Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
File:                     G1NNR62NtYlKX8k0LkVY-U5PF_E.mft (raw, json)
Hash identifier:          gBzt0/3Ah9yQt9JWNxFns8fU6Fz2k9sZUnFbhhZwDqU=
Subject key identifier:   78:85:82:FE:2F:45:A0:01:5B:67:64:5A:B9:CE:38:61:EB:6A:BE:32
Authority key identifier: 1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1
Certificate issuer:       /CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
Certificate serial:       01974C32616F1E2B309859B007D7EDA91309
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
Manifest number:          14D4
Signing time:             Sat 07 Jun 2025 21:00:59 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:59 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:59 +0000
Files and hashes:         1: G1NNR62NtYlKX8k0LkVY-U5PF_E.crl (hash: tqWaP6l8sac5jbEf2IfbjIKs76nuFjREWFUJJ/HUbCQ=)
                          2: tpcLfnSFe1LhX4JafoXime7wXxw.roa (hash: 5bEgNy5LIfp1SJAYM4F8oQrbGx7UDr0Zn6gyPZH4W9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:32:61:6f:1e:2b:30:98:59:b0:07:d7:ed:a9:13:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
        Validity
            Not Before: Jun  7 21:00:59 2025 GMT
            Not After : Jun  8 21:00:59 2025 GMT
        Subject: CN=788582fe2f45a0015b67645ab9ce3861eb6abe32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:49:4f:a0:72:84:c7:9f:c6:4a:03:f5:12:6b:
                    34:a1:a3:03:64:ab:53:8d:f6:14:84:d2:64:ab:08:
                    ec:b5:db:d2:65:cf:3a:58:94:9f:53:b1:65:c8:a7:
                    3a:1d:94:06:01:30:81:1f:e1:89:8f:96:65:0e:11:
                    9f:cc:ff:9e:58:06:39:e8:0c:ad:bf:b5:40:78:07:
                    82:fc:60:a4:d6:75:ed:69:13:19:e9:d0:45:19:f4:
                    a7:f6:5d:e0:a2:22:92:1d:dd:02:6d:2e:c8:15:1e:
                    b5:c5:71:df:a4:dd:6b:fa:3e:5b:9b:14:4e:9d:75:
                    1e:6a:03:c6:aa:09:6c:c6:b2:4b:a7:d5:fd:ed:5f:
                    bd:31:86:a7:79:3a:8a:35:66:59:f2:ff:bb:57:6e:
                    7b:e2:5f:b4:45:ce:c9:e6:0d:5f:a8:dc:a4:61:ac:
                    2a:4e:e4:6d:e4:a3:23:78:75:60:24:9b:b7:dc:1a:
                    df:fa:f8:e6:6a:9b:a8:a4:5d:1b:b9:39:b5:21:c9:
                    cb:7b:f9:4e:61:6d:b1:78:00:c0:f8:6a:86:df:56:
                    39:79:e6:db:92:f2:26:da:0c:f7:68:97:ee:48:f6:
                    9b:04:95:99:17:ea:c4:6b:ce:7e:ff:e2:fd:01:04:
                    b5:7f:a9:bc:0b:d1:9c:69:64:49:04:bf:10:24:ae:
                    6c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:85:82:FE:2F:45:A0:01:5B:67:64:5A:B9:CE:38:61:EB:6A:BE:32
            X509v3 Authority Key Identifier:
                keyid:1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c7:be:1d:ba:91:5c:9d:4e:78:ec:f6:17:55:52:a1:78:d4:
         a0:9e:49:ce:77:a0:2e:b1:16:1c:f0:39:55:2c:b0:4a:02:71:
         0c:c1:8e:b5:2c:65:bf:16:96:77:74:8e:9d:cb:c9:8d:3d:f3:
         f9:b9:d9:10:49:ed:5d:b7:11:67:13:5e:78:be:1d:4a:2d:80:
         d6:b8:88:ef:89:dd:af:8e:47:eb:a5:56:ea:52:ef:62:6a:4f:
         24:60:0c:e4:8c:fe:37:5e:3a:ba:b5:c3:ef:55:ce:91:db:c5:
         8f:34:30:93:aa:68:f1:b8:fc:40:c5:15:30:73:d1:42:b3:b7:
         e0:ce:25:ae:0b:77:15:94:7e:fe:14:b1:48:fc:e1:93:dc:fd:
         67:fc:a7:a2:a1:0b:d2:18:21:20:2f:c2:ba:bb:87:af:07:e0:
         a1:b6:df:af:2e:dd:cf:de:e4:a1:be:11:f4:9b:d9:68:29:2a:
         92:b5:6c:7b:f8:8b:f9:ea:77:67:2f:74:47:be:05:98:88:ea:
         d8:c7:1c:d8:a4:58:8d:68:c3:a6:a8:51:07:15:eb:be:3d:c7:
         d0:80:9b:b1:94:ec:01:30:c3:cc:b9:92:c7:75:54:72:cf:7b:
         60:bf:18:e3:80:54:c2:eb:a9:04:79:e5:b7:a5:11:e4:0d:98:
         f4:9f:e5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:41:54 2025 by rpki-client