Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
File:                     GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft (raw, json)
Hash identifier:          e/qMtQ1Ohxdt5OU6CSA3NSJqrHt2o/qVpeMOUCIHRQQ=
Subject key identifier:   80:F5:50:AF:F2:2F:99:4C:98:E1:41:F5:6A:F5:47:6F:A9:7B:3C:48
Authority key identifier: 18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70
Certificate issuer:       /CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70
Certificate serial:       0197488C8B0B2517377D3A8D44D1E0537A2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
Manifest number:          124C
Signing time:             Sat 07 Jun 2025 04:00:59 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:59 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:59 +0000
Files and hashes:         1: GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl (hash: ES+i199TUBxi1IC8pkPUSSsAVgNRsFDQYY4S0hKfbV0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:8b:0b:25:17:37:7d:3a:8d:44:d1:e0:53:7a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70
        Validity
            Not Before: Jun  7 04:00:59 2025 GMT
            Not After : Jun  8 04:00:59 2025 GMT
        Subject: CN=80f550aff22f994c98e141f56af5476fa97b3c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a3:58:26:22:30:0a:5c:ef:44:32:04:0e:23:
                    5f:65:cd:ee:02:98:26:8d:77:eb:c6:6a:df:35:9a:
                    58:64:ce:53:3b:e5:94:e5:fe:91:77:ea:5c:75:15:
                    dd:7e:40:55:40:2c:fb:30:8d:73:49:df:55:7a:92:
                    a9:0c:60:80:97:6b:c3:72:53:b5:67:67:d1:27:bd:
                    38:d6:f2:02:2c:69:af:c2:d0:cf:5e:f3:73:36:35:
                    fc:02:e7:00:76:41:03:37:99:69:cc:c8:a1:bb:53:
                    65:74:14:05:6b:17:4d:63:94:8f:ad:69:39:4a:ce:
                    81:14:be:53:bc:85:2c:3f:52:a5:6b:bf:bd:50:0b:
                    58:a1:78:a9:32:61:06:f4:09:4d:56:f0:81:ab:06:
                    c1:b9:9a:fa:b5:be:04:73:36:4b:fd:ee:78:3d:93:
                    14:09:18:36:26:6d:5e:b6:8b:46:88:42:f6:c7:84:
                    89:92:d2:60:a1:f1:32:3d:ee:66:38:1f:20:83:b1:
                    6d:af:97:41:5c:5b:74:de:0e:92:12:55:ee:f4:12:
                    5d:eb:48:58:4e:e6:eb:25:aa:af:86:1a:68:1f:18:
                    b7:0b:39:60:60:99:df:86:ee:55:56:3d:de:81:da:
                    55:8e:e6:7e:f0:e7:52:98:60:ca:fa:14:e5:69:95:
                    02:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F5:50:AF:F2:2F:99:4C:98:E1:41:F5:6A:F5:47:6F:A9:7B:3C:48
            X509v3 Authority Key Identifier:
                keyid:18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f7:22:72:fe:d2:bd:cf:af:23:87:dd:59:20:e4:5a:a4:23:
         6e:d3:8e:88:9b:ab:74:4e:27:28:44:b8:6f:0e:6c:d1:66:48:
         e4:49:94:66:54:6c:f8:c9:1e:42:ec:8b:e6:0d:7a:0c:a4:8f:
         ba:36:38:bf:1a:d4:38:ee:a0:3c:74:c3:82:0d:63:80:ae:19:
         c7:c2:08:4c:1e:30:46:00:9d:70:47:c0:f8:67:26:ae:ab:0a:
         13:99:ee:6b:48:80:97:7f:f7:3a:ba:5c:b3:25:ea:bd:fe:80:
         af:d1:90:14:26:13:26:90:4c:d6:4a:7e:ce:9f:0b:60:9f:a9:
         ea:2f:00:65:7e:56:07:9f:70:a5:7c:09:d3:d1:32:87:00:7c:
         81:65:f8:a5:f2:64:ee:8b:6a:98:42:39:10:04:a3:52:1b:c0:
         dc:83:81:d1:f9:70:7a:95:d9:f4:11:07:89:25:cb:3a:fe:fd:
         f3:3d:f2:38:bd:4b:19:cf:8d:83:3b:a3:2a:7b:09:52:78:ca:
         8a:e1:2b:3e:c6:c8:ce:fc:1c:ee:78:7e:d4:91:9f:a5:24:62:
         53:86:a2:c1:2f:52:5a:fe:7b:e5:53:16:aa:72:8c:90:19:a7:
         03:00:0b:8b:9a:4c:68:8e:76:73:81:1d:d0:0f:ed:90:3f:61:
         74:f1:0c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:14:42 2025 by rpki-client