Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
File:                     gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft (raw, json)
Hash identifier:          9giAVI0bH41htyYJNhDbAY3NnW6e9XDLUFyEJOw7Qgk=
Subject key identifier:   25:1C:FE:20:47:12:4C:70:24:4D:A3:3F:25:92:73:FC:03:F1:31:C5
Authority key identifier: 81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
Certificate issuer:       /CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Certificate serial:       0196C615CB57A3BEAFE2BB3DC3EB2AD36D1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
Manifest number:          036F
Signing time:             Mon 12 May 2025 20:00:39 +0000
Manifest this update:     Mon 12 May 2025 20:00:39 +0000
Manifest next update:     Tue 13 May 2025 20:00:39 +0000
Files and hashes:         1: gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl (hash: MIRGvY/S0Q0GZ5YcXhD3BPyYkWJImmNhYG525ESHpVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 20:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:15:cb:57:a3:be:af:e2:bb:3d:c3:eb:2a:d3:6d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
        Validity
            Not Before: May 12 20:00:39 2025 GMT
            Not After : May 13 20:00:39 2025 GMT
        Subject: CN=251cfe2047124c70244da33f259273fc03f131c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1c:1c:ab:6d:58:a8:9f:26:1d:c8:dc:19:55:
                    18:43:92:b9:75:10:9f:09:aa:81:6e:2b:85:f8:1c:
                    2a:0e:70:e6:ba:c7:7f:63:cc:ff:6c:a8:1a:1f:94:
                    6d:db:d7:1f:6a:9e:91:51:64:ef:dd:60:b5:46:6e:
                    99:95:9c:c8:39:a5:1e:ff:d0:66:ac:20:39:f2:bd:
                    e7:fb:fd:a9:0f:98:c7:c5:c8:fa:37:8c:ca:b9:25:
                    53:a2:b9:3c:79:91:53:3e:96:9c:b5:c4:6e:5d:56:
                    59:98:30:14:d2:be:bc:b3:d5:ef:c4:be:5d:97:a1:
                    75:2e:2a:ac:38:16:3a:10:13:71:56:2c:68:0c:20:
                    67:e2:d1:3b:b0:ad:8d:c7:e4:a5:46:49:dd:7c:94:
                    72:34:c8:f1:86:d1:a5:d8:43:72:ec:3f:f2:40:0e:
                    9b:2d:fe:5f:36:e9:a1:e6:ac:97:c7:90:18:55:71:
                    78:d6:15:77:a7:94:86:aa:e7:39:41:f4:58:5f:c9:
                    ea:8f:f8:5b:06:ef:d9:52:26:39:36:b2:e2:1d:dc:
                    b5:9a:23:62:68:1e:d5:88:b4:35:9d:e8:70:e9:b1:
                    87:ec:d8:0d:c9:2c:bb:3d:e8:7e:93:e6:e0:ab:13:
                    0f:96:71:75:00:08:34:49:86:d1:67:4b:76:db:0a:
                    ca:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1C:FE:20:47:12:4C:70:24:4D:A3:3F:25:92:73:FC:03:F1:31:C5
            X509v3 Authority Key Identifier:
