Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
File:                     1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft (raw, json)
Hash identifier:          qQHiVf96bwfjPTI8CuOZ51J9IkRMjkyM69MvdHsJvyA=
Subject key identifier:   5F:EF:CB:A2:5F:12:26:FA:C8:BF:CD:C5:D3:4D:43:22:89:F3:B1:CE
Authority key identifier: D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
Certificate issuer:       /CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Certificate serial:       0197B96A7FD2AC9D2DE2F3434DEE5407B1CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
Manifest number:          01AF
Signing time:             Sun 29 Jun 2025 02:00:53 +0000
Manifest this update:     Sun 29 Jun 2025 02:00:53 +0000
Manifest next update:     Mon 30 Jun 2025 02:00:53 +0000
Files and hashes:         1: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl (hash: qockNfWCJK5BgR88Lm3vFnqTayQZPifMAeT/r1Sqb4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6a:7f:d2:ac:9d:2d:e2:f3:43:4d:ee:54:07:b1:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
        Validity
            Not Before: Jun 29 02:00:53 2025 GMT
            Not After : Jun 30 02:00:53 2025 GMT
        Subject: CN=5fefcba25f1226fac8bfcdc5d34d432289f3b1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2a:90:9d:23:82:ba:18:ed:bf:37:af:45:11:
                    af:a8:00:c0:1b:04:96:04:8d:a5:b2:32:76:85:ce:
                    7f:92:64:2e:66:a0:c2:03:db:6c:ec:40:53:b2:da:
                    3e:f7:43:0d:a4:39:90:bb:94:c8:07:6d:9c:b6:d6:
                    dc:93:a6:63:2e:c7:84:d8:da:94:fa:47:dd:a6:3e:
                    3c:01:0b:47:cf:2a:1e:86:53:f1:db:df:a3:be:44:
                    d7:b3:31:33:7a:ac:d1:de:dd:d9:70:2e:b5:f5:4b:
                    ac:07:49:5e:cc:8d:c7:8e:57:82:7f:87:70:ed:31:
                    2c:74:0d:ed:76:df:0e:04:2b:e7:e0:f2:4e:ad:83:
                    b8:6e:64:26:cd:25:63:59:8e:1e:bd:bf:7c:a7:27:
                    64:fa:13:33:e3:d4:8f:ab:64:a4:d5:3f:c9:89:f9:
                    ea:00:b6:aa:c3:6b:5e:23:2e:0b:30:81:e8:49:6f:
                    f9:0d:af:1c:cd:05:8b:81:83:95:56:c6:0b:e6:3e:
                    3a:aa:44:29:57:58:c9:b4:d3:73:59:c7:b2:90:e8:
                    62:3a:f5:1e:ad:55:5c:3b:2b:c1:56:ca:2f:58:64:
                    8f:a3:80:12:d6:c1:94:1f:a2:18:87:3c:d9:8f:2b:
                    9c:81:ec:83:48:b9:7b:d5:d2:58:62:92:10:5b:10:
                    ae:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EF:CB:A2:5F:12:26:FA:C8:BF:CD:C5:D3:4D:43:22:89:F3:B1:CE
            X509v3 Authority Key Identifier:
                keyid:D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a3:e4:cc:f6:c5:c3:5e:62:22:04:1c:84:3a:37:80:98:fd:
         1e:ae:49:c3:37:a1:45:61:fd:45:0b:24:34:9d:62:d1:92:bf:
         92:f1:97:59:86:1e:ea:49:9e:f6:e8:57:08:3f:94:81:8b:f2:
         7d:19:98:3a:7b:55:76:25:c7:17:93:b8:09:75:2e:f1:ae:eb:
         45:5b:f3:5d:13:eb:59:eb:6f:13:b6:44:11:e8:4f:5e:cf:8f:
         27:c1:e5:a9:3d:b6:12:6c:17:26:e3:ff:fa:eb:96:44:5b:e8:
         58:5c:fa:9c:b6:98:7e:6b:47:21:41:a5:f6:04:8c:b9:56:67:
         a1:09:d8:2d:e7:3a:73:2c:96:69:37:73:3a:8c:5b:cd:eb:ce:
         ba:16:db:77:dc:d9:d6:58:ce:a8:c5:91:e6:c1:f6:54:f6:8f:
         47:e5:b4:d1:4d:97:a2:df:40:78:7b:91:0f:5c:cb:f4:5c:8f:
         cb:94:df:86:c8:44:e8:81:00:8c:2e:0b:68:4d:f3:8a:30:27:
         c2:56:fa:ed:68:02:57:38:df:fd:c3:39:2b:b9:a6:d0:d9:fe:
         96:52:cd:10:c6:04:23:b6:c5:54:c5:4c:0a:1f:09:0b:58:5a:
         a5:1f:fb:4f:24:67:5b:d3:13:df:2c:1d:ed:54:bd:ca:66:bb:
         9e:88:8e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:24:03 2025 by rpki-client