Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
File:                     G6b10yR0vob2MFiURTdik0TU8Bo.mft (raw, json)
Hash identifier:          wFdeOXSGR7VzBc0byyybbAIRfOLNEJ6JYHq4hQyG74c=
Subject key identifier:   9C:5A:7D:BC:59:3D:2D:C0:37:F8:9C:A7:9F:83:88:50:CB:4D:90:86
Authority key identifier: 1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A
Certificate issuer:       /CN=1ba6f5d32474be86f63058944537629344d4f01a
Certificate serial:       01984AAE8ED944C0AAE8F4DC98AEE801DBAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
Manifest number:          03E5
Signing time:             Sun 27 Jul 2025 07:00:10 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:10 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:10 +0000
Files and hashes:         1: G6b10yR0vob2MFiURTdik0TU8Bo.crl (hash: 9QpdRu4k4XwFobMuhZXX+TbmQ9btvsNlqUDHPyPIOuI=)
                          2: mToK7O7t52pvY5jAx8Z0JoUDFIM.roa (hash: Xs8G0qX2ZJs522/1L68wTzEgBOm79/mlDz8OPsPAHlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:8e:d9:44:c0:aa:e8:f4:dc:98:ae:e8:01:db:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba6f5d32474be86f63058944537629344d4f01a
        Validity
            Not Before: Jul 27 07:00:10 2025 GMT
            Not After : Jul 28 07:00:10 2025 GMT
        Subject: CN=9c5a7dbc593d2dc037f89ca79f838850cb4d9086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:64:71:4b:b4:9b:1c:68:02:b5:14:24:7c:d9:
                    25:dd:2e:df:d4:f1:91:7e:9e:c8:10:7d:00:5b:1d:
                    2d:7c:a3:ff:23:70:c8:91:94:65:a5:19:ed:2d:ca:
                    89:0b:a9:d3:6f:bf:9c:c4:62:d8:c2:4d:20:98:f7:
                    a5:35:54:75:e9:b7:68:47:81:fd:67:ed:97:8d:b7:
                    44:10:7c:bd:9b:34:95:ec:24:af:7d:34:e8:2e:89:
                    a8:0e:df:43:50:aa:79:ee:f7:24:10:eb:75:35:1b:
                    11:d2:c8:d4:09:12:01:7c:40:66:53:3f:51:72:68:
                    0d:70:2e:c9:a0:53:a5:f1:ed:c4:5a:d6:b9:63:ac:
                    5e:ac:89:06:8d:4f:41:b9:e6:f2:8f:0a:51:8a:c6:
                    89:8a:c6:e0:2f:5b:e1:71:a1:25:7d:be:9b:d5:5f:
                    3a:72:ae:27:e7:c7:50:56:c2:5b:b6:24:96:aa:d2:
                    06:7d:a4:2e:79:65:02:c1:a7:a7:18:e2:5e:db:30:
                    dd:8c:66:d1:b0:fd:a0:38:9a:34:0f:8e:a9:8b:67:
                    fe:a8:f0:ab:24:eb:63:d9:8d:55:74:fb:de:d0:4b:
                    1e:24:c8:f7:9d:4d:a9:69:25:cb:c7:3e:85:b9:ab:
                    b3:93:37:43:79:6b:de:19:c7:11:f3:ec:4d:9a:39:
                    d2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5A:7D:BC:59:3D:2D:C0:37:F8:9C:A7:9F:83:88:50:CB:4D:90:86
            X509v3 Authority Key Identifier:
                keyid:1B:A6:F5:D3:24:74:BE:86:F6:30:58:94:45:37:62:93:44:D4:F0:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6b10yR0vob2MFiURTdik0TU8Bo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bbee59-99f4-413c-b0d6-58081a16cbdb/1/G6b10yR0vob2MFiURTdik0TU8Bo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:5e:94:b7:d9:37:f1:7d:c1:a1:65:df:1e:52:d5:b5:7e:ea:
         57:b6:6b:d7:eb:f7:e8:31:3d:94:7d:6d:18:0b:ee:92:21:de:
         f9:72:d3:c2:f8:b9:54:9b:cd:92:7d:a9:51:7e:93:9e:ec:8f:
         4b:89:6d:82:60:b6:bb:48:52:3b:64:56:78:0d:48:92:2e:77:
         22:72:85:38:87:54:97:a7:ba:62:c9:9f:0d:fc:eb:01:cb:56:
         2c:14:15:2b:bc:7a:7b:92:5e:23:48:f0:5c:cd:b7:27:a3:35:
         d6:ab:41:e9:4e:4b:71:dd:4b:5f:d4:bc:8f:11:06:27:02:29:
         52:89:02:1d:8b:4b:25:50:bb:4b:2e:d4:b6:83:1c:5d:2e:f9:
         66:0d:b8:52:57:d9:15:37:e0:f9:72:69:88:93:67:c7:a8:66:
         14:fa:b1:a2:a1:f7:bf:fc:ac:93:ea:da:24:0a:67:2f:45:78:
         a0:e5:a1:8d:ea:5d:47:99:94:bb:90:53:50:6d:a5:9f:9c:f5:
         d2:f2:91:5b:2d:d2:0f:88:5f:26:0d:24:d9:06:18:7a:d1:ee:
         46:e1:a9:81:20:aa:71:40:28:6e:ef:69:59:9a:24:51:25:0b:
         3c:64:61:5c:ff:cd:4b:1f:d8:16:df:5b:3e:35:4d:ae:8f:c8:
         c3:06:bf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:10:16 2025 by rpki-client