Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
File:                     G1NNR62NtYlKX8k0LkVY-U5PF_E.mft (raw, json)
Hash identifier:          WlU//62NomeM57LUU8OXeullVATcjDnQ0XdON+1fIJE=
Subject key identifier:   0B:41:30:93:84:FE:8A:56:66:06:E2:14:49:DA:3D:8B:83:E7:92:C0
Authority key identifier: 1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1
Certificate issuer:       /CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
Certificate serial:       019921B19CAF46279A1DFFA88481506304A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
Manifest number:          15C7
Signing time:             Sun 07 Sep 2025 01:01:51 +0000
Manifest this update:     Sun 07 Sep 2025 01:01:51 +0000
Manifest next update:     Mon 08 Sep 2025 01:01:51 +0000
Files and hashes:         1: G1NNR62NtYlKX8k0LkVY-U5PF_E.crl (hash: FTDFx/tpvzPYdLHmlcYYQiAmReGxyagPqzhptqG7HlM=)
                          2: tpcLfnSFe1LhX4JafoXime7wXxw.roa (hash: 5bEgNy5LIfp1SJAYM4F8oQrbGx7UDr0Zn6gyPZH4W9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b1:9c:af:46:27:9a:1d:ff:a8:84:81:50:63:04:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
        Validity
            Not Before: Sep  7 01:01:51 2025 GMT
            Not After : Sep  8 01:01:51 2025 GMT
        Subject: CN=0b41309384fe8a566606e21449da3d8b83e792c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:75:fe:c0:56:47:0f:32:83:e0:aa:e2:62:00:
                    4b:8c:fc:6c:ed:89:4e:10:04:8a:bc:8a:a7:0c:94:
                    b4:6c:f5:11:52:8c:d3:c2:5d:eb:c4:84:03:97:c7:
                    f3:d0:4b:c5:4e:16:ce:af:4d:4b:1c:b6:0e:d1:d9:
                    a7:bd:f6:cb:eb:61:c9:a6:09:dc:00:0d:b7:da:4e:
                    10:a6:d1:95:3f:2e:55:ca:ef:79:a7:cf:14:5b:8d:
                    7a:28:f2:67:b7:10:57:85:13:32:e4:e0:ca:d9:4c:
                    5c:65:32:e4:d0:92:88:cb:c5:ca:c9:6f:8d:6d:e3:
                    1b:52:ca:f5:b0:30:2a:0c:58:d5:0f:4a:16:4e:69:
                    04:43:20:93:bb:61:6b:10:5b:f8:cd:f9:7e:7a:44:
                    48:e4:0c:55:10:4c:5e:93:47:cc:f7:d0:5e:6b:89:
                    4c:e8:30:14:4b:3a:9d:0d:45:e7:12:16:22:f6:6f:
                    35:fd:7b:8b:7c:c2:6c:7e:0e:53:51:29:e4:f8:e3:
                    e5:91:bb:ba:a8:1f:3f:ee:69:87:af:61:fb:03:bc:
                    17:18:92:92:ac:a3:53:cd:3b:c8:cb:08:b1:bc:4d:
                    da:8f:87:6d:34:a6:8b:52:bd:0e:6b:39:34:a6:2e:
                    66:b7:c3:74:cc:e3:ae:fe:1a:62:2a:e5:ea:7a:51:
                    ed:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:41:30:93:84:FE:8A:56:66:06:E2:14:49:DA:3D:8B:83:E7:92:C0
            X509v3 Authority Key Identifier:
                keyid:1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:eb:1e:9e:c4:a5:6b:09:1e:31:fb:d7:c0:e5:d9:8a:59:d6:
         49:55:79:b0:97:65:5a:31:de:4c:a5:5b:f5:4b:5f:87:21:41:
         31:5a:59:0c:8d:b1:8a:b1:30:2f:2f:55:d0:03:e6:e8:66:76:
         17:bf:32:b7:b4:fe:10:6c:a8:ba:19:b1:15:51:89:de:ac:da:
         ce:69:21:74:f6:38:5f:96:48:5a:52:7a:a7:1f:50:a4:12:69:
         04:65:c5:a0:59:c6:77:a9:f1:dc:fc:f0:5c:5d:74:4f:30:3d:
         c5:97:db:45:8d:87:f4:a9:6d:52:2b:c4:99:d4:0b:5a:da:a2:
         17:39:8c:38:80:a8:0f:70:f7:f9:16:24:60:54:5d:61:77:e3:
         11:6b:fb:10:7a:99:40:82:c3:78:27:76:20:d8:a9:3d:f6:b8:
         94:b1:68:61:f2:e8:29:74:81:54:be:d1:15:b8:33:93:bc:5f:
         89:eb:5a:44:9b:09:15:5a:e5:b9:73:a3:75:f7:24:0a:24:bd:
         63:01:db:9b:04:ef:06:6c:31:31:e8:67:1d:4f:f0:a7:f8:3f:
         4f:23:e8:19:82:d4:9d:c7:2d:11:7e:6e:d7:b7:55:cc:4e:62:
         8a:a7:bc:ec:2d:0e:ac:8e:b8:31:19:37:c6:f0:5b:16:85:2c:
         da:72:29:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:58:22 2025 by rpki-client