Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
File:                     G7yEG3eaK7LCio2u4rLRDVp8NNU.mft (raw, json)
Hash identifier:          SXxDr3em8qYmZgYfrms/Bi6yEs0SzlpK0F7+bEXXykY=
Subject key identifier:   A5:39:3E:68:B8:2C:31:9B:12:04:94:26:DB:C7:92:8C:93:8E:32:8D
Authority key identifier: 1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
Certificate issuer:       /CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
Certificate serial:       0198481BE036034D294CEFEEC42ADF6DE16D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
Manifest number:          1602
Signing time:             Sat 26 Jul 2025 19:00:43 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:43 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:43 +0000
Files and hashes:         1: G7yEG3eaK7LCio2u4rLRDVp8NNU.crl (hash: +UJr5Kt6BoXXoQeElnRaXPhf2X3zbY7YVxeguN35mMs=)
                          2: VBl-ShtkY5AIJWsXxjtVR-loSP4.roa (hash: UuFGS1s0gPMKN8UjwJZO3gcLtja3SP+rxmHIDo2PFTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 19:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1b:e0:36:03:4d:29:4c:ef:ee:c4:2a:df:6d:e1:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
        Validity
            Not Before: Jul 26 19:00:43 2025 GMT
            Not After : Jul 27 19:00:43 2025 GMT
        Subject: CN=a5393e68b82c319b12049426dbc7928c938e328d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6a:90:a7:80:7b:7e:9e:b3:6d:16:af:ce:bd:
                    5c:69:90:14:47:20:41:b1:12:59:0d:08:17:81:31:
                    ec:7c:cd:98:d7:6c:50:7c:65:85:96:be:32:7e:00:
                    7e:3f:11:f9:26:c9:8d:d9:29:af:b3:eb:82:92:e4:
                    cb:f8:e3:4d:46:db:b5:7a:a1:19:12:74:2b:19:21:
                    9c:44:61:da:66:59:9f:0d:f3:85:a9:7a:7c:a0:79:
                    25:82:a6:a3:3c:48:f5:6c:e9:bb:12:ec:8a:12:d0:
                    18:70:cb:f8:ce:1e:23:d4:68:62:52:81:9d:19:42:
                    e5:3c:80:9f:88:72:7a:ae:e4:1c:ee:8d:1b:55:f7:
                    7d:60:68:ee:0f:3f:3d:c2:0b:f6:a3:f7:35:8b:d3:
                    e7:20:84:c4:11:29:8a:0e:ef:28:c7:6b:6e:cf:77:
                    93:d0:2c:ab:78:f6:5b:74:4e:e8:ca:51:50:89:eb:
                    df:61:82:b6:88:b2:d0:f4:dd:04:02:f2:8f:21:5e:
                    6b:34:ec:24:d4:b3:f4:6d:1b:9a:7a:46:96:3e:8f:
                    fb:2b:ea:82:19:f2:80:23:78:ae:19:65:ad:cd:19:
                    76:07:64:0f:a9:db:9d:32:fb:0e:16:4d:6b:1d:3e:
                    79:dc:e3:80:d8:2b:5f:00:7b:91:89:ae:36:46:b9:
                    d3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:39:3E:68:B8:2C:31:9B:12:04:94:26:DB:C7:92:8C:93:8E:32:8D
            X509v3 Authority Key Identifier:
                keyid:1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:23:3b:fa:02:95:a3:c3:c9:90:dd:1e:8c:6d:e1:ab:ef:cb:
         09:20:26:a3:09:2a:05:09:13:24:f0:24:d6:9e:e9:d4:78:6d:
         2e:6b:d3:ae:bd:f0:52:8d:ec:34:b5:e4:1c:31:ca:2e:68:0c:
         6e:3a:83:11:38:f6:32:0a:8e:1e:5b:e2:9f:01:45:d8:81:57:
         03:84:53:ab:de:94:96:44:49:eb:fb:04:2a:25:18:98:c2:ce:
         7d:0a:f6:4d:91:1f:a6:be:62:e3:4f:0a:82:00:13:d5:49:e9:
         83:4e:59:90:8a:ff:68:6f:6e:ff:fa:0b:74:44:cb:93:ee:4a:
         e3:29:30:b3:bc:a2:66:04:42:11:24:20:7e:2c:f2:04:c1:c7:
         21:88:a9:31:93:0e:a3:19:44:1b:5d:13:bf:a1:1d:4b:11:85:
         29:7d:4f:b3:49:01:5d:63:8c:34:47:ac:e1:80:06:93:c4:e2:
         fe:9f:81:57:48:ee:75:7e:a9:a3:d2:f4:2f:90:b8:76:78:d6:
         6d:f7:f2:f7:8a:1b:0e:f9:95:f9:87:92:05:72:f6:ba:ca:1b:
         24:6d:49:80:92:97:3a:16:24:95:07:fe:58:01:7a:17:5b:7e:
         47:43:41:2a:71:a7:76:bb:82:a1:0f:37:eb:e1:88:7e:8b:bc:
         f0:c5:b2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:21:57 2025 by rpki-client