Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
File:                     1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft (raw, json)
Hash identifier:          LWyeLRuKIkfsEL053QfT07mLpHbajy7KHQ+hxupuWlc=
Subject key identifier:   85:6A:E3:B1:66:B5:18:B1:D0:47:64:98:2E:B7:6E:7E:1F:8E:B3:26
Authority key identifier: D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
Certificate issuer:       /CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Certificate serial:       01976C2AB91E664965CC8D88211B8724998D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
Manifest number:          0187
Signing time:             Sat 14 Jun 2025 02:00:28 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:28 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:28 +0000
Files and hashes:         1: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl (hash: 3/erdGpivWnkyoyyuSjHFdScpIb0EOVT9QlqhPYXJ8I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:b9:1e:66:49:65:cc:8d:88:21:1b:87:24:99:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
        Validity
            Not Before: Jun 14 02:00:28 2025 GMT
            Not After : Jun 15 02:00:28 2025 GMT
        Subject: CN=856ae3b166b518b1d04764982eb76e7e1f8eb326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:16:91:15:be:c0:80:b1:16:ec:a9:d5:67:36:
                    e5:93:d8:49:c4:6c:6b:92:7b:97:35:25:aa:ec:d2:
                    33:f3:81:e1:d7:f9:52:59:81:e8:75:5b:d0:5a:5b:
                    45:74:2b:11:fe:44:0a:6b:d0:80:76:6e:cf:95:46:
                    84:4a:b3:52:f8:d3:38:d7:b4:fd:dd:57:a7:f3:3e:
                    c8:d7:81:3c:b3:1b:91:9f:df:6d:9b:97:32:f1:a7:
                    1e:ff:e7:f1:a6:ce:b7:3b:a3:e2:cb:33:85:3a:19:
                    8e:60:b0:37:41:8b:e3:1c:2a:f4:de:8d:30:12:6d:
                    fe:fd:6d:26:98:cf:eb:bc:f4:55:aa:7a:b9:63:ad:
                    60:c8:44:53:82:49:eb:0d:70:b9:fd:ce:1a:2c:a1:
                    57:d7:53:3d:51:18:d9:51:8c:22:dd:7e:58:f9:34:
                    81:69:db:60:c2:62:21:e7:ad:01:56:a9:9d:5b:41:
                    92:dd:62:9d:bb:59:ff:8f:1e:b2:c3:6b:3b:c3:57:
                    a5:2b:29:79:47:6a:b3:b3:bb:ff:3f:2c:23:07:bf:
                    60:f9:4c:f8:41:95:69:0b:88:f1:bb:64:4a:c9:73:
                    fb:44:2f:86:b2:95:c8:0a:a5:a4:4d:d0:f6:d0:8f:
                    ab:a0:5f:61:5f:3a:60:38:8e:bd:9d:36:69:6d:c8:
                    ae:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6A:E3:B1:66:B5:18:B1:D0:47:64:98:2E:B7:6E:7E:1F:8E:B3:26
            X509v3 Authority Key Identifier:
                keyid:D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:47:73:9b:97:29:08:18:23:18:ee:b5:cf:3f:9f:8b:21:92:
         14:97:d5:8d:cd:b5:b0:76:da:db:89:08:32:e6:8f:77:a3:b6:
         bf:42:7a:16:db:d7:58:da:e3:40:9a:35:8e:19:37:09:27:d0:
         5d:aa:76:4b:2d:50:86:3a:bc:57:56:9d:07:53:74:f8:c9:2c:
         91:40:fc:7b:12:e5:39:23:fa:05:99:9d:03:16:83:ee:e3:b6:
         0f:44:bd:94:4f:b7:a2:8b:70:d1:09:ad:44:e0:af:88:70:2d:
         0b:c8:b7:a4:83:bc:62:ae:25:e7:0d:49:1a:a8:e1:8d:77:c0:
         1e:20:2c:9e:e7:48:41:f8:e2:df:c3:86:7c:37:97:4c:a2:49:
         4b:50:af:77:54:15:33:cd:a7:98:e2:c2:a3:76:17:c5:1d:d6:
         8d:a5:f0:22:03:86:bf:35:f5:03:6e:ad:fc:7e:c5:a4:54:10:
         53:f1:61:54:52:62:e8:9f:9d:f0:26:c0:56:0d:84:18:d6:df:
         fa:b6:09:ee:eb:15:09:41:55:ad:62:f6:2f:bc:3c:b6:d0:2e:
         8a:f0:8e:fe:6e:b0:d3:1b:99:ce:ac:54:d8:97:08:69:9f:6b:
         dc:73:06:6d:33:9a:99:14:a3:c2:87:e0:78:94:7d:47:28:ae:
         68:80:c8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:43:41 2025 by rpki-client