Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
File:                     gdVXqIaObSYWrTZ1TcbckSt819Y.mft (raw, json)
Hash identifier:          JITKXOb4q0uHr6NjpCZOx+JgOp7pry1HFxxbaV2eJco=
Subject key identifier:   47:E5:77:6E:01:D9:66:2C:B4:C1:9E:42:FB:DD:0E:AA:4D:DE:BE:31
Authority key identifier: 81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6
Certificate issuer:       /CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
Certificate serial:       01984776F59B0C2AD7FED8C4C2491611A3B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
Manifest number:          1419
Signing time:             Sat 26 Jul 2025 16:00:35 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:35 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:35 +0000
Files and hashes:         1: gdVXqIaObSYWrTZ1TcbckSt819Y.crl (hash: CyexLCptXwiTqrd//DRR0T5J6cwjTGPPoTzZGI9gVdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:f5:9b:0c:2a:d7:fe:d8:c4:c2:49:16:11:a3:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81d557a8868e6d2616ad36754dc6dc912b7cd7d6
        Validity
            Not Before: Jul 26 16:00:35 2025 GMT
            Not After : Jul 27 16:00:35 2025 GMT
        Subject: CN=47e5776e01d9662cb4c19e42fbdd0eaa4ddebe31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:14:23:a4:db:5f:49:e1:d8:52:01:ce:57:39:
                    3c:d9:c4:d4:31:9c:1f:9a:88:dc:ef:46:c1:ac:a3:
                    1f:c3:6d:10:e1:05:2b:7c:85:0d:b4:0c:41:5b:17:
                    f6:d3:47:97:46:54:7b:88:e5:96:70:b2:df:3a:0e:
                    bd:c3:ee:23:f9:a6:98:8e:f4:60:4e:f4:c0:b1:5c:
                    4c:33:94:85:fa:e3:5e:09:a1:42:fb:79:63:18:ff:
                    2e:df:3d:12:f3:52:5d:10:57:74:cf:fc:9c:af:ae:
                    fa:02:1b:af:57:a4:b0:86:c9:b1:3d:96:38:18:fb:
                    40:b6:60:ba:44:96:c3:67:17:3b:ff:7c:e4:63:02:
                    bc:05:b0:84:69:26:4f:56:5d:03:e8:d2:89:15:9b:
                    86:e7:ad:73:6e:0d:5e:ac:47:e2:fe:b2:64:a6:21:
                    42:5f:4d:9a:a5:d0:b2:3e:12:f3:be:bc:21:b0:55:
                    a1:a1:86:fc:6c:37:cc:4c:9e:be:80:79:1d:9b:bb:
                    41:a4:33:77:e4:55:b8:23:d6:57:2a:eb:89:e6:02:
                    e1:2f:03:1b:f1:7e:dc:5a:d6:b5:e8:97:28:ea:6e:
                    0c:e7:ae:4b:2b:e5:d2:5c:73:45:8b:7f:bb:df:4c:
                    9e:44:37:df:70:7b:e3:da:cf:b7:25:2e:58:a7:05:
                    49:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E5:77:6E:01:D9:66:2C:B4:C1:9E:42:FB:DD:0E:AA:4D:DE:BE:31
            X509v3 Authority Key Identifier:
                keyid:81:D5:57:A8:86:8E:6D:26:16:AD:36:75:4D:C6:DC:91:2B:7C:D7:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdVXqIaObSYWrTZ1TcbckSt819Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c9233c-125b-4c55-9268-dfba15e4b7a5/1/gdVXqIaObSYWrTZ1TcbckSt819Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:35:4d:3e:af:16:f7:f4:f8:8e:ce:76:ca:3a:d5:96:55:51:
         2d:fa:d5:8d:12:67:3a:aa:c6:d3:24:09:c6:d5:5f:16:c0:12:
         0c:df:9b:36:7d:d4:71:ee:1f:51:03:1c:55:3c:dd:bf:7b:db:
         1c:58:ec:85:ca:61:d5:ce:c3:86:35:be:e2:e4:7c:ad:9b:20:
         cb:7b:18:fb:81:c9:df:65:a5:1f:7f:a8:7e:b1:c4:01:7a:84:
         48:a6:66:30:ae:95:f7:35:1f:0c:a9:46:fe:bb:85:e1:64:43:
         80:71:92:d1:18:34:af:b1:82:f2:a6:32:d3:c7:bb:bc:40:ab:
         b2:64:dd:65:3b:93:76:eb:95:b8:2f:0e:05:85:38:3d:39:70:
         f2:f3:48:29:2c:ec:e7:32:5e:5e:4e:48:67:8c:d3:04:38:2d:
         01:32:01:b4:9f:7e:36:c9:b8:34:72:b1:a4:78:34:11:3b:6c:
         fe:ff:ad:d7:61:68:92:4e:55:6d:e8:16:fb:16:61:ae:6e:d6:
         82:8e:e1:f8:a4:7f:02:b3:74:31:9d:b0:31:09:f0:96:54:fa:
         e6:d6:ab:90:76:70:6c:85:68:75:25:ad:b2:78:97:9c:5d:b5:
         00:78:89:49:17:e5:7b:b1:fb:5d:72:8c:7f:25:04:ac:17:cb:
         d2:59:a9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:53:30 2025 by rpki-client