Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
File:                     gzeZ58jZKoXOlQjBvho_OAlQlZE.mft (raw, json)
Hash identifier:          Ck41Z8P6SpksF7JMP9jcaGhrHblmHECchFk2H0dYn8U=
Subject key identifier:   46:D9:91:8E:E1:18:D6:4F:E9:60:3E:A6:43:26:5F:34:E8:10:5C:6A
Authority key identifier: 83:37:99:E7:C8:D9:2A:85:CE:95:08:C1:BE:1A:3F:38:09:50:95:91
Certificate issuer:       /CN=833799e7c8d92a85ce9508c1be1a3f3809509591
Certificate serial:       0197542380F42E31AC6C6A1E9E30539D8A96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
Manifest number:          0E47
Signing time:             Mon 09 Jun 2025 10:01:42 +0000
Manifest this update:     Mon 09 Jun 2025 10:01:42 +0000
Manifest next update:     Tue 10 Jun 2025 10:01:42 +0000
Files and hashes:         1: gzeZ58jZKoXOlQjBvho_OAlQlZE.crl (hash: tiuj9uIIyC6yCJBO7KHFugRqcUwSdUhCZ1JgTkCnjRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 02:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:23:80:f4:2e:31:ac:6c:6a:1e:9e:30:53:9d:8a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833799e7c8d92a85ce9508c1be1a3f3809509591
        Validity
            Not Before: Jun  9 10:01:42 2025 GMT
            Not After : Jun 10 10:01:42 2025 GMT
        Subject: CN=46d9918ee118d64fe9603ea643265f34e8105c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e7:f7:a3:93:f1:1d:9c:6a:78:47:e1:62:db:
                    2c:51:e9:a3:5d:6a:2b:6d:03:63:3b:1a:77:b2:fa:
                    8b:49:f9:c4:e7:94:e0:76:20:92:80:a0:c3:c8:03:
                    bb:9d:eb:44:f6:f9:8f:94:96:00:7d:d2:90:de:a6:
                    4d:7e:83:2d:0d:3a:f2:ce:b2:b3:e8:14:fa:20:fc:
                    d9:a8:36:3e:f3:8e:10:a4:fa:43:dc:b5:6f:32:df:
                    dd:c8:12:5c:ac:61:67:1b:bf:d4:09:27:39:df:34:
                    da:6b:b5:ea:92:46:8a:4a:c5:e5:38:b2:30:59:40:
                    df:52:90:ff:23:cf:83:43:7e:b6:bb:42:9b:fe:83:
                    e8:36:f4:a3:7d:81:66:38:8f:df:78:a7:3c:24:11:
                    de:65:89:1c:db:82:2c:fd:e8:7e:69:78:d2:d0:48:
                    75:b0:11:66:f3:75:8f:1f:9a:f9:70:1d:62:aa:c4:
                    f5:f1:b2:94:12:cd:f8:87:ad:84:24:81:4f:22:47:
                    a6:6c:ba:0a:a6:cc:d7:4e:5b:c7:6e:dc:73:73:7b:
                    9d:79:1e:0f:65:c5:b6:01:c7:24:19:6f:c0:de:78:
                    7f:fa:32:4e:3b:5a:8b:10:c8:55:d4:26:0c:7b:89:
                    c3:f3:a9:27:40:c2:da:1c:82:3c:d5:44:2e:b0:a8:
                    1f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D9:91:8E:E1:18:D6:4F:E9:60:3E:A6:43:26:5F:34:E8:10:5C:6A
            X509v3 Authority Key Identifier:
                keyid:83:37:99:E7:C8:D9:2A:85:CE:95:08:C1:BE:1A:3F:38:09:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b7:af:6c:f6:f3:7c:ce:eb:75:6b:6c:6f:5e:e0:7f:47:94:
         05:1f:a1:4f:9c:b7:7a:02:58:16:e5:47:71:9f:1a:37:ba:ae:
         fb:bc:4d:ca:34:0e:7e:ce:7f:91:05:3e:77:4c:63:4c:d5:85:
         54:6a:ab:b7:2b:6b:6d:8d:5c:62:3a:3e:0e:54:a5:ca:b3:b4:
         fb:1b:28:b9:61:20:fe:50:52:45:c4:68:ec:f2:bd:55:ed:ea:
         be:f8:d3:59:ee:e1:d4:36:14:54:09:a3:61:4d:ab:98:ae:c9:
         0a:63:79:fe:b7:92:98:66:ec:0f:d5:8d:50:59:a5:00:86:30:
         56:7a:f8:ac:2e:7a:8c:d2:b9:08:5a:24:eb:8b:c8:d9:ab:8b:
         35:ff:c7:8c:9b:f4:43:22:bb:30:f4:d4:6d:b1:62:9d:6f:da:
         df:8e:ff:65:77:4e:1a:70:24:97:8b:09:42:4a:b1:c7:fd:df:
         3a:f5:a2:97:ed:35:aa:54:ce:5c:fa:3b:c8:3e:4f:73:aa:cf:
         e7:e2:d8:13:02:d6:6a:cc:6b:a8:ef:64:b5:fe:94:a4:ff:61:
         4d:e9:49:fb:7b:46:97:82:88:c1:68:b8:b3:d8:25:d2:de:0d:
         f1:e6:1c:fc:47:5b:6b:a4:82:0d:e4:e0:9c:dd:8f:f2:0c:ac:
         18:dd:fa:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:40:37 2025 by rpki-client