Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
File:                     g4dr-7WujP4Ra7X18oZKEWITqk8.mft (raw, json)
Hash identifier:          MA8LN4LSeL8OezVwmidpd3G3BN3rPKVVN29lQCMKRjs=
Subject key identifier:   E7:0E:E0:72:80:5C:A8:BB:7F:5D:F2:3C:41:6C:EF:22:71:86:D3:B9
Authority key identifier: 83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F
Certificate issuer:       /CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f
Certificate serial:       019922C39930E01908E4F7CFF41B817F5DD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
Manifest number:          1671
Signing time:             Sun 07 Sep 2025 06:01:07 +0000
Manifest this update:     Sun 07 Sep 2025 06:01:07 +0000
Manifest next update:     Mon 08 Sep 2025 06:01:07 +0000
Files and hashes:         1: g4dr-7WujP4Ra7X18oZKEWITqk8.crl (hash: uKRxKYxiMToDO5Z45KQOay97hSdVs8kQG+oVOUn0n5A=)
                          2: on6c4T5uruUZ19cPvyYxdOa3Uo4.roa (hash: DzOTGbti7Ycex9SFmllizCyD+Zg7ddBWN0hhpKZi1gA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:99:30:e0:19:08:e4:f7:cf:f4:1b:81:7f:5d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f
        Validity
            Not Before: Sep  7 06:01:07 2025 GMT
            Not After : Sep  8 06:01:07 2025 GMT
        Subject: CN=e70ee072805ca8bb7f5df23c416cef227186d3b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5c:41:02:98:87:f2:52:ef:f2:9f:1f:7d:5b:
                    ee:7e:9f:0b:c5:9b:aa:34:71:81:7e:1d:c0:d6:5b:
                    f4:09:83:36:3f:8c:e6:82:74:8e:c8:1c:3d:0e:bd:
                    37:5d:f6:5f:9a:24:9c:76:89:1a:c5:c5:1c:d4:73:
                    d1:9a:4f:5d:be:a1:27:fc:f7:0e:62:eb:df:fa:3c:
                    36:ab:4c:4f:f2:26:5f:a7:ac:30:17:15:6c:6c:10:
                    37:42:b0:c4:71:47:d4:46:6d:08:75:28:5f:e9:7a:
                    5a:bc:fd:c6:20:cc:a5:93:f5:cf:cf:00:e4:89:3d:
                    fc:e4:37:f8:39:47:50:86:61:30:9a:de:5f:88:3b:
                    e9:0c:4b:75:2a:90:ae:dc:ee:98:70:03:f6:1c:19:
                    09:75:75:e3:a3:d7:04:67:6e:67:cb:e8:87:c7:aa:
                    c7:a0:4c:13:cd:e7:bd:fe:ab:84:e7:b4:84:df:d4:
                    64:b8:c8:2d:78:cd:61:1e:53:7f:ab:c6:44:3b:c5:
                    15:b5:e0:ac:03:9a:a3:94:5a:c8:1e:ff:89:d3:33:
                    69:93:10:8e:6d:52:90:6a:e2:ce:82:bf:47:c0:29:
                    a1:bf:a9:f9:ba:a2:fa:ce:c8:aa:09:7a:7e:98:92:
                    a1:cd:e2:c9:f2:f4:4a:8d:3f:64:c5:93:75:6a:a9:
                    9a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0E:E0:72:80:5C:A8:BB:7F:5D:F2:3C:41:6C:EF:22:71:86:D3:B9
            X509v3 Authority Key Identifier:
                keyid:83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a2:97:b3:08:45:e3:e3:db:08:fe:50:a2:e7:59:ae:72:58:
         eb:ae:ae:d0:fc:5b:73:64:fe:29:8e:e4:e5:b4:b1:72:a2:aa:
         ec:f2:ed:14:7d:00:96:65:46:17:42:25:49:78:da:c0:94:a3:
         08:a5:bf:62:1f:63:fb:0e:2e:de:a5:f8:c3:d7:67:34:fe:db:
         ec:f3:42:54:cf:4a:73:26:88:6a:fb:99:95:60:95:48:1e:cb:
         ca:fc:af:34:3b:f0:7e:12:7d:92:35:49:ee:70:41:50:0c:81:
         b6:c7:ff:10:c7:e5:89:9b:f9:56:d9:b4:ce:c9:52:97:c1:1c:
         02:d3:f4:23:fc:91:75:6e:7d:a8:05:56:81:75:a1:a9:d7:44:
         26:72:74:0b:98:10:54:ee:53:3c:1a:fd:3d:5c:51:5f:e6:20:
         fa:a8:98:8b:75:7b:aa:b8:43:53:db:06:d3:6b:20:dc:66:f6:
         64:c0:cc:0d:85:eb:47:b2:37:60:dc:f7:33:4f:81:08:00:8c:
         36:b1:34:19:f9:d3:7a:e8:b7:89:b6:d8:0b:f5:1f:99:dd:b5:
         55:a8:56:fb:6b:e7:fb:7f:40:91:69:38:c4:de:20:d4:a2:10:
         27:54:54:ec:23:d8:14:31:4c:90:96:5d:d2:5b:b1:c5:54:d2:
         d8:5e:d5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:38:56 2025 by rpki-client