Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
File:                     gWiVcrIAukh5OByFdCdCZVkqFKs.mft (raw, json)
Hash identifier:          lSSgZIvsVob5vaRSqsLMFPf3zI7uKBg+zYPNYKpqKIA=
Subject key identifier:   79:12:60:83:BE:3D:2B:22:DB:81:FA:F1:72:71:0B:C7:04:4A:0F:5B
Authority key identifier: 81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB
Certificate issuer:       /CN=81689572b200ba4879381c8574274265592a14ab
Certificate serial:       01974A7A5803BD8582973B74A097C0CB7EC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 13:00:21 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:21 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:21 +0000
Files and hashes:         1: gWiVcrIAukh5OByFdCdCZVkqFKs.crl (hash: b+Q4zzC3noD/EXBrm1u4hQNy0bCnfiK8pptKDa2fUcg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:58:03:bd:85:82:97:3b:74:a0:97:c0:cb:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81689572b200ba4879381c8574274265592a14ab
        Validity
            Not Before: Jun  7 13:00:21 2025 GMT
            Not After : Jun  8 13:00:21 2025 GMT
        Subject: CN=79126083be3d2b22db81faf172710bc7044a0f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:cd:f6:3f:39:f8:65:0f:99:66:e4:54:29:
                    3d:22:33:f4:a5:d0:8d:5e:1d:88:28:9d:99:af:f0:
                    81:3e:ec:3d:ad:13:24:90:49:fe:b1:60:ab:1b:d5:
                    20:7b:b6:36:93:06:10:e4:dd:f3:1f:fb:2c:86:f6:
                    c8:ac:5d:58:e0:d4:5d:51:9a:2e:e5:62:44:0d:78:
                    11:0c:5f:45:12:67:3e:54:05:b8:ea:44:b1:79:70:
                    14:8f:e8:3e:aa:b4:0c:90:0e:e1:1d:3b:cd:1e:4b:
                    bf:dd:39:67:89:02:28:9b:f4:86:b0:b7:b8:2d:cc:
                    59:ac:d2:66:8a:0d:fc:7a:15:d5:3b:c3:27:e0:6e:
                    b5:6a:58:aa:38:ff:15:5a:b4:e4:14:be:a2:63:8d:
                    47:61:3f:2f:19:5e:34:98:dd:2b:24:1f:df:3d:5f:
                    af:2d:94:5e:1f:19:6c:33:af:07:2b:96:54:af:8e:
                    d9:17:6f:c5:81:47:e1:40:84:f3:62:3e:e4:3d:d1:
                    3f:6c:40:33:db:3e:29:ce:9d:b3:e1:b7:fb:45:fb:
                    97:03:fd:fd:d0:5e:72:ce:dc:62:61:74:86:a3:ea:
                    e8:07:27:86:98:1c:f9:29:cc:8c:7d:9a:9a:4b:9f:
                    16:bf:ce:b7:37:7b:5d:4a:ac:a0:c0:40:5e:52:cb:
                    6c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:12:60:83:BE:3D:2B:22:DB:81:FA:F1:72:71:0B:C7:04:4A:0F:5B
            X509v3 Authority Key Identifier:
                keyid:81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:c2:5d:30:98:f1:d8:2f:b7:c4:8d:85:87:68:e9:85:87:08:
         92:25:6a:80:cc:d7:29:c5:cd:56:e3:1d:00:da:d1:21:ed:1a:
         ee:65:13:63:b0:24:78:0c:c1:e0:58:cd:f1:08:8c:be:d5:f4:
         f1:a8:47:d6:cb:31:6e:e3:f6:dd:1b:b0:dd:c3:ae:84:37:bb:
         25:cb:49:18:e1:e8:24:29:64:36:6a:6d:ee:76:ca:ad:01:97:
         b9:ee:09:5e:60:db:4a:39:cb:30:aa:22:6e:04:bd:72:a9:c8:
         d0:fc:19:2b:ae:35:4d:57:f1:b8:34:8f:2e:a5:4d:49:93:5f:
         fe:e6:09:e1:c2:78:af:51:e3:f1:f0:a1:49:95:a8:7c:cd:b8:
         89:13:68:b2:86:4c:2e:cf:e8:28:6b:21:bd:bd:61:a8:4a:a8:
         d4:98:0e:65:db:51:f5:3e:9f:76:dc:80:07:5b:ac:92:4e:d9:
         c7:dc:a9:95:0c:b9:86:6f:18:69:b4:39:49:07:d4:75:5f:c1:
         0d:c0:62:5a:a3:97:b7:12:55:e2:ca:c6:61:97:62:d1:57:58:
         af:f6:c6:ae:cb:85:a6:fa:ab:72:c0:e6:13:f5:8b:81:59:f4:
         f5:58:be:d3:d9:60:32:9c:e2:60:2f:38:d2:96:b9:1b:3b:46:
         21:8d:8f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:12:17 2025 by rpki-client