GUwuZp9lV99OPUmk8mW1QReS_6A.crl (hash: 58ndW2cYf5pVeLNCVIGos+AbB0GHPmWhO3/xlOqqx/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 09:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:b9:70:da:5c:fa:5f:a5:66:7d:fc:37:d7:f9:4a:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194c2e669f6557df4e3d49a4f265b5411792ffa0
        Validity
            Not Before: May 12 09:00:32 2025 GMT
            Not After : May 13 09:00:32 2025 GMT
        Subject: CN=e0c6ffa601398d79d0277eae238f75593cd1738f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:51:f0:54:d2:2e:85:cd:0b:3d:a0:fc:a8:
                    c4:b3:2d:54:69:63:4a:4c:9a:5a:cd:cc:eb:f7:36:
                    4b:2a:fb:cb:e5:4a:88:86:e9:d5:c4:82:59:c9:fd:
                    8c:a5:35:26:59:a9:33:74:30:07:7e:e3:a8:cd:02:
                    26:e1:a9:5a:4f:4f:82:2e:7c:e1:f6:e3:a2:21:d4:
                    4a:d6:72:4a:9d:19:4a:6e:6e:19:ee:a3:a5:15:c1:
                    ba:3b:57:b7:0c:7c:a0:3f:3d:09:ae:55:30:62:d3:
                    95:fa:8b:0a:9a:50:29:b0:2e:d2:92:7b:64:c6:1e:
                    27:3c:c8:a5:22:7e:b1:31:a6:20:2d:5f:30:ad:85:
                    96:c2:80:c5:2b:62:4f:f3:2f:e2:83:a8:f4:8a:f9:
                    b3:73:8a:13:be:aa:ea:bb:26:2b:cd:36:36:0a:50:
                    f8:d2:89:bf:cc:02:a3:c1:a6:7d:5f:c9:2c:78:cc:
                    37:3a:27:df:af:a2:06:16:6a:98:82:66:ef:cc:13:
                    f0:42:1c:63:d6:ba:7a:a4:4f:1b:b9:45:9d:57:78:
                    5b:17:62:4a:98:c7:df:d9:32:b5:74:31:b4:65:fc:
                    44:66:d0:98:c7:58:8d:7b:36:a8:9f:ce:cf:7c:e2:
                    68:7e:0b:dd:55:48:a1:c2:43:03:34:5f:e7:45:e1:
                    5b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C6:FF:A6:01:39:8D:79:D0:27:7E:AE:23:8F:75:59:3C:D1:73:8F
            X509v3 Authority Key Identifier:
                keyid:19:4C:2E:66:9F:65:57:DF:4E:3D:49:A4:F2:65:B5:41:17:92:FF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUwuZp9lV99OPUmk8mW1QReS_6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/34dfe0-9206-41df-ba01-a9ff7a53753a/1/GUwuZp9lV99OPUmk8mW1QReS_6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e4:af:23:e0:e5:08:a2:d4:7a:f0:01:7f:c5:89:cb:d4:1d:
         5c:b5:e2:6a:7e:b8:a3:fb:94:52:59:c8:70:1f:8b:34:35:50:
         ca:ba:99:15:34:df:1b:4b:59:29:f7:c1:93:1e:4d:1a:07:02:
         ab:ff:12:87:89:bc:de:a6:ff:68:fa:84:b2:6a:54:18:c2:09:
         60:db:eb:a0:47:74:7a:75:90:f1:21:c6:a8:e7:f2:5b:bc:73:
         f9:2c:84:df:cc:a3:ca:7b:61:5d:00:79:72:e8:3a:aa:3b:eb:
         88:9a:b0:f1:d4:cc:09:7a:8e:35:48:95:08:f0:ac:0b:dc:e6:
         4d:67:6f:ee:59:b1:8c:56:97:f5:51:e5:88:29:ee:47:91:1b:
         ac:b4:03:0a:58:ab:e3:29:4d:93:cc:18:5f:14:71:cf:b1:e6:
         96:04:f7:12:b0:38:7d:1f:9c:18:10:e7:c6:60:65:c7:fa:79:
         50:6b:c3:61:d2:25:d3:59:4d:49:f6:fe:c1:8a:09:55:f8:35:
         63:e6:13:58:76:bb:63:fe:80:77:3b:2b:8f:25:b6:78:c2:4b:
         be:4c:3b:89:ad:59:1f:9a:b2:1e:63:e0:c4:03:7b:81:52:ec:
         cf:ca:b8:21:c9:3e:7b:b9:4b:00:f8:f0:06:fa:2d:1d:30:6e:
         e9:e5:3c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:32:55 2025 by rpki-client