Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
File:                     G1WOmRP2tWzD1WD5T_E38s1vSGI.mft (raw, json)
Hash identifier:          0p4Jmsp1VCkfMr6LenCLkj/B84UtjzoVXaibo/GbGuk=
Subject key identifier:   4C:97:24:1F:4B:35:29:95:7C:5A:52:2B:73:45:E7:31:E3:3D:F6:2D
Authority key identifier: 1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62
Certificate issuer:       /CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862
Certificate serial:       01987306BF98E8B4C135DFE0689FA3515C85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
Manifest number:          062E
Signing time:             Mon 04 Aug 2025 03:01:18 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:18 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:18 +0000
Files and hashes:         1: G1WOmRP2tWzD1WD5T_E38s1vSGI.crl (hash: EJmPUSKxrVuaRDbghvvr/T6pjGdLYTA5KiHe1QYvgDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:bf:98:e8:b4:c1:35:df:e0:68:9f:a3:51:5c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862
        Validity
            Not Before: Aug  4 03:01:18 2025 GMT
            Not After : Aug  5 03:01:18 2025 GMT
        Subject: CN=4c97241f4b3529957c5a522b7345e731e33df62d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:d5:28:a3:74:d5:23:6e:2d:d2:50:f5:ab:
                    60:a9:36:f0:c1:eb:4d:3a:f9:84:9c:d2:81:5c:d2:
                    e2:8a:50:b4:98:f7:b2:cc:74:ca:71:4e:6c:14:b9:
                    06:24:8e:56:b8:de:68:5d:0e:e6:d8:ff:86:b3:61:
                    c3:9c:d1:a4:d2:a8:15:bd:f2:4b:50:57:52:5a:8a:
                    1f:e5:38:6f:9a:c5:75:12:d0:ff:59:6a:13:e4:40:
                    9d:8e:99:47:e6:f1:41:d7:46:21:f3:94:3e:4a:b1:
                    7c:a1:f8:56:db:8d:12:54:53:3a:65:20:3c:53:b1:
                    00:ac:95:f4:26:a5:17:8f:4c:78:99:54:54:56:3a:
                    6e:fe:a3:b3:72:3c:4c:8f:18:86:32:6d:9f:8e:94:
                    5f:cb:0d:31:c0:5f:e8:82:f7:1a:ed:92:c7:f0:0a:
                    3a:2f:31:25:7a:2c:93:0f:11:34:1b:21:50:5b:20:
                    ae:67:7f:17:d2:1f:36:f7:4d:37:9b:cf:b2:e3:79:
                    b0:d9:37:95:09:1c:47:b4:39:9e:f8:d7:ab:8c:ef:
                    ec:1d:33:9d:13:1a:9a:5b:e6:e3:e5:30:25:c1:68:
                    69:1e:f0:65:dc:df:ec:5c:77:4b:24:3b:ae:11:32:
                    3d:85:6b:22:eb:c2:f4:a3:05:4d:77:eb:76:5a:3e:
                    b0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:97:24:1F:4B:35:29:95:7C:5A:52:2B:73:45:E7:31:E3:3D:F6:2D
            X509v3 Authority Key Identifier:
                keyid:1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:9c:83:d9:0b:2e:3b:c3:aa:fc:ee:51:6d:2c:84:fe:45:43:
         64:54:4d:9b:eb:40:f7:f8:e8:b4:ca:31:77:33:16:1f:43:c7:
         4c:c1:ca:29:4a:28:f1:6a:f5:08:7d:fc:16:a9:61:9d:ff:0e:
         08:bb:ca:6b:7c:59:1f:ef:70:76:be:4c:c4:b1:e1:6d:d9:f6:
         e9:ac:c3:85:0a:9b:82:e3:80:a4:82:93:de:3e:5e:53:b3:c3:
         3d:5a:fe:33:4a:10:c0:99:dd:a7:92:3c:45:f5:df:51:85:96:
         36:36:67:49:0d:86:91:69:42:58:cc:80:e6:d8:a8:37:83:6b:
         cb:94:1c:a9:43:47:77:c5:a7:39:f4:96:6a:8e:ed:31:d6:32:
         a7:16:7c:e9:9f:09:48:44:98:a6:33:c7:ae:c1:6c:ff:03:90:
         0f:12:2b:77:4d:3a:5d:b2:dc:1f:69:fb:08:08:bf:f6:58:f3:
         89:0b:ac:fb:19:a6:1a:57:01:d4:3f:31:f7:d8:16:6e:1f:2a:
         fe:2d:a4:11:ee:12:ac:b0:45:ff:60:9e:05:d1:24:66:e5:27:
         4d:57:94:70:25:5a:a9:d6:fc:70:c0:40:85:5a:c5:f1:d5:d6:
         a8:ce:de:4f:bb:77:16:67:90:bf:6f:7f:b0:8f:46:d4:47:82:
         c3:48:8f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:05 2025 by rpki-client