Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
File:                     G9JpBH0C_otaKsnrjV_sB7GH7aE.mft (raw, json)
Hash identifier:          mi9KJ7sgZ1hcgOYG5pfhhbsTCLd9eGqRjMHwZDKvWXM=
Subject key identifier:   4E:B4:BE:C6:27:97:AE:0F:1F:EE:17:8D:23:F9:10:C6:BF:8E:19:1B
Authority key identifier: 1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
Certificate issuer:       /CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Certificate serial:       019771F66058B29A9553FDBB80810AF2A469
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
Manifest number:          02C1
Signing time:             Sun 15 Jun 2025 05:01:01 +0000
Manifest this update:     Sun 15 Jun 2025 05:01:01 +0000
Manifest next update:     Mon 16 Jun 2025 05:01:01 +0000
Files and hashes:         1: G9JpBH0C_otaKsnrjV_sB7GH7aE.crl (hash: rvWIdiC7zToJDv84lqgkrK0TtSJ108w9ETMv88q3R10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:f6:60:58:b2:9a:95:53:fd:bb:80:81:0a:f2:a4:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
        Validity
            Not Before: Jun 15 05:01:01 2025 GMT
            Not After : Jun 16 05:01:01 2025 GMT
        Subject: CN=4eb4bec62797ae0f1fee178d23f910c6bf8e191b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:50:79:f0:39:7f:c9:13:44:0a:5d:cd:15:6c:
                    fe:00:47:37:e7:a3:c4:d5:13:f8:ff:5d:b5:e0:4b:
                    45:d3:04:b5:63:73:5e:71:f9:fe:a9:03:1e:85:4f:
                    8b:0d:9f:2a:5a:55:4c:0c:f8:5a:cd:a4:74:0e:25:
                    26:9b:e2:6e:27:32:4c:40:c0:a4:5d:3e:7b:a2:62:
                    c4:79:ab:7d:f9:17:99:b6:e4:80:a6:75:01:92:0c:
                    13:78:be:58:40:d5:fc:8f:c0:c1:f4:04:fc:26:27:
                    8c:3d:1b:ac:ba:b4:cd:ce:32:e9:25:8d:0d:20:80:
                    b3:f7:76:8d:88:44:df:a0:8e:23:b8:77:70:5f:b4:
                    ab:60:7f:ad:52:da:d6:5c:68:1a:ef:43:d2:38:38:
                    06:31:9a:ff:6a:fd:b7:fb:7f:f0:a5:42:c4:cf:b1:
                    3d:11:22:13:60:9c:b8:ae:1b:82:8c:f0:f2:70:43:
                    61:74:1b:d7:cf:47:34:fa:99:51:cf:ac:ae:26:47:
                    bd:ed:b5:e0:6d:ba:f2:e9:c6:e9:ef:8c:33:9b:1d:
                    a8:e2:10:f9:8a:9f:38:80:0a:ee:21:91:d8:81:7a:
                    91:6d:b0:f7:3a:25:1e:e3:e3:62:e3:69:ef:38:29:
                    33:33:4f:e3:8c:b3:2a:51:b2:e4:57:2a:80:3d:8b:
                    7e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B4:BE:C6:27:97:AE:0F:1F:EE:17:8D:23:F9:10:C6:BF:8E:19:1B
            X509v3 Authority Key Identifier:
                keyid:1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:37:91:b9:8b:7b:3a:e3:be:d0:33:a2:75:d7:02:f9:0d:19:
         1d:e3:6b:88:fc:db:5d:d1:64:29:d2:26:15:d7:40:1b:55:56:
         a6:ce:c4:44:2d:00:05:29:8c:d6:9c:7f:b6:ef:20:17:09:62:
         87:e1:e6:cb:d7:13:a8:7c:96:a6:d0:6d:05:6b:fe:ea:22:4a:
         9f:ee:3a:cc:ea:ff:02:9a:88:db:0a:3c:4e:3c:68:30:5f:62:
         98:63:08:32:2d:8d:41:0f:37:52:de:d4:af:5d:3e:32:23:71:
         64:c9:a6:fd:bd:13:cd:64:e9:73:0e:26:51:a7:77:bd:1a:74:
         4b:f4:ea:cd:d3:85:6f:01:ae:e4:50:b0:03:cd:9e:ba:07:04:
         6f:32:c1:c2:b9:1b:f6:32:88:a7:b0:00:2a:0f:46:fa:36:9b:
         45:1e:97:b8:50:e0:52:39:2a:74:d1:94:86:d0:cb:09:72:d1:
         99:05:ca:b7:26:46:33:c4:eb:3e:74:03:43:d1:f0:0c:2f:7e:
         d6:bf:ea:1f:50:4d:00:23:6f:85:1d:ec:c4:21:20:36:bf:98:
         5b:2f:b8:ec:42:19:d3:ef:d5:50:f1:c6:41:8d:9b:82:cc:cf:
         2e:08:a8:19:cb:e6:79:e5:0f:14:01:41:86:24:55:77:a9:17:
         01:2f:b6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:02:07 2025 by rpki-client