Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
File:                     gKOAANS1q9FTKiU4HLJhXuwe3KA.mft (raw, json)
Hash identifier:          ht7aixGC4XlxYBRSOHi9duBqsL4ldQq3gLJrBfkcgic=
Subject key identifier:   B1:71:C9:C8:5E:D6:B8:FB:2F:46:59:A0:07:21:D6:F4:63:D0:2E:4B
Authority key identifier: 80:A3:80:00:D4:B5:AB:D1:53:2A:25:38:1C:B2:61:5E:EC:1E:DC:A0
Certificate issuer:       /CN=80a38000d4b5abd1532a25381cb2615eec1edca0
Certificate serial:       0196A15BCE17070E0D57A0EB82705FB6C73C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
Manifest number:          053F
Signing time:             Mon 05 May 2025 16:51:10 +0000
Manifest this update:     Mon 05 May 2025 16:51:10 +0000
Manifest next update:     Tue 06 May 2025 16:51:10 +0000
Files and hashes:         1: gKOAANS1q9FTKiU4HLJhXuwe3KA.crl (hash: ZWnUn3740WfulIk3Roje40MIJ9MsMtpNgJUh50Y8Md0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 16:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:5b:ce:17:07:0e:0d:57:a0:eb:82:70:5f:b6:c7:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80a38000d4b5abd1532a25381cb2615eec1edca0
        Validity
            Not Before: May  5 16:51:10 2025 GMT
            Not After : May  6 16:51:10 2025 GMT
        Subject: CN=b171c9c85ed6b8fb2f4659a00721d6f463d02e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:36:16:c4:7c:67:fd:2c:26:4a:6b:50:e8:91:
                    1c:a9:52:b7:dc:31:9d:e4:ca:de:da:08:66:d0:3b:
                    04:77:6e:50:76:71:74:64:28:3a:62:a7:1b:ae:f1:
                    a6:eb:a0:d8:98:bd:6d:71:46:9b:26:29:89:8e:a7:
                    39:d9:af:d7:a8:45:cb:b2:8b:5c:33:6e:1e:4b:25:
                    d2:0a:22:dd:94:18:b9:2a:a8:c3:bb:81:d9:cf:ee:
                    60:ba:32:26:d8:3e:60:66:67:0d:40:50:a0:41:d0:
                    23:8b:22:5b:6f:c0:2c:54:c9:c9:6e:47:71:aa:55:
                    8e:85:ae:e1:f0:64:26:db:ab:6c:98:fc:63:15:4d:
                    13:48:70:77:07:8e:39:66:e2:28:9d:16:0e:4a:18:
                    28:71:ee:d6:2b:57:83:a7:9a:b1:08:43:ca:bc:69:
                    5e:10:1a:1c:a9:39:a0:67:cf:be:20:f2:2a:9d:95:
                    2b:d3:92:0f:20:d5:0f:4d:04:8d:56:e1:02:b5:6e:
                    db:73:d4:56:51:fb:3f:a3:38:76:63:7f:e3:33:0c:
                    6b:e7:fd:54:d7:27:67:1a:4a:7b:0d:b0:d5:41:d5:
                    35:7b:f3:0d:39:da:6c:16:3f:bb:d6:8e:2e:f2:25:
                    53:55:81:37:00:ce:60:fb:10:9b:f0:2a:18:31:44:
                    1d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:71:C9:C8:5E:D6:B8:FB:2F:46:59:A0:07:21:D6:F4:63:D0:2E:4B
            X509v3 Authority Key Identifier:
                keyid:80:A3:80:00:D4:B5:AB:D1:53:2A:25:38:1C:B2:61:5E:EC:1E:DC:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:36:d5:07:b8:a3:80:28:21:7e:56:70:c5:ac:f3:fa:57:6f:
         e1:a5:77:2d:22:51:ab:70:81:f7:ab:88:f1:1d:dd:72:38:7e:
         49:ba:f2:b1:4f:0b:c0:b3:1f:f2:ae:63:3e:77:9c:ca:ed:34:
         d0:1a:ea:b4:db:9b:f8:d4:48:57:86:25:35:1b:19:ed:a8:94:
         1d:b0:11:2e:4b:39:a5:d3:62:b5:9b:48:b1:a9:c6:71:cf:fc:
         f1:13:05:7d:92:ae:77:2d:95:a1:7b:5e:a1:4b:95:14:ea:b3:
         50:ca:02:69:4b:b7:c7:7f:6c:aa:3b:c5:ab:f7:52:b1:cb:33:
         a9:a9:8a:b1:09:00:9c:26:4b:26:03:8a:e8:2c:97:10:41:df:
         35:2d:e3:05:f7:e0:dc:b4:2a:f9:ac:fa:e8:fe:06:0b:7e:5b:
         35:e6:94:c9:16:0b:75:c5:39:f9:e4:a9:08:c9:aa:ed:0e:0d:
         47:c3:fa:e0:37:fe:4c:a7:13:f9:5b:00:92:6c:00:67:15:25:
         9a:b1:dc:02:ca:50:8b:b6:e0:7b:df:de:ce:8d:1a:af:d6:dd:
         76:66:b1:47:b8:ba:63:cd:e7:05:cd:27:bf:d8:d5:39:b4:a1:
         06:12:0a:0c:86:70:0e:d5:6d:ba:68:d5:f4:ad:74:0b:e5:53:
         10:30:fe:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:29:17 2025 by rpki-client