                keyid:81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:59:3c:9c:b8:ff:20:55:0c:ba:25:2b:5c:c2:1d:6a:e7:fa:
         86:17:5a:a5:4b:f4:25:76:35:dc:9e:fe:3e:9a:62:2b:3e:70:
         e0:3e:81:e9:82:16:2d:7b:7a:36:98:d6:05:f8:4e:e9:9c:40:
         7f:c1:1a:62:18:f7:39:3a:63:a5:21:be:e4:3b:84:9d:e6:c2:
         ca:0c:ca:52:52:58:6f:71:e2:62:b9:8e:4c:c6:e4:d8:26:8d:
         7e:70:c9:b3:e8:12:33:cd:bc:95:86:1e:d0:c3:7e:63:72:25:
         91:cb:5f:4d:22:0d:15:a2:0b:56:85:12:f2:9f:16:9b:5c:13:
         a9:dd:fb:a1:9f:da:fa:df:56:d6:25:1b:11:70:3b:41:96:7d:
         6c:12:a8:95:7a:5a:01:a3:f2:e7:82:35:5e:84:d2:6c:be:2d:
         41:ae:7c:4d:a6:d6:48:69:2b:f6:d4:ec:fd:b2:c8:12:a3:39:
         ef:d9:65:0a:c1:60:ea:a4:38:53:52:54:ae:aa:81:13:77:bd:
         b0:5d:b2:a2:bb:d4:47:1c:e7:5b:11:c3:62:da:aa:eb:bf:1e:
         d8:a9:62:d4:6f:08:81:44:3f:33:e8:cd:76:5f:12:83:cf:1f:
         a1:82:be:7a:12:c8:b8:ef:22:fa:41:c6:b3:6f:81:ba:75:97:
         a8:06:4d:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbGFctXo76v4rs9w+sq020bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZDRlYTQ0ZGU5ZTU5YTE3YzkyMmY2ZTA0MTcxM2JiYzRh
ZjBhMzMwHhcNMjUwNTEyMjAwMDM5WhcNMjUwNTEzMjAwMDM5WjAzMTEwLwYDVQQD
EygyNTFjZmUyMDQ3MTI0YzcwMjQ0ZGEzM2YyNTkyNzNmYzAzZjEzMWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxwcq21YqJ8mHcjcGVUYQ5K5dRCf
CaqBbiuF+BwqDnDmusd/Y8z/bKgaH5Rt29cfap6RUWTv3WC1Rm6ZlZzIOaUe/9Bm
rCA58r3n+/2pD5jHxcj6N4zKuSVTork8eZFTPpactcRuXVZZmDAU0r68s9XvxL5d
l6F1LiqsOBY6EBNxVixoDCBn4tE7sK2Nx+SlRkndfJRyNMjxhtGl2ENy7D/yQA6b
Lf5fNumh5qyXx5AYVXF41hV3p5SGquc5QfRYX8nqj/hbBu/ZUiY5NrLiHdy1miNi
aB7ViLQ1nehw6bGH7NgNySy7Peh+k+bgqxMPlnF1AAg0SYbRZ0t22wrKmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUc/iBHEkxwJE2jPyWSc/wD8THFMB8GA1UdIwQY
MBaAFIHU6kTenlmhfJIvbgQXE7vErwozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2RUcVJONmVXYUY4a2k5dUJCY1R1OFN2Q2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8xYjdkMDgtOTJmOS00ZWQxLWI3OGUt
MDMzMDQyZTg4ZDE4LzEvZ2RUcVJONmVXYUY4a2k5dUJCY1R1OFN2Q2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8xYjdkMDgtOTJmOS00ZWQxLWI3OGUtMDMzMDQyZTg4ZDE4
LzEvZ2RUcVJONmVXYUY4a2k5dUJCY1R1OFN2Q2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlk8nLj/
IFUMuiUrXMIdauf6hhdapUv0JXY13J7+PppiKz5w4D6B6YIWLXt6NpjWBfhO6ZxA
f8EaYhj3OTpjpSG+5DuEnebCygzKUlJYb3HiYrmOTMbk2CaNfnDJs+gSM828lYYe
0MN+Y3IlkctfTSINFaILVoUS8p8Wm1wTqd37oZ/a+t9W1iUbEXA7QZZ9bBKolXpa
AaPy54I1XoTSbL4tQa58TabWSGkr9tTs/bLIEqM579llCsFg6qQ4U1JUrqqBE3e9
sF2yorvURxznWxHDYtqq678e2Kli1G8IgUQ/M+jNdl8Sg88foYK+ehLIuO8i+kHG
s2+BunWXqAZNbA==
-----END CERTIFICATE-----
Generated at Tue May 13 02:51:33 2025 by rpki-client