Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft
File:                     G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft (raw, json)
Hash identifier:          rwCVRQavKZ/G97k80483frQcxJF+3zH13BtOFn2NI10=
Subject key identifier:   B6:19:F8:58:E9:29:59:B7:54:6F:C3:0B:30:C7:79:E3:CB:49:8F:A5
Authority key identifier: 1B:54:43:7C:92:C1:E0:8B:06:E0:77:61:87:C7:88:4D:D5:1C:0E:38
Certificate issuer:       /CN=1b54437c92c1e08b06e0776187c7884dd51c0e38
Certificate serial:       01976DE2522028DD58A1D6A15FB93A5E598C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft
Manifest number:          0675
Signing time:             Sat 14 Jun 2025 10:00:38 +0000
Manifest this update:     Sat 14 Jun 2025 10:00:38 +0000
Manifest next update:     Sun 15 Jun 2025 10:00:38 +0000
Files and hashes:         1: G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl (hash: NcF++B2VxxbwtAWlhR+9AmFtTKmUrlqVduILDv+q9wA=)
                          2: m-RL63I77tnbUHaZReiKcRHtR58.roa (hash: VHqfyzr+g1S2KroF/o4QYcY/QOnFZTun+jLqscdqvBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:e2:52:20:28:dd:58:a1:d6:a1:5f:b9:3a:5e:59:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b54437c92c1e08b06e0776187c7884dd51c0e38
        Validity
            Not Before: Jun 14 10:00:38 2025 GMT
            Not After : Jun 15 10:00:38 2025 GMT
        Subject: CN=b619f858e92959b7546fc30b30c779e3cb498fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:32:bf:97:37:be:76:11:05:67:22:69:f7:7a:
                    5d:37:d3:fb:7e:dc:ed:16:83:ef:4f:31:5f:32:f0:
                    61:52:e9:4a:7a:ed:5c:0e:c6:e2:c9:55:f9:c3:cb:
                    f4:f9:c3:ee:bf:a0:4c:f4:6c:86:bf:77:98:a9:0e:
                    1b:1d:ec:ba:15:33:de:53:14:a2:d9:66:ad:55:26:
                    f3:1f:44:09:50:86:29:a7:cf:ef:87:92:6f:ba:67:
                    a3:ed:8a:a8:d4:a4:ac:cb:95:0d:5d:f6:55:aa:2e:
                    fc:32:eb:f1:0e:96:16:4c:8f:36:3d:2e:3f:0a:0d:
                    c9:e5:9b:33:7e:b6:2e:18:6d:ae:3e:75:f5:95:b4:
                    ad:de:74:47:98:c3:15:0e:91:ec:e6:57:ba:72:46:
                    98:dc:9e:18:6f:0a:ee:95:61:e1:f3:74:79:3c:5d:
                    9f:b6:ed:18:c2:89:d0:f6:62:46:11:5a:2d:f9:10:
                    9d:f5:7f:67:6d:4e:c1:84:bd:a0:f4:be:fa:76:d8:
                    3b:e6:47:11:f6:4c:1d:ed:52:ef:cc:79:20:4e:d5:
                    04:0b:d2:0b:fa:84:ef:41:34:d3:64:08:da:f3:ff:
                    df:98:e8:39:f6:01:7b:92:32:41:65:de:d3:34:78:
                    69:d7:80:12:76:02:27:1d:32:7e:9f:90:8e:aa:6c:
                    55:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:19:F8:58:E9:29:59:B7:54:6F:C3:0B:30:C7:79:E3:CB:49:8F:A5
            X509v3 Authority Key Identifier:
                keyid:1B:54:43:7C:92:C1:E0:8B:06:E0:77:61:87:C7:88:4D:D5:1C:0E:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:0d:4c:70:e1:dc:c2:f8:e2:84:1a:92:21:5f:1a:bc:94:95:
         ca:76:c5:c5:a4:1b:57:6b:9c:4e:53:c7:96:89:c8:ae:5f:e9:
         6d:0c:aa:6f:9b:1c:49:19:0e:69:83:cc:3b:d9:88:71:f3:5f:
         d6:28:77:46:a9:24:26:e3:2e:38:9f:eb:38:2f:74:bd:12:7f:
         14:3c:37:6c:68:33:3c:29:5d:e0:e4:1a:ab:16:7d:0a:21:51:
         83:cb:46:9f:a1:59:cb:57:a9:f2:bd:12:d4:fd:4a:0d:7b:be:
         85:55:50:40:e6:ed:cf:50:89:44:1e:39:6f:aa:a3:86:65:34:
         7b:f3:2d:87:1e:b3:c0:81:f2:d3:99:78:2b:87:4c:06:14:b8:
         b1:05:1a:1b:ab:fd:af:7d:f6:7e:f9:0f:14:9d:c8:95:dd:21:
         50:23:5c:6e:62:c7:a9:2c:39:ed:16:8c:02:cd:6b:25:73:6d:
         ab:fa:c0:30:d2:42:96:96:9d:84:28:18:9e:c8:d5:33:8b:09:
         54:c9:74:a5:b9:d0:37:a9:95:a3:d8:94:d7:58:29:84:9a:45:
         de:0d:ac:99:31:d9:07:4c:d9:27:2e:36:8d:58:97:46:75:cc:
         ff:a2:80:3a:c3:71:06:8d:bb:61:6f:6a:4e:70:c2:73:50:d8:
         46:5e:40:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:53:47 2025 by rpki-client