Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
File:                     GWRkVJwHkby2YRd_l67c851Uw5U.mft (raw, json)
Hash identifier:          8sPX+OsxTzYoxz5DABjgRnUFrP+g5q5SrgJl+tENUKI=
Subject key identifier:   84:E5:0E:AE:77:FE:1E:F1:28:45:71:B7:52:3E:01:C2:47:DC:9B:9A
Authority key identifier: 19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95
Certificate issuer:       /CN=196464549c0791bcb661177f97aedcf39d54c395
Certificate serial:       0196BECA07C3407503B0E8DA3B36B1B902F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
Manifest number:          1530
Signing time:             Sun 11 May 2025 10:00:33 +0000
Manifest this update:     Sun 11 May 2025 10:00:33 +0000
Manifest next update:     Mon 12 May 2025 10:00:33 +0000
Files and hashes:         1: GWRkVJwHkby2YRd_l67c851Uw5U.crl (hash: qlZeji2+W3P6PHULL3W+cJhutA27nP77WNIvi+GRjf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:ca:07:c3:40:75:03:b0:e8:da:3b:36:b1:b9:02:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196464549c0791bcb661177f97aedcf39d54c395
        Validity
            Not Before: May 11 10:00:33 2025 GMT
            Not After : May 12 10:00:33 2025 GMT
        Subject: CN=84e50eae77fe1ef1284571b7523e01c247dc9b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fc:38:29:74:42:ba:72:48:f3:89:e1:22:e7:
                    48:9c:ff:29:60:0c:d3:6b:63:2c:0b:45:bf:75:06:
                    82:e9:6d:6b:35:0d:6f:92:0c:ba:18:b0:65:54:87:
                    9e:b5:58:89:25:49:f1:70:f6:ab:ef:53:99:b5:e5:
                    0d:a6:d1:72:a0:8b:ac:11:95:ec:40:39:e4:2e:0e:
                    30:d6:a9:e1:8d:91:42:67:fb:d1:52:1f:a4:ec:51:
                    ed:6f:6f:80:69:93:b4:a3:21:2e:ad:2c:14:bc:1a:
                    7c:ee:d3:28:46:1d:fb:55:5a:37:f8:93:c7:f6:85:
                    75:11:d7:f0:27:33:d6:57:dc:bc:72:c5:29:9c:5c:
                    98:d6:36:9f:eb:1c:f7:4f:62:9e:b2:44:1c:a6:79:
                    16:79:b9:06:85:ef:77:0d:56:2a:d3:0a:0e:0a:27:
                    e2:b7:7c:ec:e8:9b:01:91:33:b4:19:c1:89:52:40:
                    bd:5b:a3:23:5e:5f:fa:ac:4c:94:c6:82:3c:68:ca:
                    14:7f:46:39:ce:8d:9a:6f:84:1a:75:26:a6:ce:32:
                    be:7a:5f:47:4a:2f:e5:f8:43:0e:2f:4b:70:ff:58:
                    65:66:8b:27:d5:aa:f5:6c:74:43:f5:da:59:4a:d7:
                    2e:25:39:e7:2f:6d:cb:cb:9c:75:f0:98:dc:15:4a:
                    1e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E5:0E:AE:77:FE:1E:F1:28:45:71:B7:52:3E:01:C2:47:DC:9B:9A
            X509v3 Authority Key Identifier:
                keyid:19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:1b:fc:b6:90:37:88:ea:06:f1:c6:5d:47:16:af:fb:24:7f:
         b2:ee:3c:48:b6:66:77:76:c2:9f:41:e8:b8:92:85:e2:ee:1c:
         69:02:11:bf:e7:e3:1c:54:ea:56:09:e7:05:b8:cb:18:ba:55:
         31:d1:e2:2c:2f:2c:9e:ff:76:99:17:86:08:be:82:9c:da:bd:
         64:2b:9a:b9:33:5e:21:e3:70:56:f4:80:de:dc:40:56:11:0c:
         0d:39:39:4c:b6:92:9b:82:77:ce:8c:67:fa:4a:40:c8:1a:d4:
         50:6c:5c:f3:58:0e:91:5b:a1:1d:98:56:c5:62:d7:27:de:f8:
         6a:a2:28:de:69:28:2c:c2:89:27:c6:5d:16:ae:14:42:1c:fa:
         79:35:b8:c5:0d:ab:7d:4a:78:18:ee:c9:81:56:1f:c4:1a:f5:
         9f:36:94:d9:bb:4c:c3:78:73:c4:03:89:a5:0b:ad:05:71:b5:
         5d:c5:19:b2:82:7c:7b:05:71:44:dc:e7:3b:83:3f:0d:51:62:
         61:1e:10:89:03:02:31:75:81:7e:61:1d:68:6a:e2:74:78:b1:
         ec:3e:38:ec:23:16:ff:2a:7d:85:9e:1b:94:12:14:b8:e2:36:
         e9:b6:9f:13:6d:88:9d:58:0d:cc:79:8b:3c:db:66:e3:c6:f4:
         cb:a0:61:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:09:45 2025 by rpki-client