Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
File:                     G23jwbDHn_sngi4JR_3DjlH8xco.mft (raw, json)
Hash identifier:          trGtck1ht8QnS/GJwO9xT7bxgaZh3uyN8bl2WvFOn8Y=
Subject key identifier:   29:0B:CE:26:EC:39:E5:D7:91:2B:FD:F6:59:88:EB:13:B3:12:00:BC
Authority key identifier: 1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA
Certificate issuer:       /CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
Certificate serial:       0198820B6B1A034644B6B02F1BFF958E78A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
Manifest number:          10BE
Signing time:             Thu 07 Aug 2025 01:00:43 +0000
Manifest this update:     Thu 07 Aug 2025 01:00:43 +0000
Manifest next update:     Fri 08 Aug 2025 01:00:43 +0000
Files and hashes:         1: BiAGFPvBaS-_3_T0Ap9b3JfJGCA.roa (hash: /0KB5Sq+IlIDTZoBY7qyhjJDP3PWs+GzGp/8C87RpPw=)
                          2: G23jwbDHn_sngi4JR_3DjlH8xco.crl (hash: vSyDokbPbv16tRtmOeG15UKEFs8Jq2L5YNXUwx8kxHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:0b:6b:1a:03:46:44:b6:b0:2f:1b:ff:95:8e:78:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
        Validity
            Not Before: Aug  7 01:00:43 2025 GMT
            Not After : Aug  8 01:00:43 2025 GMT
        Subject: CN=290bce26ec39e5d7912bfdf65988eb13b31200bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4a:ac:46:dd:6f:93:89:6b:aa:34:e9:90:ad:
                    7d:03:de:77:c9:79:93:99:81:0d:7d:13:14:a7:bc:
                    36:df:57:64:2d:4f:eb:d8:25:04:ac:30:7b:34:c3:
                    d0:8d:a9:8d:f3:f4:fb:1e:35:f5:7b:2d:c1:9a:4f:
                    3e:87:64:ec:ed:eb:05:0b:40:cb:98:b3:04:85:43:
                    2f:26:7d:38:df:09:ec:aa:a6:69:58:c1:9a:da:5d:
                    b7:15:27:30:b7:0d:a7:17:44:ed:9a:97:7e:11:65:
                    a0:ee:73:1a:b8:43:ea:30:66:ac:48:f6:1f:87:1a:
                    2b:9b:d9:b4:3e:22:33:7f:96:fe:d4:92:82:0e:1f:
                    e0:9e:a9:ca:74:12:92:5a:50:bc:0f:37:ce:b1:f5:
                    70:57:7b:52:9e:5b:62:ec:43:e5:0a:c1:4f:2d:07:
                    99:f6:4b:f3:f6:c8:08:d3:19:3c:5c:32:e3:96:4b:
                    69:59:42:2a:f1:e6:fc:ef:ad:65:44:73:06:46:fa:
                    98:84:42:43:46:52:18:61:25:e5:22:79:e9:60:9c:
                    84:66:99:fc:0c:2a:94:c6:38:19:18:34:6e:e5:b7:
                    ad:aa:c0:a8:5c:67:d7:ab:d0:c1:c5:ca:4a:f2:22:
                    d4:c3:26:eb:3b:ae:97:95:cc:69:db:b7:04:11:71:
                    48:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0B:CE:26:EC:39:E5:D7:91:2B:FD:F6:59:88:EB:13:B3:12:00:BC
            X509v3 Authority Key Identifier:
                keyid:1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:04:01:b8:91:c6:1e:67:d5:00:b0:69:72:86:d9:72:ad:ed:
         bb:04:4e:f3:f1:b1:cb:33:f8:31:82:0f:21:67:e5:f3:a8:e8:
         b6:6c:3d:96:9d:fa:05:82:b0:a6:bb:49:63:aa:2a:3c:04:76:
         8b:ad:d7:ea:6b:b3:5a:00:68:e5:86:0a:3f:6a:8f:6a:5b:bd:
         7f:66:a1:74:4f:d4:05:60:56:fc:97:3e:15:24:75:07:68:c1:
         c7:99:62:13:72:28:1f:40:52:e0:93:ce:3b:1e:95:99:dc:45:
         ea:cb:bd:8b:2b:74:95:6d:bb:d9:43:c4:91:08:7a:73:c2:fb:
         8f:d6:a5:b1:cf:b6:ea:87:b3:1f:50:b5:01:b9:fa:f6:20:34:
         78:37:44:20:58:20:44:4f:82:10:99:1e:51:aa:0d:06:32:d6:
         df:f5:c0:a6:07:a0:52:98:37:c8:67:a6:3a:29:a8:4d:1e:cd:
         79:b6:2b:c5:74:4c:fa:3d:eb:d1:32:a0:4b:e7:60:06:b8:c5:
         a4:f6:6c:46:26:2c:6b:64:44:9a:83:d2:60:eb:bb:f1:1e:53:
         3e:83:71:01:80:62:dd:e5:81:92:cf:ba:92:0a:e1:1c:b5:02:
         de:72:ae:a3:d2:0e:c1:4f:82:1f:15:ee:d0:69:a0:3b:b4:6f:
         b7:ff:7d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:39:53 2025 by rpki-client