Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
File:                     GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft (raw, json)
Hash identifier:          U6tEeRVk+n4e1B0b3sVWA5zx9Hem/gtgf9+jfaggGF4=
Subject key identifier:   24:E8:69:B9:DD:1A:7F:94:61:58:45:ED:FF:29:8B:7D:44:D0:D9:1E
Authority key identifier: 1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6
Certificate issuer:       /CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6
Certificate serial:       01976F2BF5B4A567E526571045B4739162A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
Manifest number:          10D4
Signing time:             Sat 14 Jun 2025 16:00:41 +0000
Manifest this update:     Sat 14 Jun 2025 16:00:41 +0000
Manifest next update:     Sun 15 Jun 2025 16:00:41 +0000
Files and hashes:         1: GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl (hash: hsPO8RKVsJccHE4j8smq4H106a7WEw1o8+84bxLepWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2b:f5:b4:a5:67:e5:26:57:10:45:b4:73:91:62:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6
        Validity
            Not Before: Jun 14 16:00:41 2025 GMT
            Not After : Jun 15 16:00:41 2025 GMT
        Subject: CN=24e869b9dd1a7f94615845edff298b7d44d0d91e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:9b:cb:37:dc:5a:30:7e:fd:14:53:8d:4d:
                    d5:99:2d:9c:13:45:d4:ec:7c:1f:85:29:75:9c:4e:
                    e3:ce:5c:3a:72:5d:2c:0e:ba:c4:f6:23:11:f8:da:
                    8f:84:59:e2:43:b4:a6:64:2c:5c:80:fc:08:06:05:
                    c2:76:96:38:24:fc:fb:d0:27:a6:42:12:db:cf:ba:
                    e9:8f:10:3a:f9:16:28:2d:cc:1e:99:1b:af:4f:4f:
                    68:2f:6a:1e:b2:99:1e:fe:e1:a3:54:b0:fb:5a:da:
                    8e:17:b9:05:a9:23:29:20:68:a2:f6:f6:02:a1:1d:
                    87:28:0e:a7:e3:ea:d5:ba:94:e0:ac:b5:7e:f9:22:
                    67:86:6a:12:ec:84:6c:33:47:35:8c:24:55:58:c0:
                    1d:d4:f2:a3:76:41:a3:fb:93:86:af:1a:e1:be:57:
                    33:aa:29:b1:b1:0c:df:50:cd:d1:1f:da:c5:a9:a4:
                    81:a3:35:e7:39:52:33:c8:11:82:0d:f2:11:2d:18:
                    f5:37:8e:ed:c6:d2:7f:6a:11:08:37:f6:8d:3d:29:
                    1b:b9:4d:e3:7b:89:4f:a2:fb:f2:ae:21:a3:10:49:
                    72:4d:61:a6:99:b0:37:e8:88:a9:36:d5:ae:79:81:
                    33:c9:10:6e:c3:64:f0:dd:50:f2:f9:eb:9f:4b:73:
                    ef:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E8:69:B9:DD:1A:7F:94:61:58:45:ED:FF:29:8B:7D:44:D0:D9:1E
            X509v3 Authority Key Identifier:
                keyid:1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:6f:86:4c:4a:98:6e:c8:4a:bf:e8:85:27:0f:7f:d6:d8:3f:
         15:53:08:9a:6a:1b:79:20:11:d3:83:87:ee:b7:79:ec:62:ed:
         f5:7f:35:08:05:83:2c:03:b6:73:73:22:b1:61:f2:04:2c:ff:
         57:3c:b6:52:7b:78:7d:7c:69:2f:06:dc:24:bd:43:04:eb:b7:
         0e:0d:95:6b:ca:a8:b0:52:e8:4e:ca:a1:1f:ea:1f:93:91:1d:
         2b:22:36:56:92:b2:a0:4e:a3:58:6d:1f:1d:42:7d:5d:4b:2f:
         72:4d:ca:51:7d:10:5e:59:34:cd:ff:12:8a:94:20:a1:89:5a:
         fe:31:38:4a:17:63:c3:45:b4:9b:63:08:4b:5d:d0:6e:e5:b4:
         76:9c:54:41:9f:6c:b2:20:13:b5:e6:eb:64:94:e5:52:72:30:
         e6:ae:f7:15:13:36:d3:c9:62:33:ee:64:ea:38:19:1f:20:7b:
         71:31:e0:d0:39:1f:b3:9c:12:43:1a:b0:f7:a1:75:87:bd:bc:
         25:3e:54:a7:15:5d:d4:6c:f5:eb:a7:a4:a4:61:c3:08:00:e1:
         15:f0:d3:d0:2d:6e:19:d3:eb:bb:4d:26:8d:54:55:c7:51:45:
         63:c8:0e:99:1a:a1:ef:fa:76:17:08:27:87:06:cc:73:f2:12:
         31:fc:7e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:47:41 2025 by rpki-client