Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
File:                     Gsiv14efVVs88EP38zpmDV5htdw.mft (raw, json)
Hash identifier:          Xz3J9VcE/pucsadN4BfnsLN9R8Wvy9OMBk+Ex8IBstg=
Subject key identifier:   C2:CA:BD:1C:8A:F1:87:C2:B7:A0:4C:07:0A:3E:E3:9C:31:52:77:A6
Authority key identifier: 1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC
Certificate issuer:       /CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
Certificate serial:       0196C502F4A2B416F5818C7A7DDE827C946A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
Manifest number:          0864
Signing time:             Mon 12 May 2025 15:00:27 +0000
Manifest this update:     Mon 12 May 2025 15:00:27 +0000
Manifest next update:     Tue 13 May 2025 15:00:27 +0000
Files and hashes:         1: Gsiv14efVVs88EP38zpmDV5htdw.crl (hash: 5mXth6pRKDlexNL/90A283LbdahtkLBmQlNhTd0mLjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:02:f4:a2:b4:16:f5:81:8c:7a:7d:de:82:7c:94:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
        Validity
            Not Before: May 12 15:00:27 2025 GMT
            Not After : May 13 15:00:27 2025 GMT
        Subject: CN=c2cabd1c8af187c2b7a04c070a3ee39c315277a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:18:62:6b:e0:24:57:98:a4:e2:ce:cf:4c:54:
                    94:69:c8:fb:ad:68:eb:07:97:81:85:7f:1e:37:18:
                    46:8e:c3:16:d9:fe:42:59:48:a7:36:2c:1b:bc:ad:
                    b2:1a:33:08:c1:06:24:24:a3:4b:d2:dd:67:28:5b:
                    d7:04:cb:ce:ef:5b:7f:a1:6a:47:0d:55:75:02:cb:
                    fe:7e:bd:30:50:e4:67:9c:f0:7b:d5:f9:28:9b:43:
                    6b:04:04:4f:9c:21:12:4f:05:1b:5a:1e:9e:7d:fb:
                    22:0d:cf:c7:47:da:1b:4c:af:b7:02:49:e5:f9:67:
                    0a:4c:be:be:22:d0:53:08:34:d2:07:96:1f:3b:d0:
                    9d:98:99:86:4e:3c:46:2c:b2:32:81:0d:27:01:2c:
                    af:c7:77:32:15:59:b2:e5:d8:17:6a:06:44:4f:d6:
                    96:32:b0:56:ca:d7:7f:5f:3f:c4:4d:53:09:69:c4:
                    91:ce:a4:6a:d0:a6:9f:66:67:fa:00:71:a5:7a:7a:
                    c2:5c:0c:cb:ac:e6:e9:6b:06:19:d5:3c:f7:fe:8c:
                    7c:37:69:db:82:61:86:98:c1:44:5e:8d:2e:9f:bb:
                    16:1c:8a:3b:b8:91:16:69:0c:32:69:5f:de:36:dd:
                    d5:cd:1b:bb:65:12:95:d8:6b:f8:f2:0a:88:75:e7:
                    8f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CA:BD:1C:8A:F1:87:C2:B7:A0:4C:07:0A:3E:E3:9C:31:52:77:A6
            X509v3 Authority Key Identifier:
                keyid:1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:5d:aa:7e:2b:12:8c:63:05:71:9b:91:1b:b2:62:02:ee:04:
         af:f6:16:4c:f0:2f:cd:86:b1:62:0d:4a:91:cc:47:70:f6:ff:
         94:ea:09:66:d7:e5:ab:b3:aa:f7:7a:55:89:8f:3b:ce:51:39:
         e0:d7:89:ad:1f:c8:dd:7b:18:b9:42:a6:54:08:b0:4b:09:13:
         79:c7:85:e5:05:fc:03:82:bf:f8:d7:2b:cf:03:92:4b:a3:a8:
         d7:e3:0c:59:c4:2b:ac:1f:7e:d9:22:44:ad:d1:59:0a:1b:36:
         98:4d:e4:d4:f7:27:e9:87:e3:77:26:b7:7f:9a:f8:10:65:52:
         92:8a:74:55:25:aa:e9:a2:d0:e7:21:19:8a:39:9f:3c:5c:be:
         87:82:b2:29:26:ab:47:fc:52:dc:ff:a0:c2:21:ad:63:63:29:
         c7:a8:eb:2f:02:25:65:30:2e:5e:d0:1e:a0:fd:a2:06:5c:e4:
         d9:77:a7:ff:8c:6d:ff:3d:db:18:99:24:80:de:4a:be:71:42:
         42:32:a4:5e:9c:02:02:a1:ac:93:be:3f:39:83:fd:ed:5b:ad:
         cb:d8:fe:93:e0:54:05:72:82:e1:da:80:56:61:e1:ff:85:79:
         a8:07:38:6f:08:c9:f7:b5:c4:36:15:ec:65:74:34:97:23:80:
         28:51:1b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:07:16 2025 by rpki-client