Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
File:                     GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft (raw, json)
Hash identifier:          AdaTpz4AwMTpBW1VuCxioEjetSP0xDqDOHAOFQtms00=
Subject key identifier:   E1:F8:04:9B:29:E8:5B:4A:A6:2A:CF:B2:92:9F:FB:8C:16:12:B0:8D
Authority key identifier: 1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6
Certificate issuer:       /CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6
Certificate serial:       01984B54255813531F2353EFE9FD9576BB66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
Manifest number:          1146
Signing time:             Sun 27 Jul 2025 10:01:02 +0000
Manifest this update:     Sun 27 Jul 2025 10:01:02 +0000
Manifest next update:     Mon 28 Jul 2025 10:01:02 +0000
Files and hashes:         1: GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl (hash: BcJNJBE9GHXU4A1iUC++JWq5OjWSNWOeWYk/nSPod44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:54:25:58:13:53:1f:23:53:ef:e9:fd:95:76:bb:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6
        Validity
            Not Before: Jul 27 10:01:02 2025 GMT
            Not After : Jul 28 10:01:02 2025 GMT
        Subject: CN=e1f8049b29e85b4aa62acfb2929ffb8c1612b08d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:79:b9:9a:3c:cf:bb:ee:4a:32:53:8c:52:e8:
                    88:ab:84:bf:a2:2b:f1:9c:39:9e:59:57:7b:36:c5:
                    0f:89:b2:4c:65:aa:b0:c3:c5:6f:26:76:e2:ba:a9:
                    ec:a1:ee:8b:ac:f8:23:e3:80:d0:26:8e:7b:2e:58:
                    c8:c3:5f:7c:9e:1d:19:9f:8a:16:75:f6:57:c0:f3:
                    c7:9d:47:1d:71:7c:2e:94:97:3d:fb:19:3b:a0:55:
                    68:4b:99:ab:d2:79:f7:02:15:cb:44:5a:2a:4a:17:
                    c7:e0:f0:6a:d2:46:cb:07:a2:05:fc:68:93:eb:d3:
                    7f:44:19:cb:b3:1c:90:67:ae:b8:36:91:d3:04:1c:
                    73:f4:15:3b:3e:d0:ec:10:6e:e9:ef:07:d6:6a:d4:
                    f7:80:ed:a9:db:76:24:d0:b8:02:31:23:43:52:6a:
                    27:76:07:08:72:9d:16:17:b5:a6:15:8f:52:45:db:
                    72:6a:2e:8b:72:13:d6:5a:cb:97:1b:64:c2:a1:30:
                    b0:bb:27:a4:66:32:a8:f1:4c:4a:63:37:90:6b:bd:
                    42:d7:93:45:86:73:bc:da:63:58:05:60:3a:0c:55:
                    8c:a0:ad:9b:6f:74:fc:0c:59:f8:f4:97:8c:31:c7:
                    f4:0e:43:41:72:f3:93:b0:f5:e4:c8:49:eb:f9:93:
                    a3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F8:04:9B:29:E8:5B:4A:A6:2A:CF:B2:92:9F:FB:8C:16:12:B0:8D
            X509v3 Authority Key Identifier:
                keyid:1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:c1:22:41:4f:b6:97:86:26:31:fc:48:71:e4:a1:ce:4f:c0:
         78:60:e9:34:23:81:f2:8d:8f:c3:b2:ae:00:33:39:30:41:dd:
         84:e8:df:c7:a8:e0:e2:3f:7e:6a:93:48:b7:50:b8:bf:1c:92:
         e3:57:94:df:10:82:82:1e:07:aa:03:0f:7e:a5:0c:ad:7a:f6:
         65:f1:ac:ba:89:86:5b:4c:32:7d:12:3c:42:e9:fb:9f:21:46:
         01:9d:c6:cd:bf:9f:05:9c:67:1e:41:bc:57:d3:b9:54:a2:e5:
         41:e7:98:a8:db:27:1b:3a:1b:29:3f:1b:cc:9f:c8:7f:68:ca:
         49:10:3e:ae:40:c0:fb:bf:d5:26:54:48:9f:79:04:29:47:be:
         29:4c:21:35:85:b6:ae:fb:6d:3a:3a:bd:7a:32:73:0c:f0:98:
         bb:66:93:a6:9b:0d:ca:a4:b5:16:2f:6e:7c:22:9b:e1:92:93:
         ba:af:8b:1a:e9:f8:99:fb:79:61:6e:31:5b:22:65:67:73:17:
         a8:38:8a:c5:c6:72:d4:1b:a1:94:f2:48:74:50:80:7f:a7:4d:
         d8:20:be:86:17:52:94:e0:e2:44:a8:aa:e9:3a:d9:74:76:ae:
         2f:10:b0:75:45:cb:c3:d2:c8:35:77:4e:0e:cf:4b:25:e8:1c:
         02:a6:d6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:34:32 2025 by rpki-client