Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
File:                     gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft (raw, json)
Hash identifier:          mQHNFXVGEJkSnGU8+5asV4XtVWayXv652Iz1i4IXDBk=
Subject key identifier:   3E:B7:EE:73:60:7E:E7:F9:F2:A0:FF:1C:4A:13:07:24:56:E4:15:A1
Authority key identifier: 81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33
Certificate issuer:       /CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
Certificate serial:       01976C2AC2310E1D7387E5F6E9D7E242BF1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
Manifest number:          03C5
Signing time:             Sat 14 Jun 2025 02:00:30 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:30 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:30 +0000
Files and hashes:         1: gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl (hash: ml9ulCxSA3ys2QSpPuEO4PrxX455bHzvBSa1gNNZzRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:c2:31:0e:1d:73:87:e5:f6:e9:d7:e2:42:bf:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81d4ea44de9e59a17c922f6e041713bbc4af0a33
        Validity
            Not Before: Jun 14 02:00:30 2025 GMT
            Not After : Jun 15 02:00:30 2025 GMT
        Subject: CN=3eb7ee73607ee7f9f2a0ff1c4a13072456e415a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5c:a6:b1:6b:82:ea:d9:11:c2:b4:55:19:38:
                    ee:34:22:a9:0e:75:52:cf:8a:f2:9e:76:43:b1:08:
                    31:53:c5:b3:97:9c:a2:20:9e:47:2b:88:3b:5d:a7:
                    f8:02:f1:73:e5:01:e8:35:73:4a:ff:54:15:13:b1:
                    27:3b:76:13:82:49:2d:fb:51:ae:43:bd:9b:35:4d:
                    0f:bb:e8:75:19:d1:51:7b:16:e4:6f:48:8a:a7:0b:
                    cb:dd:f1:c8:4b:de:8d:1e:14:f6:92:db:39:42:3e:
                    20:65:b6:77:14:b4:4a:69:97:49:e0:a8:0c:29:8e:
                    65:3e:6c:b1:fe:97:fe:c7:dd:da:81:aa:2b:fd:ad:
                    3e:15:96:65:99:54:90:83:05:87:e5:98:e2:3f:eb:
                    c4:fd:48:31:75:d2:02:2c:e4:6f:48:5e:f6:82:44:
                    0a:db:b5:2c:93:88:cb:e8:f3:b0:7c:45:e1:06:13:
                    8d:cc:ad:4d:a5:ff:ff:73:1e:51:ec:bc:a5:f4:99:
                    68:fa:c7:13:c3:1f:62:64:c2:25:50:50:6b:0c:b0:
                    2c:f3:39:11:58:fd:44:ce:59:b8:6a:a2:59:63:e5:
                    d4:e3:cf:52:bb:ba:72:f4:ae:52:50:76:9d:26:e1:
                    d2:0a:4a:07:9a:56:ae:c0:66:54:62:7f:c6:05:bf:
                    a8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B7:EE:73:60:7E:E7:F9:F2:A0:FF:1C:4A:13:07:24:56:E4:15:A1
            X509v3 Authority Key Identifier:
                keyid:81:D4:EA:44:DE:9E:59:A1:7C:92:2F:6E:04:17:13:BB:C4:AF:0A:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdTqRN6eWaF8ki9uBBcTu8SvCjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1b7d08-92f9-4ed1-b78e-033042e88d18/1/gdTqRN6eWaF8ki9uBBcTu8SvCjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:53:17:32:3a:7b:ba:b0:46:cf:b2:9c:f7:e8:3c:d1:6c:67:
         cc:1b:f1:91:8d:58:9e:0a:78:5d:6d:54:ea:f3:cf:86:7b:fc:
         9e:bd:87:93:6f:3e:7f:66:f7:89:70:56:83:40:f0:4d:42:34:
         c1:4d:fa:33:66:82:fa:85:0b:45:db:53:85:4a:80:bd:d2:c5:
         5f:86:75:ec:85:bc:47:2f:1b:65:43:19:0e:b0:47:4a:90:b0:
         1d:00:46:a6:5b:1e:9e:62:85:f2:a3:4e:30:f5:73:b0:cf:29:
         42:bd:fe:b7:10:d7:5f:58:10:41:5c:5c:cc:44:b7:42:01:34:
         6f:b4:e9:74:e8:ef:30:9a:16:cc:d8:ea:ad:e9:e8:13:11:48:
         d3:a0:bd:03:83:69:42:a5:bc:10:57:ac:5e:52:2f:f9:99:40:
         78:e5:cd:67:54:eb:73:86:85:88:65:a9:0e:6c:dc:5d:f5:03:
         2b:9b:89:0b:a6:98:2d:3b:65:3a:7e:ad:f6:89:7e:ff:5e:5e:
         54:d7:d7:ef:db:73:fd:8f:4f:5f:f9:15:a0:5d:7f:0e:0d:64:
         cb:87:7c:e8:20:f1:9c:f2:e7:a0:1d:12:ee:dc:8f:2c:3d:a7:
         01:d2:05:0c:33:2a:ac:32:d2:b1:08:29:cb:cd:d6:ba:54:94:
         b8:ee:96:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:19:43 2025 by rpki-client