Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
File:                     gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft (raw, json)
Hash identifier:          rXYtJ3+mgsX69D6Su6qDCgimJg9YQidazRTDoD6XfuI=
Subject key identifier:   94:5C:09:2A:D5:88:2C:4F:78:70:4F:BC:33:9D:B8:FF:A0:46:64:AF
Authority key identifier: 81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0
Certificate issuer:       /CN=8159495b72ff015878c1314d24759b6e9147a8e0
Certificate serial:       01974930F54487DB5E2E1C7A9DA5CBA3E41E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
Manifest number:          1578
Signing time:             Sat 07 Jun 2025 07:00:34 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:34 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:34 +0000
Files and hashes:         1: gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl (hash: 8oEVjjWQ3IXqTPKQsFi3Xtg7ss6ViyygP8vfFSYih24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:30:f5:44:87:db:5e:2e:1c:7a:9d:a5:cb:a3:e4:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8159495b72ff015878c1314d24759b6e9147a8e0
        Validity
            Not Before: Jun  7 07:00:34 2025 GMT
            Not After : Jun  8 07:00:34 2025 GMT
        Subject: CN=945c092ad5882c4f78704fbc339db8ffa04664af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:88:c3:66:31:ab:cb:0b:9a:e4:0a:ba:fb:4c:
                    1d:e2:9a:5a:c8:d5:68:b7:26:61:c1:c7:39:bf:40:
                    73:12:cb:a5:97:1f:00:b2:ce:af:f1:f2:e6:8b:5f:
                    81:b1:99:9a:a0:ad:30:cd:2e:41:5d:ae:d3:42:29:
                    37:ee:7b:8e:61:c7:cf:17:0d:b8:db:9c:2e:18:d0:
                    33:2f:d7:69:1e:ae:8f:57:0a:e8:9b:4f:38:35:a6:
                    9c:b7:ca:e9:23:16:53:4c:0b:59:70:6a:60:a6:df:
                    3c:94:fd:c4:1f:52:02:8c:5c:73:83:17:83:05:92:
                    bd:0d:27:25:d4:63:a5:71:19:51:e5:b5:1c:a4:04:
                    26:6e:4d:c7:a9:08:d1:e0:49:9d:4a:e2:25:85:30:
                    d9:81:72:86:4a:d5:4d:23:bb:b6:1f:89:6a:f3:e9:
                    54:c5:e2:f2:2c:ab:e8:c9:b1:8e:0d:f8:1a:83:1c:
                    c9:13:27:96:31:f3:a8:70:bb:40:cb:00:5c:d7:d8:
                    cd:07:c7:bd:67:07:34:35:44:f0:00:ea:ac:80:2e:
                    ae:b6:cd:ab:5e:5f:20:af:f0:68:8d:3b:8c:d3:83:
                    cd:d6:73:1b:3f:c3:85:e3:5c:4a:97:48:f5:a3:13:
                    f9:4b:53:d3:69:65:3e:bf:b1:74:bb:0f:df:bc:de:
                    27:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5C:09:2A:D5:88:2C:4F:78:70:4F:BC:33:9D:B8:FF:A0:46:64:AF
            X509v3 Authority Key Identifier:
