Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
File:                     G1WOmRP2tWzD1WD5T_E38s1vSGI.mft (raw, json)
Hash identifier:          PbvGeQInSkPRtUgdubZt2cX+ZQ1CFoHbIHRSE3EHg8U=
Subject key identifier:   E7:9D:9C:3F:8A:5F:F7:58:94:BA:CE:BA:16:63:8C:83:3C:29:C7:3C
Authority key identifier: 1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62
Certificate issuer:       /CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862
Certificate serial:       019922C39C1E96CA88445664085C56C97E51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
Manifest number:          0689
Signing time:             Sun 07 Sep 2025 06:01:08 +0000
Manifest this update:     Sun 07 Sep 2025 06:01:08 +0000
Manifest next update:     Mon 08 Sep 2025 06:01:08 +0000
Files and hashes:         1: G1WOmRP2tWzD1WD5T_E38s1vSGI.crl (hash: dUzJMHwAd3sXFQXNshDKBZgkdHCELo+6nbW1cpFsJnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 06:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:9c:1e:96:ca:88:44:56:64:08:5c:56:c9:7e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862
        Validity
            Not Before: Sep  7 06:01:08 2025 GMT
            Not After : Sep  8 06:01:08 2025 GMT
        Subject: CN=e79d9c3f8a5ff75894baceba16638c833c29c73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:83:03:30:2c:f9:cc:90:a5:f6:f3:21:b7:48:
                    d2:4d:fa:4b:ec:ff:94:da:d6:6d:f2:53:34:32:3c:
                    09:e7:d2:0a:55:03:4d:c3:f2:1e:6c:fe:45:f3:3e:
                    19:71:05:25:13:d9:1f:82:fa:7c:fb:13:36:94:c7:
                    d4:09:12:28:3a:c0:01:bf:45:5c:37:46:32:bf:49:
                    85:b7:e8:d2:04:5c:c9:81:ee:64:40:53:b9:3f:a8:
                    9e:38:5d:ed:32:54:99:07:f5:79:cb:e6:43:0a:65:
                    f8:f1:26:79:ff:7c:ba:1d:a3:5a:54:83:ff:4f:89:
                    06:f5:c8:69:90:ba:f2:00:90:c8:6d:ba:78:9d:13:
                    71:9a:c2:6c:71:e3:31:7e:23:ce:d1:38:8a:5c:01:
                    09:e1:51:9f:cc:de:ff:ee:af:15:c2:bf:d4:ec:66:
                    d8:14:fd:e7:fd:1b:4a:c4:80:ac:d7:7e:cb:7c:3a:
                    91:0f:f7:18:75:f6:25:7c:c7:23:4e:a3:c8:6d:66:
                    2f:f7:81:36:69:cc:3f:4a:0d:c5:9d:f1:dd:1d:56:
                    0b:04:34:ea:91:b4:36:95:12:9c:60:6f:0f:b3:0a:
                    08:64:5d:50:55:59:d3:5f:3f:ec:97:85:7e:4e:4b:
                    9f:62:f1:44:46:5e:dc:05:51:d6:b1:b5:53:c3:4f:
                    3e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9D:9C:3F:8A:5F:F7:58:94:BA:CE:BA:16:63:8C:83:3C:29:C7:3C
            X509v3 Authority Key Identifier:
                keyid:1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:94:99:5a:e3:41:54:ac:93:8f:3e:25:f7:99:9e:67:f9:ee:
         25:97:e2:7e:21:b8:f6:81:9b:2f:ed:0c:57:18:8e:f7:e0:f3:
         6c:7d:43:db:66:a3:cf:41:d3:26:e9:78:4c:5a:2b:b6:53:ba:
         9f:f7:fa:1b:98:c5:f1:d1:b9:d5:c2:5d:81:6f:d6:da:b8:ea:
         23:81:7a:28:f2:6b:36:c6:f4:fe:c2:b8:1d:28:2d:a0:47:be:
         72:33:1d:66:d9:e0:b8:a4:d4:34:6d:46:4c:d4:70:cb:36:ea:
         ce:65:0d:44:73:c6:b3:8e:98:9a:cf:c6:49:b3:8f:26:63:f0:
         68:bb:3e:70:db:10:03:b0:96:c9:c2:79:12:65:1a:8c:79:67:
         c1:66:e2:e0:e3:f1:22:f1:4a:ac:1a:b1:c9:eb:36:e1:47:b9:
         77:de:83:74:fa:6f:8e:a9:32:35:40:1f:ce:b3:15:5f:64:6e:
         b0:44:06:b9:29:78:76:d9:04:88:63:a4:2a:21:99:6f:c6:b1:
         9d:76:7d:a8:73:3b:9f:f1:63:9e:5c:c8:26:fb:5e:88:54:c9:
         37:a5:d0:84:62:54:7e:dc:26:e0:48:0b:79:5f:12:f1:5f:c9:
         38:d3:46:a1:65:ad:1b:a6:f0:6f:37:14:0f:14:da:68:36:cf:
         db:6d:ac:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:18:00 2025 by rpki-client