Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
File:                     gzeZ58jZKoXOlQjBvho_OAlQlZE.mft (raw, json)
Hash identifier:          6MYb3AMTzt4YKWyqddWBDP24Iae1BuEdVb3CU+Cvpys=
Subject key identifier:   03:6E:33:8C:29:35:EE:08:F9:79:5F:AF:DD:99:33:80:9B:DB:13:9A
Authority key identifier: 83:37:99:E7:C8:D9:2A:85:CE:95:08:C1:BE:1A:3F:38:09:50:95:91
Certificate issuer:       /CN=833799e7c8d92a85ce9508c1be1a3f3809509591
Certificate serial:       019763968F4DCDDFD654CB9EDEC354B1539C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
Manifest number:          0E4F
Signing time:             Thu 12 Jun 2025 10:01:40 +0000
Manifest this update:     Thu 12 Jun 2025 10:01:40 +0000
Manifest next update:     Fri 13 Jun 2025 10:01:40 +0000
Files and hashes:         1: gzeZ58jZKoXOlQjBvho_OAlQlZE.crl (hash: ZhnxFSHIMuoSnSJ/JXNtmWiU25PjQaVZaNHZshIkz58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 10:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:63:96:8f:4d:cd:df:d6:54:cb:9e:de:c3:54:b1:53:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833799e7c8d92a85ce9508c1be1a3f3809509591
        Validity
            Not Before: Jun 12 10:01:40 2025 GMT
            Not After : Jun 13 10:01:40 2025 GMT
        Subject: CN=036e338c2935ee08f9795fafdd9933809bdb139a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4a:f9:e7:06:7b:61:fd:84:57:0c:b1:be:52:
                    98:54:0e:92:44:8e:1f:c7:b8:5e:ca:a3:0e:3f:f5:
                    34:d6:b2:31:a8:20:c4:9d:6c:dd:75:21:05:6e:f2:
                    38:3e:5a:29:ac:df:31:98:b3:5e:4d:a1:ba:81:3b:
                    f6:8f:62:fe:53:73:ab:41:be:54:5d:53:19:17:b4:
                    be:f6:c6:2c:7a:93:c2:54:ad:68:21:2c:72:35:c5:
                    16:63:51:7f:28:5a:56:cf:93:35:93:df:49:b4:aa:
                    bf:69:db:1a:a2:24:1a:96:ec:44:ab:47:e1:77:3c:
                    ac:5b:87:80:c3:d8:4f:4a:a5:f1:15:d5:1a:72:7f:
                    bd:64:4e:ba:e0:09:6c:8f:12:ec:34:bd:11:53:e6:
                    57:1a:12:d1:00:36:84:06:f3:80:b3:68:49:91:c5:
                    2a:e9:23:36:93:37:22:b9:1a:e4:ab:2c:c2:d8:b3:
                    89:f2:73:55:2d:b1:22:4b:9c:7d:79:83:a1:29:92:
                    ac:34:01:78:74:97:ec:4e:a3:c1:a1:4d:5a:27:35:
                    0a:37:40:45:4a:4b:df:21:ac:42:44:ee:1d:5e:82:
                    c8:46:3a:7c:d0:97:b7:bb:c7:f6:ab:78:0a:6b:7c:
                    3c:1d:e5:6d:ca:29:c8:5f:08:36:d7:8f:0b:1d:53:
                    6c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6E:33:8C:29:35:EE:08:F9:79:5F:AF:DD:99:33:80:9B:DB:13:9A
            X509v3 Authority Key Identifier:
                keyid:83:37:99:E7:C8:D9:2A:85:CE:95:08:C1:BE:1A:3F:38:09:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:f3:cb:9b:bc:a6:db:71:27:7d:1b:79:39:e1:ac:03:b9:55:
         e8:21:34:14:06:16:e9:fd:f8:10:26:a3:db:2c:ba:6e:32:a6:
         09:1f:ac:07:cf:62:c6:cd:d5:69:72:93:88:93:49:dc:38:dd:
         78:9e:f0:c0:7c:aa:35:4c:ed:8a:a3:67:f8:49:0a:4d:2f:e7:
         c8:51:2c:c7:f9:cc:af:51:08:aa:05:30:ee:7e:61:a9:4d:a4:
         d8:24:a9:a2:f0:59:c6:cb:b9:45:fe:ad:ca:42:06:22:65:fa:
         92:76:7f:ee:a6:d9:bb:0c:06:02:23:12:48:dc:09:32:df:00:
         ac:08:dd:d1:ef:5d:31:15:43:08:9e:7d:5f:be:d5:26:e6:42:
         84:7d:6d:c3:9d:6c:a0:a4:1f:36:6a:b0:17:b5:d1:0b:16:9e:
         8b:e5:68:05:33:8f:24:b1:0a:f2:f5:87:a8:1f:90:4f:46:0f:
         c6:2d:18:33:61:f3:22:8a:46:a3:19:c4:dd:18:0a:e4:80:14:
         7e:6b:1f:4b:a5:8b:2e:4b:4c:28:6d:05:b0:6e:93:6b:c0:8d:
         53:a3:83:1d:d8:03:4e:08:7e:5e:f7:c8:12:b6:8f:a0:39:e0:
         c2:8b:3b:5f:fa:69:f4:84:8c:a2:6c:11:de:c5:c1:c8:39:62:
         d7:ae:53:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 19:16:53 2025 by rpki-client