Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
File:                     G1NNR62NtYlKX8k0LkVY-U5PF_E.mft (raw, json)
Hash identifier:          /7ukOsSvp1JQs2i9Pz1H3rofyXSbe1DSuMPxr/ViZ0o=
Subject key identifier:   BC:BB:FD:75:41:5F:1C:14:80:52:7D:FD:6C:AF:4E:B0:B3:B1:0B:0F
Authority key identifier: 1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1
Certificate issuer:       /CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
Certificate serial:       019675D5681B17362CFCF1F0159AADBC7A7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
Manifest number:          1465
Signing time:             Sun 27 Apr 2025 06:00:42 +0000
Manifest this update:     Sun 27 Apr 2025 06:00:42 +0000
Manifest next update:     Mon 28 Apr 2025 06:00:42 +0000
Files and hashes:         1: G1NNR62NtYlKX8k0LkVY-U5PF_E.crl (hash: QfKa5x9nugFy/hJ4SSNhzEIqMgAxqLo7GVWpsBoq96Q=)
                          2: tpcLfnSFe1LhX4JafoXime7wXxw.roa (hash: 5bEgNy5LIfp1SJAYM4F8oQrbGx7UDr0Zn6gyPZH4W9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:d5:68:1b:17:36:2c:fc:f1:f0:15:9a:ad:bc:7a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
        Validity
            Not Before: Apr 27 06:00:42 2025 GMT
            Not After : Apr 28 06:00:42 2025 GMT
        Subject: CN=bcbbfd75415f1c1480527dfd6caf4eb0b3b10b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:05:89:5e:00:28:67:43:f7:f8:bd:93:35:d2:
                    50:3e:79:a0:51:5c:fa:bd:15:16:44:1d:17:e1:87:
                    01:26:8b:50:25:e2:0f:b3:0c:dc:4a:1d:0a:52:e3:
                    e1:7b:96:f8:74:9c:52:5e:0b:ce:60:17:dd:b3:0b:
                    3e:55:72:dd:23:6f:31:8b:9b:b0:9a:1a:07:5d:95:
                    32:70:b7:b2:39:cc:7a:24:a8:52:b4:0b:f8:8b:5d:
                    96:b9:70:c4:59:14:c0:83:d0:01:e7:9b:b2:56:61:
                    78:ec:5f:a0:68:2d:2f:b5:14:d0:9c:18:98:44:8b:
                    89:60:b3:ee:85:c5:36:94:a9:3d:16:ef:89:f5:b8:
                    6a:5d:63:6d:4b:f1:c7:1d:40:9c:5f:49:f5:0a:ad:
                    77:f4:f1:93:a6:99:94:02:83:bb:75:59:2b:f0:62:
                    e6:5c:a9:aa:7f:b4:9d:e6:64:66:3c:d6:21:a7:20:
                    fc:a3:b7:8c:b0:7f:a2:16:c3:e9:4b:57:31:ac:83:
                    a1:12:87:03:7b:50:c4:1e:c8:df:9a:1c:d2:07:35:
                    d8:7f:c7:3c:c3:ba:f2:ae:cd:e7:7c:a2:e8:ff:bc:
                    f0:ad:d9:e7:02:3e:bc:e1:72:e8:d3:05:49:1c:07:
                    87:d5:6a:07:f7:16:28:7e:95:a8:af:c5:7b:72:95:
                    44:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BB:FD:75:41:5F:1C:14:80:52:7D:FD:6C:AF:4E:B0:B3:B1:0B:0F
            X509v3 Authority Key Identifier:
                keyid:1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:30:08:cf:b5:cc:17:77:c0:ff:8e:3f:75:5b:90:7b:dc:67:
         ff:1e:bb:4a:27:4f:68:fc:a3:40:40:3e:de:8a:92:08:f2:f1:
         23:f5:7a:06:72:bd:2c:e5:7a:ad:b8:a6:f3:0e:2c:af:a7:3b:
         cc:4f:86:65:d7:98:68:ce:2d:4b:c8:c5:46:0c:38:b1:62:59:
         e4:53:43:50:24:2e:67:ba:42:4a:43:7b:19:4c:38:6d:32:30:
         ed:ad:57:82:58:7a:68:36:04:72:58:25:91:9b:53:17:b9:f6:
         cd:e8:3c:7f:c4:3c:39:49:e6:e1:e8:01:71:f9:a8:8a:65:91:
         07:2c:3e:17:5a:5b:6c:e4:bd:5d:3c:73:fd:c0:9b:0b:1a:e3:
         57:32:ed:5e:9c:af:41:52:d9:43:25:a5:05:a7:60:69:93:e2:
         8e:58:bc:d4:2f:04:30:17:f3:42:b6:f1:38:5c:47:16:8e:8a:
         69:53:12:c5:02:87:10:a9:5c:5a:ea:e2:d7:03:61:d5:12:0c:
         cf:e7:3f:6d:8b:9e:47:f4:e7:e3:55:77:4b:00:9b:e0:d4:b6:
         e7:d3:80:57:f5:9e:b8:5b:80:95:d4:54:1c:c9:71:3a:0f:87:
         9e:16:c2:e3:7f:98:a6:16:da:6a:06:ca:f1:10:5f:bf:2f:d1:
         8a:20:1d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:02:07 2025 by rpki-client