Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
File:                     G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft (raw, json)
Hash identifier:          ir0EtZGzquHJFqc8nRxdXhuvh7/W6tFTS4Qp8kcfww4=
Subject key identifier:   D2:EE:D1:D0:88:0E:49:18:94:28:F9:CD:05:65:42:24:6D:92:B0:4B
Authority key identifier: 1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3
Certificate issuer:       /CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
Certificate serial:       0198530E24AA7F84B923F0191E1CD952F46C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
Manifest number:          0ACB
Signing time:             Mon 28 Jul 2025 22:01:32 +0000
Manifest this update:     Mon 28 Jul 2025 22:01:32 +0000
Manifest next update:     Tue 29 Jul 2025 22:01:32 +0000
Files and hashes:         1: G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl (hash: N9xIuDu5pxPCD86rf9rYPBiGo4u6D6M8oyNTi1mOZEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0e:24:aa:7f:84:b9:23:f0:19:1e:1c:d9:52:f4:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
        Validity
            Not Before: Jul 28 22:01:32 2025 GMT
            Not After : Jul 29 22:01:32 2025 GMT
        Subject: CN=d2eed1d0880e49189428f9cd056542246d92b04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:8d:c4:b5:ab:07:41:f3:55:24:10:7f:99:
                    90:1f:8c:6d:91:f1:b9:a9:0f:15:14:13:55:12:55:
                    0e:99:13:0e:09:1b:ab:89:12:d5:d8:38:3e:3c:d6:
                    a1:e7:09:9e:d2:42:f8:2d:10:d3:01:90:d8:fd:f7:
                    22:39:35:2d:50:42:87:70:4e:1c:50:c6:b2:35:fc:
                    f6:e5:96:54:4c:3f:e9:ae:74:49:d2:d7:b4:e3:2d:
                    1e:ae:c9:7d:8d:41:cb:86:3c:af:17:35:4f:90:86:
                    64:e4:11:20:6a:66:14:a1:ee:20:0d:0f:2d:fb:27:
                    7e:1e:2d:43:39:67:2f:12:20:32:7a:48:14:87:10:
                    fd:73:c3:b8:f7:5c:c0:9c:a4:e2:17:c6:38:89:04:
                    04:54:7a:84:a0:f6:ea:37:ed:1b:36:af:96:c4:93:
                    e0:2a:67:72:fb:6c:fc:c2:10:e3:28:ef:20:a8:64:
                    78:45:81:88:19:06:92:bb:b4:7c:3c:8f:42:14:fc:
                    cd:fa:3f:3d:2d:98:b2:9e:9b:90:77:e2:8a:d8:0d:
                    f1:83:15:37:a4:e6:ff:89:be:1c:88:27:54:ac:14:
                    f8:68:8b:06:f3:a5:27:b5:75:ee:02:ca:5a:4d:d7:
                    27:6a:69:58:46:87:b2:81:69:ac:e4:23:90:09:47:
                    28:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EE:D1:D0:88:0E:49:18:94:28:F9:CD:05:65:42:24:6D:92:B0:4B
            X509v3 Authority Key Identifier:
                keyid:1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:33:32:20:a9:83:ad:37:bd:05:91:d1:cb:dc:ce:cd:88:b4:
         45:9a:a4:a1:12:c1:e9:dc:ed:ad:33:c3:45:19:30:af:bf:69:
         25:bf:d7:76:c9:61:e3:79:cf:0a:f0:64:d5:80:7c:00:b6:f1:
         2d:14:a0:74:47:c4:fc:d8:70:7e:1b:35:2c:22:39:fb:4e:11:
         be:37:1b:bd:47:8e:54:b9:e2:98:80:b0:53:e0:6f:cf:69:fc:
         b1:06:03:f7:60:e3:cd:4a:2f:d4:a1:0c:51:3a:c2:c5:7c:23:
         12:90:c8:b5:43:f8:8c:69:0e:d4:08:a8:09:5b:5b:ab:89:7c:
         a1:7b:82:4e:35:a0:38:d4:1c:95:50:de:2b:24:1b:54:30:4a:
         bd:fb:32:f1:b3:1e:f7:53:23:64:cf:e0:fb:cc:01:77:1e:ad:
         49:f6:17:b2:30:d5:ef:7f:0a:4c:08:21:82:be:d9:04:40:9e:
         2e:62:0e:7d:43:ad:6f:a6:74:23:3c:73:98:ee:db:c9:9f:82:
         3d:b7:17:c8:9a:37:59:9f:28:1a:e1:0d:48:75:41:db:7f:da:
         ea:a1:47:4a:05:72:fe:40:43:7d:50:3c:dc:de:d0:8b:ad:b1:
         f0:2d:68:f9:1f:5b:3e:41:6c:cb:42:8e:61:f9:3f:c4:b2:b7:
         3a:e4:d3:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDiSqf4S5I/AZHhzZUvRsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOTEzNjMyNjgwOWYwNjg3ZjdkN2Q0ZGMxYTgxYjdiOTlh
M2Q3ZDMwHhcNMjUwNzI4MjIwMTMyWhcNMjUwNzI5MjIwMTMyWjAzMTEwLwYDVQQD
EyhkMmVlZDFkMDg4MGU0OTE4OTQyOGY5Y2QwNTY1NDIyNDZkOTJiMDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx66NxLWrB0HzVSQQf5mQH4xtkfG5
qQ8VFBNVElUOmRMOCRuriRLV2Dg+PNah5wme0kL4LRDTAZDY/fciOTUtUEKHcE4c
UMayNfz25ZZUTD/prnRJ0te04y0ersl9jUHLhjyvFzVPkIZk5BEgamYUoe4gDQ8t
+yd+Hi1DOWcvEiAyekgUhxD9c8O491zAnKTiF8Y4iQQEVHqEoPbqN+0bNq+WxJPg
Kmdy+2z8whDjKO8gqGR4RYGIGQaSu7R8PI9CFPzN+j89LZiynpuQd+KK2A3xgxU3
pOb/ib4ciCdUrBT4aIsG86UntXXuAspaTdcnamlYRoeygWms5COQCUco6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLu0dCIDkkYlCj5zQVlQiRtkrBLMB8GA1UdIwQY
MBaAFBuRNjJoCfBof319TcGoG3uZo9fTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzVFMk1tZ0o4R2hfZlgxTndhZ2JlNW1qMTlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83ZjBjODItNjMzMC00OTcxLTk4YzAt
NTliNTNiM2E2ZGExLzEvRzVFMk1tZ0o4R2hfZlgxTndhZ2JlNW1qMTlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi83ZjBjODItNjMzMC00OTcxLTk4YzAtNTliNTNiM2E2ZGEx
LzEvRzVFMk1tZ0o4R2hfZlgxTndhZ2JlNW1qMTlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTMyIKmD
rTe9BZHRy9zOzYi0RZqkoRLB6dztrTPDRRkwr79pJb/Xdslh43nPCvBk1YB8ALbx
LRSgdEfE/Nhwfhs1LCI5+04RvjcbvUeOVLnimICwU+Bvz2n8sQYD92DjzUov1KEM
UTrCxXwjEpDItUP4jGkO1AioCVtbq4l8oXuCTjWgONQclVDeKyQbVDBKvfsy8bMe
91MjZM/g+8wBdx6tSfYXsjDV738KTAghgr7ZBECeLmIOfUOtb6Z0IzxzmO7byZ+C
PbcXyJo3WZ8oGuENSHVB23/a6qFHSgVy/kBDfVA83N7Qi62x8C1o+R9bPkFsy0KO
Yfk/xLK3OuTTjA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:39:35 2025 by rpki-client