Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
File:                     gXFLKnOMo96ukVr4fDqRxhPhvEk.mft (raw, json)
Hash identifier:          GfmtFVQt71X0JQkmRCLSlYFEqtXDUtH5jTCxl1z6X0o=
Subject key identifier:   21:1D:DC:4F:45:27:9B:64:CE:C4:7B:01:AF:A2:4C:5A:A8:2A:36:27
Authority key identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
Certificate issuer:       /CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Certificate serial:       01976D3E380DC160A04978C685BFC5B648C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
Manifest number:          0615
Signing time:             Sat 14 Jun 2025 07:01:23 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:23 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:23 +0000
Files and hashes:         1: gXFLKnOMo96ukVr4fDqRxhPhvEk.crl (hash: yHmnm9FFf0n6zSv3be/PUCy/u6/zJ7of4Ns0Tu0AKvs=)
                          2: puvubvKJAYg7r6mXBIAyb_AGzB8.roa (hash: GM5+sjVJG/v0mBOXZh/kGPDkPN3npBN1lUlwDZuz3ng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:38:0d:c1:60:a0:49:78:c6:85:bf:c5:b6:48:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81714b2a738ca3deae915af87c3a91c613e1bc49
        Validity
            Not Before: Jun 14 07:01:23 2025 GMT
            Not After : Jun 15 07:01:23 2025 GMT
        Subject: CN=211ddc4f45279b64cec47b01afa24c5aa82a3627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3f:d4:cb:fe:fd:d5:9c:57:7e:55:ce:cf:0b:
                    89:6d:27:b5:94:fa:6a:07:79:bd:7d:14:44:b8:05:
                    f9:e7:ea:50:a8:79:19:c7:f5:39:31:95:f3:57:23:
                    5f:dc:64:80:f0:3d:21:a3:aa:4f:30:bb:b6:c2:b7:
                    a2:90:f6:a4:de:72:a3:e3:7b:0c:75:46:0c:4b:00:
                    a6:e9:5e:f5:fd:c3:dc:c4:ba:8a:7a:11:e0:02:fd:
                    12:49:3a:49:38:85:63:27:72:a6:2e:19:26:54:8f:
                    7d:09:11:fe:9c:e9:2b:be:26:b6:a7:7a:e8:a1:7f:
                    bc:2a:51:67:69:6c:38:30:99:ec:4d:26:35:be:53:
                    c0:49:c8:ba:0e:8a:62:95:d8:bf:76:87:9a:6e:e9:
                    06:5d:54:2c:ea:b2:f0:7b:de:8b:61:bd:57:ce:6e:
                    62:24:6b:20:b0:09:55:f7:df:a4:9d:ad:3b:e7:5a:
                    3d:4f:a7:f0:d0:bf:1c:19:a9:0f:13:46:6e:d0:7c:
                    2c:de:37:b8:76:1a:3a:e3:47:80:4a:50:e0:c6:8c:
                    32:02:8f:e8:bd:d1:30:00:39:e1:d9:cf:69:c3:8c:
                    4b:ec:b5:ee:4f:32:ed:56:06:ec:40:b7:d1:85:b4:
                    c4:b2:e5:a4:56:c0:c9:41:c9:14:80:18:4c:c8:b0:
                    aa:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1D:DC:4F:45:27:9B:64:CE:C4:7B:01:AF:A2:4C:5A:A8:2A:36:27
            X509v3 Authority Key Identifier:
                keyid:81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:af:35:38:41:c7:34:eb:5b:79:59:a7:d6:fc:10:f6:ee:3c:
         53:9d:49:63:ce:df:75:c9:db:de:e0:7c:27:3b:6d:f2:76:2f:
         3a:63:36:79:ad:76:20:d3:0d:e3:2a:b3:09:4c:5e:44:b6:0c:
         43:85:d0:39:c6:0b:67:84:3e:01:64:49:f6:21:8f:8c:0a:fe:
         73:f9:45:6f:2b:c0:ba:26:24:e9:b0:0e:12:c8:94:90:f0:22:
         58:b6:9e:0c:bb:d0:01:6c:9d:91:6f:3e:10:f4:2d:d2:e2:18:
         5d:43:3b:69:5f:a0:04:bd:20:3a:36:70:9b:41:61:fa:69:cc:
         c4:a2:c4:64:6b:78:d5:42:14:7e:28:d7:48:d3:c4:88:9b:29:
         26:94:8d:4e:bb:a0:07:09:c0:34:31:21:eb:bf:53:62:02:76:
         68:e9:3f:68:06:67:44:1e:84:2a:c7:4d:06:2c:5b:09:eb:45:
         27:05:9f:6b:1f:18:09:e0:dd:80:d6:75:2f:7e:54:c5:18:35:
         d9:a3:9c:d2:fe:8a:64:6c:ea:d7:02:a5:bb:26:d3:88:27:13:
         83:8a:80:0d:d3:40:b8:5e:c1:24:e6:a8:1c:91:61:f6:05:44:
         13:6d:26:d5:47:6c:5a:b1:e2:a1:84:27:42:3a:61:11:83:14:
         26:d4:df:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:45:45 2025 by rpki-client