Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
File:                     G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft (raw, json)
Hash identifier:          A7NaFbRV/91xw3b8mTyJQ7+3jRUgWoSeNQjZ5DVqp58=
Subject key identifier:   ED:70:16:A2:A1:3E:0F:D0:A8:37:B9:F2:83:65:A8:AF:DE:B4:26:59
Authority key identifier: 1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3
Certificate issuer:       /CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
Certificate serial:       019A4EF5D50C82D6BB3832DE46C3FB92DC7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
Manifest number:          0BD2
Signing time:             Tue 04 Nov 2025 13:02:04 +0000
Manifest this update:     Tue 04 Nov 2025 13:02:04 +0000
Manifest next update:     Wed 05 Nov 2025 13:02:04 +0000
Files and hashes:         1: G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl (hash: qdjbwP4PDoOi1OkwBN6Gt05us/PirpTRyPdHGIfOAuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:d5:0c:82:d6:bb:38:32:de:46:c3:fb:92:dc:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
        Validity
            Not Before: Nov  4 13:02:04 2025 GMT
            Not After : Nov  5 13:02:04 2025 GMT
        Subject: CN=ed7016a2a13e0fd0a837b9f28365a8afdeb42659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bc:95:8e:ad:59:f1:eb:91:a5:90:32:a1:9e:
                    6a:9c:66:37:88:c1:7f:98:91:3c:4b:b6:84:5c:ef:
                    2b:96:a8:83:a8:17:ad:f1:ff:65:79:65:ea:21:3f:
                    b8:84:4e:f5:02:74:59:26:dc:23:ec:4e:db:da:35:
                    25:f6:9f:d8:45:8f:0d:ee:10:c8:e7:eb:e2:c7:ca:
                    8f:8a:73:03:df:d6:84:41:cf:3f:84:d6:ec:8e:24:
                    a1:39:d5:0e:dd:21:05:26:ee:36:e9:4a:d6:47:88:
                    c2:6c:12:7c:9d:c4:04:e1:c4:20:42:d9:11:b4:ce:
                    2f:c1:25:85:af:12:79:b6:39:a0:7a:6c:ae:99:b2:
                    17:a7:28:52:f3:f3:39:1a:b5:9f:c0:f2:8b:c6:40:
                    11:7d:86:40:fe:b1:79:94:c2:fd:2e:fa:8f:7a:51:
                    92:ef:3b:f1:76:8a:8b:30:bb:46:d8:f9:76:0b:ce:
                    05:a0:00:aa:49:6b:b0:1c:91:0c:3a:4d:61:79:41:
                    e3:03:0d:6c:7c:87:2f:3c:59:fd:f1:c9:6e:8a:01:
                    71:4b:c1:32:d3:7d:ab:0c:f7:1e:0f:4f:99:ad:a1:
                    c9:21:1e:c2:db:e6:96:e8:ef:46:a2:f6:2d:8b:6c:
                    b3:f6:7e:ec:b0:f5:1e:c7:b6:54:1e:f2:c8:ed:55:
                    b3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:70:16:A2:A1:3E:0F:D0:A8:37:B9:F2:83:65:A8:AF:DE:B4:26:59
            X509v3 Authority Key Identifier:
                keyid:1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b7:6b:0b:f5:72:e0:08:5c:6b:46:c7:83:6a:58:27:b0:bc:
         ee:1e:b9:46:d4:9a:99:3d:ef:18:01:29:40:9c:dc:f3:96:0e:
         5b:2d:cb:ce:17:b6:ed:ee:80:23:9a:15:29:df:f4:13:dc:74:
         12:4b:f1:24:09:55:f1:c4:f1:57:8e:b6:4d:b6:7a:c9:af:8d:
         fc:84:a0:68:fe:56:db:e1:00:d5:cd:32:3a:5c:f7:1f:23:9d:
         90:8d:d7:25:18:7f:e0:e7:f0:09:d0:38:cf:df:6a:c9:d3:3a:
         e5:5d:52:da:90:8e:5b:f4:e8:92:4f:a5:90:87:fa:dc:ef:2b:
         4b:f9:66:4d:90:8b:7c:c3:94:ab:91:71:fb:16:1a:b8:75:99:
         ea:ad:94:3c:56:3b:8f:54:25:8a:8b:b0:79:00:e0:d9:69:7a:
         cd:d0:9c:c8:44:07:47:84:12:93:47:13:b7:96:7f:66:9a:26:
         9e:59:57:5c:c1:f5:da:a1:07:79:26:61:84:2e:04:de:6e:5c:
         87:4b:f0:ec:f1:92:93:7c:cb:76:33:f2:f7:ed:ee:32:62:00:
         d4:8c:46:1a:1c:ef:7e:6c:90:8b:36:cd:3b:aa:0a:5a:50:a8:
         ab:2f:2b:5a:07:b8:2c:66:fe:d8:4e:91:d6:5f:50:22:4f:8a:
         80:db:c0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:42 2025 by rpki-client