Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
File:                     gLonv9hqgQoXlX0fcm_hYNTrMiU.mft (raw, json)
Hash identifier:          VRZ1tuW4LuPtTnBtPOT9JgBU/m+/72q3PP01PqFv01E=
Subject key identifier:   B6:27:9F:1F:E2:05:0B:74:E8:1D:63:16:C9:86:B9:11:43:7C:8A:06
Authority key identifier: 80:BA:27:BF:D8:6A:81:0A:17:95:7D:1F:72:6F:E1:60:D4:EB:32:25
Certificate issuer:       /CN=80ba27bfd86a810a17957d1f726fe160d4eb3225
Certificate serial:       01974BC44EC991F83B42EE8229F7DA39948E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 19:00:45 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:45 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:45 +0000
Files and hashes:         1: gLonv9hqgQoXlX0fcm_hYNTrMiU.crl (hash: NvkIT3roiKnZGHDkLmBO3+nHgN2vJ1AAmeSP8Sqmwuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:4e:c9:91:f8:3b:42:ee:82:29:f7:da:39:94:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80ba27bfd86a810a17957d1f726fe160d4eb3225
        Validity
            Not Before: Jun  7 19:00:45 2025 GMT
            Not After : Jun  8 19:00:45 2025 GMT
        Subject: CN=b6279f1fe2050b74e81d6316c986b911437c8a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ff:d6:3d:5b:d5:bd:86:54:51:b5:61:fa:a1:
                    76:ae:0a:88:0b:4f:05:5b:f8:3e:39:5d:ae:2b:26:
                    9d:06:11:40:0e:72:ed:82:a7:58:c2:3c:83:0d:80:
                    dd:33:f0:46:6a:62:70:3f:fd:d9:e0:24:27:9f:b8:
                    97:ad:5d:14:ab:56:b2:c6:bf:6e:20:59:18:ba:6d:
                    5d:f3:1b:cd:fb:b5:05:ac:1c:dc:1c:32:82:0f:c1:
                    0b:ac:2b:98:09:76:bb:6b:10:76:20:42:a4:a0:3e:
                    59:87:59:84:9d:de:e1:47:5a:05:d9:fa:21:26:84:
                    37:a8:ff:6a:6c:a7:4e:27:3c:c9:bf:e9:13:9c:68:
                    98:dc:5b:78:d7:c2:46:81:b6:97:b0:e4:d0:85:51:
                    43:bf:ec:0a:24:46:b1:66:4e:c8:5f:79:b1:f1:2f:
                    8e:86:31:f6:89:a4:39:9e:14:1b:af:48:e3:69:8f:
                    d5:66:6a:aa:3f:cd:69:2b:cb:cc:70:63:00:0f:d7:
                    20:9b:f5:fa:b4:49:a3:18:9d:cd:7c:4a:65:e5:f2:
                    43:4f:ec:75:fb:fa:21:2f:5f:cd:57:fe:86:28:07:
                    d5:cf:52:f0:54:78:ea:c9:0e:a2:7e:d9:9c:ac:99:
                    69:d6:15:54:7a:25:26:2b:50:80:50:6b:f1:35:05:
                    d5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:27:9F:1F:E2:05:0B:74:E8:1D:63:16:C9:86:B9:11:43:7C:8A:06
            X509v3 Authority Key Identifier:
                keyid:80:BA:27:BF:D8:6A:81:0A:17:95:7D:1F:72:6F:E1:60:D4:EB:32:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLonv9hqgQoXlX0fcm_hYNTrMiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d88e87-62f9-475b-a84d-036e7efc9aca/1/gLonv9hqgQoXlX0fcm_hYNTrMiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:dc:9b:93:6f:92:6c:cb:b2:e6:9f:2b:95:74:0a:33:b9:fb:
         8c:93:47:59:f3:08:41:eb:1e:4f:9a:2b:60:22:b9:41:6a:4a:
         34:c6:c8:ba:f1:dd:22:d1:36:7d:57:d1:11:42:7c:48:6b:29:
         58:bd:e6:c4:06:85:05:cf:83:74:a4:93:79:c5:9c:c6:a9:25:
         3e:56:87:e7:1d:a6:1b:82:3e:22:d0:3e:71:65:63:96:1e:c4:
         aa:f6:4f:0a:0e:8e:73:83:8f:c6:98:ca:b2:46:8d:a3:2b:8e:
         a5:a9:8a:5a:42:d7:41:0d:7b:79:df:39:63:8a:ec:36:94:8e:
         7e:0b:15:b0:e4:e3:29:9b:dd:12:45:09:d8:07:b6:84:1d:35:
         f8:8e:b0:f3:e1:fa:10:73:6c:ce:14:6f:7f:73:4d:90:d2:7b:
         29:e9:8f:5f:26:92:4b:d2:23:49:6e:46:36:98:51:75:fc:af:
         bf:a4:7b:a2:2f:e5:41:72:bb:83:a5:e5:f4:b7:a4:85:13:2f:
         ea:71:7d:b8:8b:02:a5:79:ba:64:dd:bf:e5:b2:02:f5:40:6c:
         e3:ea:28:1a:97:6d:4a:6e:eb:6c:fd:0e:35:76:b0:a6:2a:7e:
         7a:55:67:26:6d:54:7c:b0:5a:09:62:d9:cd:db:95:2f:60:5e:
         b4:7d:5a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:28:13 2025 by rpki-client