Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
File:                     r06GL461X0-CVOLIWLcvQzl_4_o.mft (raw, json)
Hash identifier:          5gh1u6Cis/UZbzFL9krtqKw8JC6UeKkn7zUlzwxyiHk=
Subject key identifier:   D9:FD:13:F9:00:B2:57:90:75:37:99:9D:0E:20:08:19:EC:82:0F:67
Authority key identifier: AF:4E:86:2F:8E:B5:5F:4F:82:54:E2:C8:58:B7:2F:43:39:7F:E3:FA
Certificate issuer:       /CN=af4e862f8eb55f4f8254e2c858b72f43397fe3fa
Certificate serial:       01974A7AB23B279A46FC06E98065ADDD29CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
Manifest number:          157B
Signing time:             Sat 07 Jun 2025 13:00:44 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:44 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:44 +0000
Files and hashes:         1: r06GL461X0-CVOLIWLcvQzl_4_o.crl (hash: Fv5dAFMvC/Jr+qH1+eBtR5f6RiYopzQ8AnIbtUu7PxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:b2:3b:27:9a:46:fc:06:e9:80:65:ad:dd:29:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af4e862f8eb55f4f8254e2c858b72f43397fe3fa
        Validity
            Not Before: Jun  7 13:00:44 2025 GMT
            Not After : Jun  8 13:00:44 2025 GMT
        Subject: CN=d9fd13f900b257907537999d0e200819ec820f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:af:8d:8a:0c:3b:ce:03:cc:b6:3b:99:d7:fd:
                    f9:d3:f5:cd:66:fe:f8:62:27:03:8b:43:c2:98:34:
                    bd:fc:ec:7c:31:14:ea:cd:07:c7:fb:f1:46:75:41:
                    e8:12:e6:16:2b:26:c6:c9:95:31:80:d9:f1:c2:05:
                    1e:73:e3:80:c2:32:92:26:c1:a4:c4:b2:98:62:57:
                    b8:bf:1f:95:7a:f3:5c:57:e2:56:37:10:a7:27:d9:
                    c7:64:77:08:19:a0:92:6d:26:aa:af:9c:0e:1a:1b:
                    ed:b3:10:fd:d0:01:45:02:ad:63:9a:e1:44:fc:34:
                    af:df:34:b6:ac:6d:d9:99:24:39:00:d2:21:03:bc:
                    87:98:ba:f5:c5:02:4f:ec:80:a4:a3:88:ac:ef:55:
                    6d:9c:77:1f:cd:45:6b:e4:bc:9f:45:59:fb:dc:05:
                    9e:29:d0:04:9f:f6:6a:23:fd:a0:da:16:be:59:ab:
                    a5:fc:6a:2b:45:af:a3:0d:49:10:a1:1c:30:75:f6:
                    fb:50:bd:4d:c6:41:77:e9:a1:cd:f5:a5:49:76:24:
                    9b:55:c8:21:a1:71:df:7c:3a:91:97:5d:a8:0e:c2:
                    52:ba:1c:89:ce:14:b5:1e:2b:f7:27:5a:6d:2f:cd:
                    2f:b7:40:b8:b9:97:95:4e:8d:e4:2c:48:ef:05:11:
                    36:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FD:13:F9:00:B2:57:90:75:37:99:9D:0E:20:08:19:EC:82:0F:67
            X509v3 Authority Key Identifier:
                keyid:AF:4E:86:2F:8E:B5:5F:4F:82:54:E2:C8:58:B7:2F:43:39:7F:E3:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:4c:97:64:98:b9:70:47:f3:5c:42:03:e2:27:d7:d7:c5:37:
         4a:c3:d9:e4:b8:52:fc:d3:b9:77:4e:97:b4:7f:d0:9a:97:32:
         0b:4c:fc:69:ff:39:ac:7c:31:bb:9c:e7:78:38:8d:81:a5:24:
         8e:5a:d2:23:fb:8e:6c:cf:00:ed:91:b8:d5:07:95:ea:da:5f:
         0a:ee:3d:a1:be:85:04:34:44:d3:08:54:91:50:23:41:68:a7:
         73:97:b2:44:95:ac:07:d6:a7:ca:f4:7a:05:fe:2b:15:56:c4:
         07:f7:5e:67:c9:8f:6b:02:65:c1:61:81:8c:89:09:8a:28:51:
         dd:7a:57:4b:61:31:07:b9:99:5b:b8:2d:07:df:a3:d4:f5:f2:
         cd:e5:fd:30:82:cb:13:27:90:fa:d6:9b:49:51:8d:74:b7:d6:
         37:04:e4:00:68:07:58:11:19:91:b5:18:b3:bb:5c:a4:77:83:
         98:81:6f:68:7f:a7:63:a3:51:f9:9d:0e:bb:55:49:dd:fd:5c:
         3b:0d:fc:0d:0e:14:4c:2d:64:6d:f0:a4:81:4e:0e:dc:26:39:
         e5:e8:73:53:72:3e:60:89:db:57:1e:0f:7e:4c:a2:72:c9:6a:
         1d:7f:46:40:8d:76:db:d8:e5:d2:b5:48:0d:0b:e0:15:bc:86:
         59:eb:18:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:13 2025 by rpki-client