Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
File:                     gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json)
Hash identifier:          Z26pQHp2YI2NyFWHwN0C58FvdVaDmUL4iWfPxKKzCxo=
Subject key identifier:   81:B5:6E:2E:3E:05:18:F0:6A:13:3B:85:10:12:73:00:A7:F9:14:7F
Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
Certificate issuer:       /CN=816aa91ab1274e475397b907a655f91e9d605e0e
Certificate serial:       0196A389F4C5B08B1382BE687B9C1FBEDFC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
Manifest number:          32
Signing time:             Tue 06 May 2025 03:00:49 +0000
Manifest this update:     Tue 06 May 2025 03:00:49 +0000
Manifest next update:     Wed 07 May 2025 03:00:49 +0000
Files and hashes:         1: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: GsIFN9vCT279xS/lHwDRNw0gRW+g1hJ9J2FlrKn2qU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 03:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:89:f4:c5:b0:8b:13:82:be:68:7b:9c:1f:be:df:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e
        Validity
            Not Before: May  6 03:00:49 2025 GMT
            Not After : May  7 03:00:49 2025 GMT
        Subject: CN=81b56e2e3e0518f06a133b8510127300a7f9147f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b1:e6:a0:74:af:e3:c4:cb:6e:b3:0a:af:62:
                    47:21:73:ea:5e:29:cc:99:ef:f6:4d:43:3a:1f:e6:
                    a6:91:31:6d:f3:b7:1a:83:f1:9b:bc:16:0b:3a:16:
                    f0:d9:2e:ef:e7:43:8f:94:a2:71:7e:09:c1:85:0f:
                    b5:5f:44:1a:cc:07:65:de:f9:39:02:85:58:85:0f:
                    e6:b0:cc:1e:dd:c1:5a:6d:d7:48:cb:a7:ac:a2:8f:
                    21:0b:f9:7c:26:f8:70:94:bf:41:b0:18:90:f5:7e:
                    b6:0a:17:d7:9b:cc:d3:31:42:02:c0:a2:03:e4:a9:
                    45:2c:d7:a5:0c:81:61:3f:b4:4c:7e:a2:d8:b1:90:
                    52:2c:58:b6:64:99:95:cc:6f:a1:fc:ab:a0:8e:e6:
                    24:fb:8b:3c:1f:90:d7:a8:85:5c:22:03:0c:cc:09:
                    83:45:d2:07:5b:a1:a8:98:53:61:b1:14:62:88:68:
                    ac:9e:8f:de:11:f4:54:cf:64:36:20:6e:aa:33:e3:
                    9a:e4:2d:b6:17:72:fe:9e:63:75:1b:8d:2c:18:27:
                    24:93:15:ad:8b:18:0f:d0:66:ab:8c:07:e4:54:24:
                    4c:c5:23:bb:61:d2:54:5d:c1:24:15:41:24:de:4d:
                    c7:00:3d:2b:57:29:69:6e:c9:ab:1b:df:78:89:88:
                    50:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B5:6E:2E:3E:05:18:F0:6A:13:3B:85:10:12:73:00:A7:F9:14:7F
            X509v3 Authority Key Identifier:
                keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:41:37:d0:a9:a6:04:61:89:6c:af:49:22:98:a4:f2:3b:6e:
         b1:50:0a:6c:2b:5a:f3:b1:9a:c2:7a:a7:b8:3e:fb:12:9d:2f:
         3f:86:2e:b1:dd:10:b0:75:3f:ed:67:7b:5e:86:0f:16:44:db:
         ba:3b:92:5d:15:d0:fb:6a:75:a2:1f:5c:cc:8c:3e:80:ee:f0:
         a1:e2:6d:14:8c:c9:08:d7:bb:5a:61:6b:d2:b9:08:fa:40:e4:
         cd:c9:7c:d6:8a:37:56:cd:4b:e3:55:3f:c0:ec:c8:ae:83:97:
         98:bb:8f:a2:4c:4d:d4:2c:20:7f:dd:aa:9f:2e:09:68:65:e6:
         74:ab:a1:a6:08:06:e5:e1:ec:c5:15:e5:7f:96:04:48:8e:40:
         e1:94:45:c3:25:11:a0:29:6c:61:31:14:20:20:86:c0:2d:e8:
         06:3f:eb:90:b2:8f:7b:4f:32:39:5e:8b:d8:7a:3b:2e:95:4a:
         02:6f:2a:9e:44:89:71:61:b5:6d:83:41:d8:0d:54:89:50:fe:
         37:36:26:11:e1:4d:cb:7f:7b:3f:f1:10:93:56:43:bf:d2:15:
         2c:b6:be:bd:8d:a2:e2:f5:92:8d:10:19:b6:15:e9:0a:f9:60:
         ee:2c:06:35:8a:9c:9d:e0:0e:4b:a8:63:72:d8:b8:8a:7c:e3:
         44:22:4f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:31:54 2025 by rpki-client