                keyid:81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e9:8e:db:a8:df:01:e4:c4:e5:d0:2a:74:79:9d:85:c3:6a:
         27:29:69:ef:f0:9a:45:92:bd:99:96:a7:46:a0:74:0f:c5:ff:
         e8:c5:14:ae:5f:6b:b5:e4:a9:54:67:6d:9a:7f:dd:cc:b6:c5:
         c7:07:b7:f9:a5:f6:eb:8e:ed:d0:ff:b2:30:89:36:1d:b4:70:
         ef:f4:4f:3d:5e:5f:8b:65:9a:ef:1e:40:41:a6:01:2d:29:cf:
         e6:0d:75:55:2f:4c:9c:89:a8:76:ee:af:5b:20:fc:de:3e:9c:
         4a:0f:5b:e7:f6:fd:94:74:76:c7:f5:c2:51:ed:16:5e:24:ff:
         a6:b2:38:93:4f:2e:a1:60:3d:e1:33:72:1f:c2:1d:d7:47:39:
         06:72:c5:ea:b9:6a:68:c3:d9:24:bb:3d:86:eb:2f:b4:15:0b:
         fb:38:a8:80:1a:24:e0:5e:5f:0d:4f:a0:9a:32:c4:69:39:3d:
         fa:d7:74:c1:3c:55:79:da:99:33:af:8a:03:9e:91:fc:51:96:
         ce:13:c2:28:1d:f4:c9:1e:42:a8:84:04:96:ed:ea:9b:4e:0d:
         16:43:e4:e4:7c:09:48:d9:35:4a:b1:62:c0:5b:fe:1c:ac:6b:
         be:5c:13:d2:7c:27:27:2d:ca:c7:26:63:0a:bc:76:96:8c:9e:
         fe:93:58:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMPVEh9teLhx6naXLo+QeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNTk0OTViNzJmZjAxNTg3OGMxMzE0ZDI0NzU5YjZlOTE0
N2E4ZTAwHhcNMjUwNjA3MDcwMDM0WhcNMjUwNjA4MDcwMDM0WjAzMTEwLwYDVQQD
Eyg5NDVjMDkyYWQ1ODgyYzRmNzg3MDRmYmMzMzlkYjhmZmEwNDY2NGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9YjDZjGrywua5Aq6+0wd4ppayNVo
tyZhwcc5v0BzEsullx8Ass6v8fLmi1+BsZmaoK0wzS5BXa7TQik37nuOYcfPFw24
25wuGNAzL9dpHq6PVwrom084Naact8rpIxZTTAtZcGpgpt88lP3EH1ICjFxzgxeD
BZK9DScl1GOlcRlR5bUcpAQmbk3HqQjR4EmdSuIlhTDZgXKGStVNI7u2H4lq8+lU
xeLyLKvoybGODfgagxzJEyeWMfOocLtAywBc19jNB8e9Zwc0NUTwAOqsgC6uts2r
Xl8gr/BojTuM04PN1nMbP8OF41xKl0j1oxP5S1PTaWU+v7F0uw/fvN4nXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRcCSrViCxPeHBPvDOduP+gRmSvMB8GA1UdIwQY
MBaAFIFZSVty/wFYeMExTSR1m26RR6jgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1ZsSlczTF9BVmg0d1RGTkpIV2JicEZIcU9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZTg4OWMtODU5MC00ODU3LThjYmIt
OTAyNGIwZDIyNmM2LzEvZ1ZsSlczTF9BVmg0d1RGTkpIV2JicEZIcU9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9mZTg4OWMtODU5MC00ODU3LThjYmItOTAyNGIwZDIyNmM2
LzEvZ1ZsSlczTF9BVmg0d1RGTkpIV2JicEZIcU9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOmO26jf
AeTE5dAqdHmdhcNqJylp7/CaRZK9mZanRqB0D8X/6MUUrl9rteSpVGdtmn/dzLbF
xwe3+aX2647t0P+yMIk2HbRw7/RPPV5fi2Wa7x5AQaYBLSnP5g11VS9MnImodu6v
WyD83j6cSg9b5/b9lHR2x/XCUe0WXiT/prI4k08uoWA94TNyH8Id10c5BnLF6rlq
aMPZJLs9husvtBUL+ziogBok4F5fDU+gmjLEaTk9+td0wTxVedqZM6+KA56R/FGW
zhPCKB30yR5CqIQElu3qm04NFkPk5HwJSNk1SrFiwFv+HKxrvlwT0nwnJy3KxyZj
Crx2loye/pNYWA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:49:45 2025 by rpki-client