Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
File:                     gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft (raw, json)
Hash identifier:          +NAVc9adkhGPSG7z+RCgz6h25WE+kEaGUXtSQSF9SIE=
Subject key identifier:   FD:FC:71:6E:3E:B4:7A:73:79:86:BA:04:EE:5D:7B:58:19:B8:18:7D
Authority key identifier: 81:CD:02:62:A2:21:C3:5A:67:CF:17:3A:60:D1:EC:D9:AF:AB:DD:B5
Certificate issuer:       /CN=81cd0262a221c35a67cf173a60d1ecd9afabddb5
Certificate serial:       0196741E30ED9A5AAD340790CE72523F7B39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
Manifest number:          0E7C
Signing time:             Sat 26 Apr 2025 22:00:57 +0000
Manifest this update:     Sat 26 Apr 2025 22:00:57 +0000
Manifest next update:     Sun 27 Apr 2025 22:00:57 +0000
Files and hashes:         1: gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl (hash: VYZn+4OCw8GsOBOzg8oieLGQiQ1BmSeLuiQTMYxq1v4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:1e:30:ed:9a:5a:ad:34:07:90:ce:72:52:3f:7b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81cd0262a221c35a67cf173a60d1ecd9afabddb5
        Validity
            Not Before: Apr 26 22:00:57 2025 GMT
            Not After : Apr 27 22:00:57 2025 GMT
        Subject: CN=fdfc716e3eb47a737986ba04ee5d7b5819b8187d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1a:7c:7d:c2:70:6a:b4:37:33:8e:4b:18:55:
                    d5:c8:46:11:04:a9:8d:eb:a2:36:a9:d6:2b:10:78:
                    42:32:d9:1d:8c:83:84:97:6c:7a:51:76:f4:8c:19:
                    ca:c3:25:33:cc:11:1a:2e:a3:57:b3:95:69:fc:55:
                    26:72:83:73:78:6c:25:1a:59:76:b2:ef:71:c5:cd:
                    12:02:40:ba:67:97:a7:16:5d:83:a6:ae:bc:8d:c7:
                    64:4b:8a:43:d7:66:f5:ca:b4:30:b7:93:46:b5:16:
                    2a:83:3b:90:95:e5:3e:b7:9b:c8:20:05:04:ce:da:
                    0f:dc:b9:ee:7f:bb:63:c2:49:55:1b:a1:cd:6a:57:
                    3f:aa:37:77:ec:14:2d:17:a6:19:23:16:00:31:b9:
                    dd:11:39:69:6c:a0:f8:46:d7:37:49:9e:5c:34:d4:
                    77:93:30:d3:46:be:02:7f:c1:4f:05:d9:8c:ac:d8:
                    cb:ee:60:1c:da:7a:99:33:00:43:df:ed:92:04:ff:
                    12:10:98:39:39:c5:77:da:bf:5a:65:e3:03:67:99:
                    f4:d1:c1:02:89:8f:0c:c1:04:f2:ce:f4:2a:a5:5f:
                    34:00:12:a4:76:66:ae:45:8e:69:0d:43:e0:b8:cc:
                    64:f0:b9:4a:b1:f0:a2:8e:51:6a:f7:15:7c:1a:a1:
                    eb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FC:71:6E:3E:B4:7A:73:79:86:BA:04:EE:5D:7B:58:19:B8:18:7D
            X509v3 Authority Key Identifier:
                keyid:81:CD:02:62:A2:21:C3:5A:67:CF:17:3A:60:D1:EC:D9:AF:AB:DD:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc0CYqIhw1pnzxc6YNHs2a-r3bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/740813-9180-406f-af6a-fdd0962ceaab/1/gc0CYqIhw1pnzxc6YNHs2a-r3bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:33:c6:0d:03:1f:96:0d:24:a0:8a:0d:6c:b6:48:d6:65:41:
         ae:56:97:4c:4c:1a:ab:38:2a:92:ca:b8:71:04:73:01:c5:86:
         3e:71:0f:fe:5a:a1:d4:27:04:41:46:9b:2c:7f:1d:fe:a7:6b:
         8b:75:ae:20:b6:06:0b:38:20:0d:d1:7d:db:89:8f:b3:56:31:
         26:70:4a:46:11:67:2d:cb:4f:72:7a:4a:aa:c2:52:74:9b:7d:
         ca:f8:51:e6:85:7f:f0:0a:8e:9c:e3:53:bd:65:96:7e:b4:2a:
         de:c6:83:89:9f:da:0d:5d:57:3e:75:d9:14:8a:32:d0:a7:28:
         47:85:3f:0f:be:3c:72:31:09:87:30:94:2d:4b:1b:d8:47:41:
         8c:8b:ee:eb:9a:2a:c1:e2:56:d3:eb:7b:43:d2:5b:39:8a:39:
         27:29:fa:05:cd:02:b0:8b:73:cd:e6:51:72:27:a0:d3:22:10:
         f9:ea:3a:b6:3f:8b:c9:34:2f:3d:f6:8b:be:84:99:da:86:af:
         68:25:3f:59:dd:3e:b5:df:94:45:f8:bc:de:35:72:16:54:0c:
         5e:ff:2d:35:59:55:a6:9b:0e:20:9a:e8:c7:56:8a:15:c9:71:
         6c:cd:c6:c5:93:0c:38:e8:5b:96:62:86:19:ed:4e:11:e0:41:
         cc:e9:85:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:08 2025 by rpki-client