Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
File:                     GWRkVJwHkby2YRd_l67c851Uw5U.mft (raw, json)
Hash identifier:          1oWzEeZ1j2Shh2s5Z4BeyJgiRroEf+Ft3LA/Fk6eoX8=
Subject key identifier:   EE:E0:EE:51:C0:4E:D0:48:86:E3:DE:57:82:EB:C8:7B:FF:46:D1:32
Authority key identifier: 19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95
Certificate issuer:       /CN=196464549c0791bcb661177f97aedcf39d54c395
Certificate serial:       01977452A823839313E0B3AAD0A71C85C6E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
Manifest number:          158E
Signing time:             Sun 15 Jun 2025 16:01:03 +0000
Manifest this update:     Sun 15 Jun 2025 16:01:03 +0000
Manifest next update:     Mon 16 Jun 2025 16:01:03 +0000
Files and hashes:         1: GWRkVJwHkby2YRd_l67c851Uw5U.crl (hash: lzqr2qOadNd8IexBUNIpAqVQ4JeTcG+IIfGUxW6OAYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:52:a8:23:83:93:13:e0:b3:aa:d0:a7:1c:85:c6:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196464549c0791bcb661177f97aedcf39d54c395
        Validity
            Not Before: Jun 15 16:01:03 2025 GMT
            Not After : Jun 16 16:01:03 2025 GMT
        Subject: CN=eee0ee51c04ed04886e3de5782ebc87bff46d132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f1:79:55:46:8d:a0:37:1e:0e:27:5a:fc:8b:
                    b5:f0:5c:91:00:2c:97:d4:85:ba:16:19:ed:07:7d:
                    2d:8f:2f:5e:68:fe:ed:1b:55:0e:30:52:09:4e:bb:
                    0a:66:70:4a:15:26:2d:af:f0:be:0b:19:28:8a:bb:
                    66:f7:29:a5:0b:e2:ec:90:50:01:2b:39:9d:58:6d:
                    88:24:0e:4d:27:77:ee:24:07:4f:f1:eb:29:00:e3:
                    23:b6:4f:b2:92:89:b6:b9:0b:0f:f8:da:89:8a:8c:
                    5c:25:ae:3d:1d:4a:3b:20:0e:c2:15:a3:81:b0:f9:
                    b5:ee:40:20:12:fe:5c:21:cc:e3:ad:93:77:6f:24:
                    49:ce:b4:f5:b3:2c:4c:21:52:9b:0b:24:34:61:2e:
                    f7:2f:e6:5a:a8:49:20:cd:a0:8d:28:a1:69:e5:1a:
                    c1:f8:5d:60:50:3d:18:90:b7:9a:94:4c:ea:4f:5b:
                    43:12:3b:3a:3d:cb:cc:59:c5:c6:60:9f:39:48:35:
                    22:49:b0:24:da:6e:9c:7f:73:19:74:b2:f9:9f:20:
                    a6:b1:df:be:56:3d:18:80:53:56:f6:7a:8c:2b:5c:
                    8e:bf:dc:a9:32:20:f4:4f:e8:4b:b8:a1:d2:71:bc:
                    91:8b:9d:bc:74:d0:b9:30:56:0d:84:87:41:49:cb:
                    5f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E0:EE:51:C0:4E:D0:48:86:E3:DE:57:82:EB:C8:7B:FF:46:D1:32
            X509v3 Authority Key Identifier:
                keyid:19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ff:cb:3d:4e:3a:c8:91:48:31:f4:0c:71:e8:1f:7d:c1:66:
         8b:fd:da:dc:21:07:ab:f2:ea:50:71:14:e6:9e:5c:1e:4c:33:
         30:8b:99:2d:f5:01:86:7b:2e:c5:08:88:e5:40:5b:aa:2b:7a:
         13:6c:a0:33:98:34:a9:be:bf:cb:c0:9b:29:ab:93:26:df:e4:
         48:a0:43:0b:c7:3d:5e:88:23:d4:75:3f:68:15:8d:52:8a:3c:
         35:0d:a7:45:8a:35:7f:ac:84:08:6e:c5:a5:35:71:88:e6:07:
         18:c5:c7:ed:c8:bb:03:4f:2b:29:98:72:14:76:ff:af:90:e3:
         69:fa:46:a7:2c:58:1a:82:ee:48:6e:48:41:18:12:28:2a:37:
         1b:54:ea:93:e9:47:d5:86:24:53:3b:9b:75:48:a3:b1:eb:0a:
         ee:62:c8:da:96:3a:78:0a:ea:9e:3f:c0:5e:eb:e5:ae:87:ce:
         f5:f9:ed:30:f7:88:d6:c9:62:0c:ac:c8:b9:ff:09:df:b7:a3:
         a6:c4:ea:89:1f:da:42:7a:b6:be:e6:1c:6b:af:58:9c:33:e7:
         7b:c5:eb:27:9c:ab:d9:0f:2c:81:9e:23:73:ab:7d:3b:20:61:
         d6:4d:90:fe:33:e6:37:6a:17:26:49:7f:b5:6d:4e:a9:a8:fe:
         73:9f:29:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:37:52 2025 by rpki-client