Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
File:                     gqSUodrlSHPfot61bQMTNAdqyVs.mft (raw, json)
Hash identifier:          wsMmlOQ222MqeJUJaCa4FVhzx8XyeXn5Jxz5BGa/YAc=
Subject key identifier:   C2:F9:EA:59:26:87:9D:BF:D8:5F:83:AD:BE:8F:F1:FF:75:AB:E6:EE
Authority key identifier: 82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B
Certificate issuer:       /CN=82a494a1dae54873dfa2deb56d031334076ac95b
Certificate serial:       01968FCC073DAAD27027A2B5934D6CD656BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
Manifest number:          06C7
Signing time:             Fri 02 May 2025 07:00:35 +0000
Manifest this update:     Fri 02 May 2025 07:00:35 +0000
Manifest next update:     Sat 03 May 2025 07:00:35 +0000
Files and hashes:         1: gqSUodrlSHPfot61bQMTNAdqyVs.crl (hash: Qpy9NtU2t7E+CbNxxG8tQlrptt3yRlKJeMMsj+A4OhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8f:cc:07:3d:aa:d2:70:27:a2:b5:93:4d:6c:d6:56:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a494a1dae54873dfa2deb56d031334076ac95b
        Validity
            Not Before: May  2 07:00:35 2025 GMT
            Not After : May  3 07:00:35 2025 GMT
        Subject: CN=c2f9ea5926879dbfd85f83adbe8ff1ff75abe6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:89:da:15:9f:0f:ce:2c:b2:ea:56:cf:3a:53:
                    bb:d0:c6:15:8f:e1:75:a7:22:bf:eb:4f:3e:36:1f:
                    99:8b:17:be:cb:01:b5:b9:d5:f8:c7:8a:e0:16:df:
                    9c:b2:cf:dd:db:e5:e4:71:20:28:87:a4:2a:3e:51:
                    4a:70:6a:57:92:06:5b:f8:dc:d0:7b:0c:5a:d0:4a:
                    6b:3c:bf:ab:7f:ee:4b:1d:97:79:75:6a:99:22:d7:
                    3d:03:b8:88:c3:3c:a1:ab:cc:fa:7c:c4:d1:fe:9d:
                    18:ce:21:bf:dc:51:63:93:e4:c9:ff:2c:65:64:fa:
                    f9:a2:ee:d0:85:f9:1e:71:2a:16:ad:d8:c0:73:fb:
                    5b:29:36:0d:39:86:85:45:03:a7:6e:62:67:3c:93:
                    46:07:47:b4:95:64:40:e3:3c:19:e2:3f:01:20:56:
                    a6:db:72:f2:dd:b4:be:b1:6a:3a:d2:d0:88:85:6a:
                    f5:53:f7:87:93:e9:db:68:f2:f9:83:01:c9:06:73:
                    ce:ba:3a:26:ca:09:84:0f:5d:12:48:72:2d:3a:b0:
                    f2:5a:71:04:64:f7:66:47:4a:75:15:a8:77:15:0f:
                    89:e5:83:8f:ae:b0:59:97:01:10:24:6a:f8:5b:36:
                    ab:e8:ba:2d:fe:50:ea:5a:7d:32:d6:c6:83:6c:74:
                    e1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F9:EA:59:26:87:9D:BF:D8:5F:83:AD:BE:8F:F1:FF:75:AB:E6:EE
            X509v3 Authority Key Identifier:
                keyid:82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:cb:da:2c:e9:91:61:a6:84:58:50:f9:fa:18:b1:28:3a:dd:
         54:3f:d2:96:68:d9:fb:45:bc:b0:14:60:7b:fc:b1:2e:70:f4:
         60:4e:ab:95:62:b9:bd:ea:d9:6a:5f:33:06:03:45:3a:a7:89:
         d2:02:9f:05:af:a3:04:0a:0d:8c:2a:c1:ec:eb:55:2c:9e:e4:
         29:55:45:ff:b3:1c:cb:c9:5a:68:be:89:ed:54:55:78:fd:e1:
         9f:dc:e7:10:cc:fe:b9:a2:ea:34:1e:36:82:b3:ca:95:d4:da:
         d7:de:01:67:5f:75:a3:78:76:0c:ca:be:57:ec:0b:c9:95:ad:
         fc:9f:21:00:f1:95:83:0f:fd:fc:27:a5:60:7c:dc:4a:4e:ed:
         53:8e:82:f5:0c:c0:93:93:7e:93:51:42:d1:6a:be:ee:24:fc:
         b0:38:18:39:4b:eb:b0:c3:9d:e4:9a:fc:b5:65:d0:32:80:8e:
         c1:d4:bb:99:e1:ae:93:b3:7d:b2:28:26:7d:cf:85:b9:b8:06:
         d1:75:a1:96:19:12:96:72:97:68:71:21:d8:60:d7:31:1d:19:
         12:d3:84:73:d7:78:87:60:00:63:81:8c:ea:c5:d0:2b:f0:66:
         c9:d8:13:4e:3c:cb:25:48:59:6b:2c:ce:c8:a0:15:55:03:35:
         6d:15:e1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:53:30 2025 by rpki-client