Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
File:                     gHAu016O_uBMqrmZhCa8PUPK6yw.mft (raw, json)
Hash identifier:          wBRnztBLEcmz8n21TMWYK7HLrNY5AN0TzzePYcJvNq4=
Subject key identifier:   F0:CE:C3:E2:EF:C3:61:0E:61:BC:99:66:B4:1C:73:33:BA:89:3A:53
Authority key identifier: 80:70:2E:D3:5E:8E:FE:E0:4C:AA:B9:99:84:26:BC:3D:43:CA:EB:2C
Certificate issuer:       /CN=80702ed35e8efee04caab9998426bc3d43caeb2c
Certificate serial:       0196B8FF23DDD627E282874768BC893E863A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHAu016O_uBMqrmZhCa8PUPK6yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
Manifest number:          057B
Signing time:             Sat 10 May 2025 07:00:50 +0000
Manifest this update:     Sat 10 May 2025 07:00:50 +0000
Manifest next update:     Sun 11 May 2025 07:00:50 +0000
Files and hashes:         1: gHAu016O_uBMqrmZhCa8PUPK6yw.crl (hash: PK6BeFeUUBErwDt/y3/QIOMEWV+14mIlS6XuZaBcuc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gHAu016O_uBMqrmZhCa8PUPK6yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:ff:23:dd:d6:27:e2:82:87:47:68:bc:89:3e:86:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80702ed35e8efee04caab9998426bc3d43caeb2c
        Validity
            Not Before: May 10 07:00:50 2025 GMT
            Not After : May 11 07:00:50 2025 GMT
        Subject: CN=f0cec3e2efc3610e61bc9966b41c7333ba893a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8c:94:55:66:32:35:d1:b1:be:cd:20:ca:27:
                    2c:10:cc:b2:ef:f6:a3:48:8c:18:7b:df:29:7b:0a:
                    d2:22:af:e7:b2:27:59:fc:d5:04:0c:ab:dd:2d:82:
                    54:5b:4d:1a:24:09:87:a6:9b:6b:2e:fe:7e:70:4e:
                    9c:60:a4:20:f4:29:43:1f:e8:4e:2c:d7:c2:b2:fb:
                    04:cd:ab:6e:07:fb:d1:9c:0a:22:14:f1:78:f6:05:
                    db:8a:4c:f1:79:40:b0:e8:ea:aa:68:cf:2b:c8:1a:
                    ee:ac:3a:c2:ab:3a:51:47:08:33:16:7f:9e:3d:65:
                    90:8a:7d:ae:ef:26:b7:1b:f0:cd:f4:0f:86:f3:67:
                    63:8e:06:1a:a1:d9:22:8c:d9:32:67:ad:25:0d:19:
                    dc:de:f7:6d:e1:b6:c6:61:1a:fb:75:db:da:1e:b8:
                    b8:9d:86:35:b2:85:9a:e5:1b:10:db:51:14:93:ab:
                    1d:96:a9:c2:3f:a7:a4:fc:c8:8d:39:94:00:52:8d:
                    72:fe:55:09:97:b8:c0:98:bd:a1:6c:6b:09:e1:7d:
                    73:a0:b9:e5:67:96:fb:a6:e2:1f:c4:b9:53:2a:ef:
                    55:13:e6:74:32:35:2f:24:c1:73:71:f5:de:0a:4d:
                    72:25:71:39:8d:84:15:a2:31:24:8b:d6:d3:be:04:
                    6d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CE:C3:E2:EF:C3:61:0E:61:BC:99:66:B4:1C:73:33:BA:89:3A:53
            X509v3 Authority Key Identifier:
                keyid:80:70:2E:D3:5E:8E:FE:E0:4C:AA:B9:99:84:26:BC:3D:43:CA:EB:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHAu016O_uBMqrmZhCa8PUPK6yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:7b:2f:62:fd:e3:ce:d6:f7:92:1d:9f:9f:3b:7c:f6:4e:82:
         cd:1f:2a:4f:ca:ca:8b:45:5c:68:a1:1f:02:04:9f:30:46:01:
         37:fb:c1:f3:42:fb:68:3d:6d:77:12:cf:f3:fb:67:68:18:09:
         50:8a:65:fc:77:0e:71:57:bb:ff:96:c1:21:8a:3f:d1:fa:4c:
         59:3e:a3:4b:b3:83:17:a0:a2:e2:95:a8:02:ff:42:b7:b6:fe:
         7d:06:07:4f:1e:ac:e4:a3:9e:e1:7a:34:65:59:f0:40:36:5a:
         92:3c:e0:0d:53:ad:53:20:1b:25:e2:d1:03:db:6a:d9:00:de:
         58:20:82:20:d6:b6:03:6f:06:8f:7e:65:46:71:21:ab:d4:46:
         55:ef:19:68:67:d1:a8:1f:24:3a:6a:23:e9:1c:6d:ca:05:e4:
         b8:e3:4d:f0:fe:12:ac:e8:09:59:f4:46:6d:58:c8:7a:a6:55:
         92:0b:ff:4c:75:2a:ec:85:81:de:db:49:94:6b:18:cc:6a:9f:
         99:b5:f8:82:1d:a1:82:0a:f9:8d:3b:0d:ce:58:f4:64:b2:3f:
         34:93:d6:9c:0b:4b:c3:86:5f:da:77:fd:5b:9f:d9:bc:62:ab:
         a0:c1:f4:d7:2f:d4:92:4c:cc:80:21:b2:de:8a:49:05:ce:72:
         7e:19:b1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:10:56 2025 by rpki-client