Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
File:                     gdVXqIaObSYWrTZ1TcbckSt819Y.mft (raw, json)
Hash identifier:          CI59m87I6KDSdkxp4+StJwJy1yGPsgeOSu57FFQ0GL4=
Subject key identifier:   6B:FE:8D:9A:96:87:95:C1:8F:FC:33:A0:2C:9F:BB:61:79:58:5A:B7
Authority key identifier: 81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
Certificate issuer:       /CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Certificate serial:       0196AC1F7FD12BA1CCDCA2095D3EB5D2A5A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
Manifest number:          1344
Signing time:             Wed 07 May 2025 19:01:07 +0000
Manifest this update:     Wed 07 May 2025 19:01:07 +0000
Manifest next update:     Thu 08 May 2025 19:01:07 +0000
Files and hashes:         1: gdVXqIaObSYWrTZ1TcbckSt819Y.crl (hash: CNYRPIwSQQln+Z5olKs39+mASk8NknAREr2ZfQA2XlQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:1f:7f:d1:2b:a1:cc:dc:a2:09:5d:3e:b5:d2:a5:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
        Validity
            Not Before: May  7 19:01:07 2025 GMT
            Not After : May  8 19:01:07 2025 GMT
        Subject: CN=6bfe8d9a968795c18ffc33a02c9fbb6179585ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:99:7c:d1:b2:9d:4c:e0:63:d7:d0:6f:b1:54:
                    53:8f:55:cb:e6:e5:d6:96:56:61:91:2e:41:41:0c:
                    2e:8e:0e:2b:33:5b:55:92:f6:ab:bb:53:60:b3:44:
                    4c:96:6e:0b:5e:5c:d1:62:19:61:82:ee:fe:b0:90:
                    3f:22:2a:18:be:2b:92:97:b2:eb:b6:b7:5b:9e:39:
                    e9:e4:c4:39:e2:de:76:a5:7c:5e:1c:12:d6:22:5e:
                    65:f8:77:fa:50:e4:71:b1:04:a3:a2:51:62:12:f2:
                    b0:76:53:e9:da:5a:20:a0:71:e6:38:0a:79:eb:27:
                    cc:b4:6a:b4:3f:c6:e2:06:4d:55:19:d6:59:82:c7:
                    42:f0:9e:4c:23:02:a0:5e:b2:56:f9:e5:9b:77:4c:
                    f7:89:a0:43:33:93:04:be:35:4a:b1:18:ac:f5:ae:
                    fa:42:b7:8d:e1:b4:7f:28:49:ee:47:f7:30:25:5e:
                    7e:ad:92:11:83:53:48:ec:ca:df:21:88:aa:0c:9f:
                    d8:18:2a:1e:6e:04:22:6b:de:9d:5b:aa:81:65:67:
                    6b:f8:08:61:ef:b3:66:3b:36:fb:ae:53:51:c3:66:
                    c5:84:67:fa:4a:96:83:ba:fa:2b:f1:29:85:e3:66:
                    22:53:49:dc:12:a6:2e:70:0f:8a:f6:a7:63:74:8f:
                    f8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FE:8D:9A:96:87:95:C1:8F:FC:33:A0:2C:9F:BB:61:79:58:5A:B7
            X509v3 Authority Key Identifier:
                keyid:81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:24:a2:bd:b7:a5:de:95:9c:f8:84:af:90:aa:7d:7e:1c:3a:
         62:90:36:f7:1d:54:a6:f9:29:38:9f:de:f7:91:ce:6a:55:df:
         dd:ea:25:ba:4e:a7:9c:c3:38:14:07:ad:1c:fb:51:f8:e3:4b:
         e4:ba:98:ed:71:62:43:71:2c:e9:20:8b:c8:56:06:41:60:f2:
         4f:57:bf:d1:58:3a:6e:7b:c9:fc:79:15:8c:98:42:b1:ad:a0:
         bc:71:62:f0:f4:4e:96:75:db:18:ff:2f:ba:3d:ed:a1:63:e0:
         28:5c:ed:64:e6:31:dd:1c:96:d4:d0:8d:c0:37:6c:48:b2:82:
         26:6b:ce:a9:65:4c:4d:f3:6a:20:b4:fe:2b:15:d4:35:c6:e6:
         08:48:96:61:cb:6b:cb:27:12:4a:61:46:5b:65:5f:eb:47:30:
         37:1b:2d:d4:87:68:a2:3f:84:24:79:ca:49:61:5c:42:61:42:
         53:da:d1:07:72:60:5b:84:2c:17:fd:62:08:aa:00:7f:b5:c2:
         09:c5:e6:47:b9:6d:89:b5:6f:90:ec:ce:af:11:e6:52:b8:fe:
         99:40:f5:a4:9d:ce:98:6b:77:44:94:d5:9f:61:ac:a0:72:d6:
         47:b9:39:1a:22:9e:25:06:90:11:6a:2f:fd:2c:9a:70:f3:71:
         9a:84:dd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:04:28 2025 by rpki-client