Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
File:                     GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft (raw, json)
Hash identifier:          jcIxWkaHkT94mzpxdDm+k02FeffOTQGNgPh3oOEXEig=
Subject key identifier:   71:2E:6B:93:0B:4E:C1:44:4D:9A:AE:4C:04:D4:98:32:A0:4D:E4:88
Authority key identifier: 19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6
Certificate issuer:       /CN=196628617c00e8dff20ca6699313af79fad0afc6
Certificate serial:       0197711AA512E5B3C6C48A3DB089085C0C24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
Manifest number:          0E56
Signing time:             Sun 15 Jun 2025 01:01:00 +0000
Manifest this update:     Sun 15 Jun 2025 01:01:00 +0000
Manifest next update:     Mon 16 Jun 2025 01:01:00 +0000
Files and hashes:         1: GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl (hash: 2Eo4+BU1GYfg+iZ89QChOHPmVdhmK0Rp0wYJDEY0RDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1a:a5:12:e5:b3:c6:c4:8a:3d:b0:89:08:5c:0c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196628617c00e8dff20ca6699313af79fad0afc6
        Validity
            Not Before: Jun 15 01:01:00 2025 GMT
            Not After : Jun 16 01:01:00 2025 GMT
        Subject: CN=712e6b930b4ec1444d9aae4c04d49832a04de488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:b2:83:02:82:8a:f4:e7:6e:0f:2e:08:2c:
                    47:b8:01:55:60:f5:99:b7:b8:bf:6b:cd:f7:8f:4c:
                    fa:8c:0e:f1:40:6b:a8:4d:33:01:9b:1e:ce:0c:4a:
                    b2:fe:9e:83:0e:69:82:6d:b2:c5:9d:b6:84:80:01:
                    b8:dc:c3:02:d7:fd:6d:64:9b:70:76:a2:67:1d:c1:
                    fd:ba:6a:4d:6b:b3:78:08:92:b8:f9:7f:7b:a1:10:
                    d0:c1:2f:85:07:33:73:fd:97:2c:3a:df:cd:d8:16:
                    23:74:ea:93:89:fb:10:d6:4d:28:dd:13:f1:72:d1:
                    f0:88:8a:ee:8e:83:70:c9:2f:38:68:ae:64:7e:56:
                    88:31:4a:98:fd:61:bd:4c:b6:e1:59:2f:3c:66:05:
                    aa:e5:d6:5b:65:00:a6:64:9c:e5:ae:60:03:ab:c5:
                    66:1e:cd:93:24:fc:b6:f3:10:0e:4b:44:96:54:bf:
                    24:89:8f:5c:0e:ee:88:de:8b:d3:d2:09:2d:5a:16:
                    14:c7:48:88:d1:d1:96:1c:ef:29:0f:2d:7c:50:40:
                    54:b6:1c:a1:2a:62:2b:7d:92:0d:2c:b8:a5:03:64:
                    68:12:31:7a:c1:bb:40:4e:2d:c6:df:e4:d5:f5:07:
                    eb:37:93:8b:e1:d1:a8:34:2b:0f:8f:be:86:b1:0f:
                    ee:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2E:6B:93:0B:4E:C1:44:4D:9A:AE:4C:04:D4:98:32:A0:4D:E4:88
            X509v3 Authority Key Identifier:
                keyid:19:66:28:61:7C:00:E8:DF:F2:0C:A6:69:93:13:AF:79:FA:D0:AF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWYoYXwA6N_yDKZpkxOvefrQr8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b09acb-636c-4557-80a8-6d929695a5bc/1/GWYoYXwA6N_yDKZpkxOvefrQr8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:1e:29:40:c2:b7:5b:8c:4a:17:31:e3:d7:f1:53:2b:5a:ff:
         81:6e:c8:aa:4d:aa:69:41:cf:b2:ad:ac:ba:c8:af:f4:79:c9:
         a3:d1:d9:1d:5a:10:cf:66:05:9a:a4:46:8d:f6:db:02:3a:82:
         65:c8:ed:ec:b8:de:e0:61:ed:57:54:c0:86:6b:3b:21:d9:62:
         c2:36:58:18:ce:85:46:88:e2:1b:c0:e2:ca:0b:4e:76:d5:b0:
         35:8d:a3:5f:65:7e:3d:d7:82:6a:fd:76:1c:fc:09:64:53:97:
         88:23:1c:53:ad:50:e4:f4:68:b5:06:aa:90:60:3b:68:94:f7:
         65:1d:44:b4:23:e9:59:f9:0b:1d:ca:71:37:d1:45:dd:ea:9e:
         68:3a:cb:63:b3:45:7b:45:ec:ca:12:26:25:f2:cb:ec:b6:d4:
         6c:d2:b5:66:98:c3:c3:4a:3d:c6:2c:a1:72:a6:a0:67:f5:fa:
         57:b2:4c:e4:b5:82:cc:29:ba:c6:e2:6f:b8:5b:09:71:87:91:
         d8:8e:2c:dd:82:b3:09:13:14:da:05:60:ff:c1:e2:e3:38:ec:
         69:b1:01:67:9b:7c:c7:63:8f:91:15:b7:0a:d1:7c:ea:b2:9a:
         ab:63:2e:c2:e4:f9:37:4b:34:b2:62:08:28:da:2f:e9:d2:86:
         28:f5:30:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:43:57 2025 by rpki-client