Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
File:                     gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft (raw, json)
Hash identifier:          V3OR7J1pI1KNIGcotboJQ9UQyHkD2+pXER3HipyQLfU=
Subject key identifier:   36:C0:31:3D:A7:91:98:C5:61:2C:CB:32:F0:7F:1F:23:E0:CC:2B:1D
Authority key identifier: 81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0
Certificate issuer:       /CN=8159495b72ff015878c1314d24759b6e9147a8e0
Certificate serial:       01976FD0C35D99D0F98DAB7F403EBBEA0781
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
Manifest number:          158C
Signing time:             Sat 14 Jun 2025 19:00:41 +0000
Manifest this update:     Sat 14 Jun 2025 19:00:41 +0000
Manifest next update:     Sun 15 Jun 2025 19:00:41 +0000
Files and hashes:         1: gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl (hash: qJd8TwxctgEMJkFkG7cBngHXnwVYRXDCssZ81xdILlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d0:c3:5d:99:d0:f9:8d:ab:7f:40:3e:bb:ea:07:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8159495b72ff015878c1314d24759b6e9147a8e0
        Validity
            Not Before: Jun 14 19:00:41 2025 GMT
            Not After : Jun 15 19:00:41 2025 GMT
        Subject: CN=36c0313da79198c5612ccb32f07f1f23e0cc2b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:37:44:f9:36:11:70:e1:aa:2a:17:1c:11:5b:
                    d2:42:4a:c7:32:47:99:55:03:80:bc:31:d9:74:b2:
                    be:b3:78:17:2a:43:6c:57:45:91:59:2f:ac:dd:11:
                    48:7b:ba:89:16:d7:00:d5:80:44:e8:af:54:4d:03:
                    c0:33:8a:a4:f0:c8:d8:91:af:5a:ea:de:b9:99:2b:
                    88:12:c6:34:da:a9:29:8a:91:6c:e3:b1:69:bd:e6:
                    36:95:31:77:60:c6:52:19:d5:10:87:9b:5c:ed:ab:
                    bb:b3:8e:ae:fc:b6:76:e0:f9:73:ba:0f:6e:bb:8a:
                    e1:5f:19:8f:78:b6:87:f2:9a:b5:88:6d:2e:57:a4:
                    10:c8:2c:22:19:df:62:7f:8f:32:69:fc:31:63:66:
                    f2:57:5a:ef:5a:3f:09:b3:d3:83:49:5c:75:89:ce:
                    22:37:3a:25:9d:9d:8d:ef:c5:3a:52:ba:84:ec:e3:
                    fc:ce:03:0b:36:2c:25:d8:ad:1a:ac:a9:87:2c:75:
                    a5:05:73:59:ca:b0:be:bf:17:1a:1e:8a:7d:8a:14:
                    68:f9:8c:d9:9a:ae:d6:91:99:d8:e0:af:33:65:ee:
                    62:4a:4a:a5:19:5b:77:78:91:93:0e:90:6a:fe:f1:
                    cd:64:28:b4:cd:59:c5:0e:31:19:90:98:c7:34:5d:
                    c9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C0:31:3D:A7:91:98:C5:61:2C:CB:32:F0:7F:1F:23:E0:CC:2B:1D
            X509v3 Authority Key Identifier:
                keyid:81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:52:60:9a:ae:68:10:0b:41:92:df:74:38:bd:db:fe:60:b9:
         d3:dd:2e:56:de:ae:b8:e3:ef:22:94:5a:51:60:d9:49:f7:f3:
         24:ef:f5:95:72:52:04:1b:66:f7:26:b6:95:64:a0:47:36:a3:
         d4:7f:09:b9:e3:ad:77:a9:82:f4:7c:20:2c:0f:e9:3a:cd:e1:
         34:86:64:aa:27:05:fa:c7:f8:0e:95:bb:60:90:b0:11:83:ff:
         c9:02:12:d8:b7:4f:cd:b0:c7:08:50:e6:a4:bc:e7:9b:d4:26:
         7e:f0:6d:25:af:8a:6f:63:26:d8:d8:ed:6b:5d:4d:d5:2f:09:
         f1:1f:d9:5a:56:5e:e8:33:15:b2:a8:bc:fd:29:ab:6b:5a:cd:
         a4:58:87:9b:28:1f:52:de:b5:4e:05:56:5b:2d:1a:d0:ba:9c:
         e4:de:77:9b:f8:e0:62:f1:ce:5d:74:c1:21:fd:ef:47:61:2b:
         e9:a2:85:38:26:dd:6c:e8:a1:ce:cd:3d:75:3f:46:f4:5e:06:
         59:52:ee:de:45:5a:5d:a0:09:01:9f:18:e2:f1:56:3e:fa:a8:
         1f:5f:54:4e:21:42:fc:79:c6:d3:d8:4b:5c:8a:73:6b:61:13:
         b1:c1:8c:ae:83:09:f6:4e:16:cf:3e:9c:85:60:d8:40:31:ae:
         be:3d:77:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:23:44 2025 by rpki-client