Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft
File:                     G7Qd9-pn1O3-D60S99XOzYPhjZo.mft (raw, json)
Hash identifier:          U2YyCB3a5M5CR5aCxFWP3AnsK4zschYgVtLse0PrOSg=
Subject key identifier:   9D:FE:0C:1E:3D:06:01:F8:1C:F9:7D:E7:83:52:60:CB:80:98:54:B1
Authority key identifier: 1B:B4:1D:F7:EA:67:D4:ED:FE:0F:AD:12:F7:D5:CE:CD:83:E1:8D:9A
Certificate issuer:       /CN=1bb41df7ea67d4edfe0fad12f7d5cecd83e18d9a
Certificate serial:       0197790AD37B7826ACDD1223E1754E535A04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G7Qd9-pn1O3-D60S99XOzYPhjZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft
Manifest number:          0372
Signing time:             Mon 16 Jun 2025 14:00:41 +0000
Manifest this update:     Mon 16 Jun 2025 14:00:41 +0000
Manifest next update:     Tue 17 Jun 2025 14:00:41 +0000
Files and hashes:         1: G7Qd9-pn1O3-D60S99XOzYPhjZo.crl (hash: n2AQRwWlQ5m6w49/7/ShrOfxS/+t249cWJzZgiFG4+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G7Qd9-pn1O3-D60S99XOzYPhjZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:0a:d3:7b:78:26:ac:dd:12:23:e1:75:4e:53:5a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bb41df7ea67d4edfe0fad12f7d5cecd83e18d9a
        Validity
            Not Before: Jun 16 14:00:41 2025 GMT
            Not After : Jun 17 14:00:41 2025 GMT
        Subject: CN=9dfe0c1e3d0601f81cf97de7835260cb809854b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:68:15:dc:0e:1b:6e:33:8f:a9:5d:c8:fb:d8:
                    28:7f:f2:6d:d5:09:c9:de:40:d5:ac:f3:f8:05:93:
                    08:2e:81:76:00:82:19:40:db:89:95:0e:fa:a2:8f:
                    c4:01:a2:2d:06:cb:6d:ca:8d:bf:58:27:c2:57:20:
                    47:7c:ee:22:81:91:c6:21:1f:50:b2:f4:a3:aa:5e:
                    32:41:41:c6:c3:35:75:01:11:bc:fe:ae:e5:37:6c:
                    cf:57:bd:79:15:bb:4a:9b:99:4d:fd:92:23:3b:83:
                    ae:32:70:a3:e4:78:a9:f8:6c:ee:3b:4b:25:77:b7:
                    61:35:39:2e:3b:ba:16:db:4e:e4:64:a9:bd:f8:a3:
                    b0:5e:51:c5:93:2d:65:0a:9a:e1:33:3c:cd:64:03:
                    8b:0c:9c:d2:85:54:59:b1:aa:1b:f4:7c:71:df:e4:
                    8c:40:0a:9c:94:46:cc:fb:6d:0b:f9:81:e0:4e:95:
                    d6:d3:bd:64:61:96:62:5c:85:40:32:49:45:0b:56:
                    de:5d:25:54:4a:7b:02:57:7d:3b:e5:09:fa:fe:52:
                    09:15:0b:9d:56:c2:d8:2c:e5:e2:ce:4a:63:89:39:
                    69:30:69:a4:f9:1d:a3:df:73:3d:5c:6c:70:95:31:
                    2c:f5:81:33:27:34:86:ad:9d:15:01:15:0d:f9:77:
                    60:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FE:0C:1E:3D:06:01:F8:1C:F9:7D:E7:83:52:60:CB:80:98:54:B1
            X509v3 Authority Key Identifier:
                keyid:1B:B4:1D:F7:EA:67:D4:ED:FE:0F:AD:12:F7:D5:CE:CD:83:E1:8D:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7Qd9-pn1O3-D60S99XOzYPhjZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b5:19:e2:a6:b8:f7:7b:80:01:52:7e:7b:a4:95:9b:82:43:
         6a:76:71:74:5c:0d:ae:9b:46:a7:33:eb:c3:28:65:80:ef:24:
         eb:58:80:4a:f9:5e:4f:d6:fb:9c:a0:ac:ed:26:2b:df:9d:5d:
         c1:6c:51:83:e7:85:59:8b:91:50:3d:62:bb:e9:79:bf:c9:03:
         2e:b8:62:d6:f6:1a:47:e2:bb:ee:5c:ba:ce:ac:a5:ae:2e:84:
         10:f2:7c:69:7e:e0:16:02:3e:84:cb:11:ce:dc:60:e4:af:67:
         24:ec:17:86:d7:5c:5b:9c:f4:5f:29:8a:0b:2f:0d:34:e2:ae:
         98:6b:bf:78:5d:5a:a0:18:22:2c:34:4c:1e:95:7b:c4:56:1a:
         bc:a6:18:f2:ed:86:e8:16:16:38:a9:e6:8a:92:21:cc:bd:1a:
         46:d3:94:6f:60:a7:54:2a:ed:0c:9e:ae:9a:3d:00:18:a0:ba:
         84:03:15:05:9f:e1:71:ba:e7:e8:47:cd:8a:53:70:cf:13:bb:
         2b:90:d7:66:f8:c2:18:79:e1:4a:d4:22:6c:28:b9:d7:e0:75:
         77:5a:ba:df:38:a1:95:52:b8:30:4f:09:2a:66:84:19:69:b1:
         e3:af:a7:4f:d4:3f:d2:02:7b:5d:e2:ce:d6:09:f7:7b:cd:49:
         7e:b0:7a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:34:24 2025 by rpki-client