Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
File:                     GcplSdJk-JmK6KjbvWWpZFBIlqs.mft (raw, json)
Hash identifier:          +1NYY9z4pca/fhP0ueeGUZ8wzoZRIUgSbK2jwIhm+kA=
Subject key identifier:   57:0B:28:23:9D:33:7A:A5:26:EB:76:74:01:AD:90:10:5A:6B:0C:C8
Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
Certificate issuer:       /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Certificate serial:       01976C61DF38788124024AD36F1AD45506ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 03:00:42 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:42 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:42 +0000
Files and hashes:         1: GcplSdJk-JmK6KjbvWWpZFBIlqs.crl (hash: iQPkqKBxE0InGO/0Glf/o1SmzkcUKtpgQLUvdQmEpvY=)
                          2: t7HeGa1_t6Nxzc-_HOHftvuvy5Q.roa (hash: 7423NrotfDnoM0CPhCQktczVoHyICuq8tfhavM4pkvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:61:df:38:78:81:24:02:4a:d3:6f:1a:d4:55:06:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
        Validity
            Not Before: Jun 14 03:00:42 2025 GMT
            Not After : Jun 15 03:00:42 2025 GMT
        Subject: CN=570b28239d337aa526eb767401ad90105a6b0cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:88:55:e9:25:a5:ef:28:7a:98:88:05:fd:
                    84:1d:80:e4:a2:4f:99:a9:89:3f:48:68:83:8b:0d:
                    fe:27:21:b9:09:05:db:ef:d6:7b:71:fd:6c:8c:8d:
                    43:54:8c:52:6e:a5:a9:d7:73:1a:0f:6a:f5:b6:07:
                    dc:00:50:cb:0e:d0:c2:15:98:8c:d5:2a:4f:00:11:
                    54:ca:c5:94:ea:6d:94:e0:41:c3:91:2e:7c:c3:23:
                    73:8d:8e:be:fc:b5:cc:4b:d0:3a:0a:ac:7e:96:ab:
                    5a:76:77:ca:ce:bd:93:d3:e7:1a:c4:22:0c:51:1a:
                    d3:4f:c4:c1:0e:f0:81:aa:f2:8f:73:4a:81:9d:31:
                    41:bf:f4:73:d9:b6:40:b8:53:d8:29:73:37:ee:fb:
                    5c:d1:0c:31:06:c6:28:5d:22:4f:1d:56:e1:53:78:
                    44:0a:1e:af:07:b9:57:33:11:02:57:86:fc:04:c9:
                    86:3d:63:89:9f:d8:e3:d2:9b:a3:53:19:02:7f:fb:
                    3c:87:8a:b8:c3:8b:0c:ee:81:9e:16:b1:d1:07:03:
                    41:6b:a2:3b:db:f5:ea:bb:ca:67:1e:56:35:d1:61:
                    81:2d:51:81:4e:a7:fe:09:8e:f9:87:03:86:a0:cd:
                    b3:93:21:74:7d:ff:0b:05:52:bb:f1:e6:71:ec:21:
                    a9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0B:28:23:9D:33:7A:A5:26:EB:76:74:01:AD:90:10:5A:6B:0C:C8
            X509v3 Authority Key Identifier:
                keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:58:28:00:36:96:3d:ea:4f:b5:9f:3d:57:fa:3e:13:ab:a7:
         52:75:7d:dc:6b:fc:ea:a1:53:a0:fb:04:ce:d9:4d:21:ae:65:
         24:97:85:3f:96:af:55:9f:bd:54:00:2d:a8:cd:92:13:df:e2:
         10:3b:94:c6:dc:4d:0d:69:bd:ab:94:62:20:41:b4:13:ae:0a:
         d7:86:da:d3:7f:9e:46:3f:88:63:24:47:6e:c4:bc:98:ed:ef:
         da:6f:29:aa:86:bf:ed:0d:5f:fa:f5:18:2d:54:55:7c:d9:e3:
         65:1b:3d:71:fc:71:79:02:44:7e:c3:7b:dc:a7:b9:5a:b5:12:
         2f:78:24:24:c8:b8:f2:56:f2:c1:29:0c:0d:8d:7f:3d:1e:e4:
         44:7d:69:e6:ce:15:0f:d7:86:27:24:d0:d6:d9:67:7d:81:01:
         08:f0:6e:bf:16:85:58:39:6f:4d:86:3c:eb:37:4f:15:d5:cf:
         a7:04:a3:6c:35:d9:ce:9e:72:41:3a:c6:49:11:50:85:1f:c1:
         fc:87:c2:90:95:83:4a:a8:03:20:84:f9:a8:9b:94:5c:87:60:
         32:98:21:e5:fd:50:70:9e:c8:ed:da:04:7f:6e:d6:47:de:fe:
         21:27:c8:39:ba:b5:81:48:92:3d:86:76:5e:54:4a:5c:0f:08:
         6f:fb:ce:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:31:14 2025 by rpki-client