Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
File:                     G-u7vrbpIjF2ylod8UmJhgF-jig.mft (raw, json)
Hash identifier:          Ew7naF6NyzuJsaHNV/I6KBeRM2KdvktKxBI5hr/R0oA=
Subject key identifier:   DA:14:D9:9D:EB:51:9C:BB:43:F9:A4:6F:6A:CF:70:8A:83:31:A0:7A
Authority key identifier: 1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28
Certificate issuer:       /CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
Certificate serial:       01964D7E58D8EDACDFF606B5006A947F82D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
Manifest number:          13DA
Signing time:             Sat 19 Apr 2025 10:00:48 +0000
Manifest this update:     Sat 19 Apr 2025 10:00:48 +0000
Manifest next update:     Sun 20 Apr 2025 10:00:48 +0000
Files and hashes:         1: G-u7vrbpIjF2ylod8UmJhgF-jig.crl (hash: 2nB5c9skcDVOLu19IMLP/vapREGofrNsFfNdaUh/PAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7e:58:d8:ed:ac:df:f6:06:b5:00:6a:94:7f:82:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
        Validity
            Not Before: Apr 19 10:00:48 2025 GMT
            Not After : Apr 20 10:00:48 2025 GMT
        Subject: CN=da14d99deb519cbb43f9a46f6acf708a8331a07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7c:27:fc:74:a3:4d:93:0c:87:2a:94:b9:fb:
                    a6:64:10:20:76:1b:19:0e:d8:f7:0d:7d:e1:10:4e:
                    56:c9:e3:64:8b:00:3d:36:e8:50:2a:bf:ff:96:21:
                    62:4a:e9:a0:68:3b:93:45:c8:58:8f:d1:ce:5b:c9:
                    a0:69:01:e4:81:e4:57:97:07:9b:46:25:ae:bf:d8:
                    e1:5c:d6:b9:cc:90:5c:56:1a:38:0a:cd:06:7e:26:
                    4c:82:bc:96:00:ea:04:49:fa:2c:a4:9e:d4:d2:95:
                    b1:4d:a7:6d:d3:4f:40:81:55:13:61:1c:71:73:76:
                    a7:73:ef:f9:6a:a4:d6:37:dc:88:8b:fa:bf:c3:26:
                    79:b6:64:ef:d9:2f:41:0e:7e:dd:4d:5b:2e:59:a4:
                    bf:1d:3e:37:ae:39:e9:f0:fc:7d:e5:91:fd:10:3a:
                    6a:e8:7b:6a:e6:03:28:dd:77:d2:eb:3b:ac:fc:15:
                    28:d0:f5:11:5f:b7:0d:7b:57:80:38:f2:ee:fe:1d:
                    7f:2a:38:d9:e3:e5:18:fc:06:99:17:fc:80:83:bf:
                    d4:64:cb:3e:85:de:bc:5c:30:f8:1e:0d:a0:09:68:
                    43:c0:e1:ff:6f:65:83:22:c1:35:54:3e:42:51:3a:
                    53:a1:b9:11:1e:0d:00:18:f2:9d:e7:85:f2:bb:97:
                    c2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:14:D9:9D:EB:51:9C:BB:43:F9:A4:6F:6A:CF:70:8A:83:31:A0:7A
            X509v3 Authority Key Identifier:
                keyid:1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d8:92:8f:3f:da:28:fd:2a:6b:26:41:6a:80:3c:65:9d:58:
         8a:80:a3:13:7a:ff:ee:2e:33:0b:68:9a:c7:ff:0e:a5:fa:7c:
         01:d2:5c:c9:ef:7a:6e:bf:2c:af:24:39:62:8f:02:65:0e:1c:
         a5:bb:1f:c1:b2:4c:f1:f1:fb:c7:a3:61:35:93:37:07:d5:dc:
         4a:90:e6:9a:58:73:95:1c:11:aa:f4:33:4b:7b:8e:4e:ea:6b:
         3f:67:dd:13:6e:78:e6:be:33:fd:25:f3:66:8c:ff:1a:6a:99:
         fc:82:f8:ff:c7:7e:18:88:f4:de:64:ae:51:ed:50:58:90:a9:
         f6:54:75:fa:c9:2e:39:48:78:9b:69:eb:30:6e:ab:d2:48:fc:
         56:36:81:32:25:9e:2e:09:74:4e:08:cc:76:e7:18:8b:a4:c9:
         86:75:6b:9a:e6:ff:c7:40:00:28:ca:85:e6:5c:51:7d:cd:07:
         cc:36:03:0f:fc:af:37:ae:97:44:31:d7:1a:ec:f7:af:b2:df:
         5c:bb:9f:0c:02:00:91:01:0b:a9:b6:ff:d9:bd:1a:28:e2:2a:
         8a:c3:a2:04:2c:36:f0:2f:8a:28:d3:af:7a:05:cc:fd:49:e7:
         6d:c1:ec:5f:b1:af:2f:aa:00:d5:e6:0e:b7:f0:cf:bf:3e:f4:
         82:ae:e6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:15:35 2025 by rpki-client