Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
File:                     G55Be7nssazpSR68KCO7eJNLLN8.mft (raw, json)
Hash identifier:          mtaHaGQSapR+NPL/DCow99DDcSJphM4rUBUsWLR3t9M=
Subject key identifier:   84:59:3C:7B:60:71:59:65:17:01:19:A1:A1:E8:77:37:4B:10:07:4B
Authority key identifier: 1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF
Certificate issuer:       /CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
Certificate serial:       0197474268E7DCD45E527C4BF64E1519B61F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
Manifest number:          1429
Signing time:             Fri 06 Jun 2025 22:00:23 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:23 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:23 +0000
Files and hashes:         1: G55Be7nssazpSR68KCO7eJNLLN8.crl (hash: I0V1Gjf4lRsSpOG90+xZfXB9jIFiqqgBFUKpolDXPqs=)
                          2: uDXgZr4d7paw0tQnlQAuxTAiQJ4.roa (hash: ZLVG9qnKbapzUcUyG3vXPFRhsGi/6YqVmyuunmvWt4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:68:e7:dc:d4:5e:52:7c:4b:f6:4e:15:19:b6:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
        Validity
            Not Before: Jun  6 22:00:23 2025 GMT
            Not After : Jun  7 22:00:23 2025 GMT
        Subject: CN=84593c7b60715965170119a1a1e877374b10074b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ae:70:76:bb:b4:1e:f3:c9:1f:c0:49:6d:44:
                    49:55:cd:ff:eb:55:9e:95:79:6c:e3:19:57:20:0d:
                    ee:19:34:78:6c:e6:af:b0:47:28:62:d2:49:57:21:
                    42:6a:0e:06:4e:a5:d2:b1:4f:bd:85:7e:7e:91:42:
                    c8:d3:09:4a:6f:b8:5f:84:6f:0d:ff:0a:cb:3d:45:
                    3f:b9:5d:bc:c5:cc:8f:cf:65:1b:06:41:b5:5c:0a:
                    8b:09:3e:cf:de:5f:f9:8f:9d:f7:be:16:d9:de:c3:
                    db:29:9e:5e:2d:26:75:1e:ef:da:e2:25:ec:52:a8:
                    4a:35:6c:1d:e7:cf:2e:f8:6f:cc:56:1e:38:92:25:
                    81:17:88:55:71:2f:3a:33:9b:f3:72:85:81:5b:ab:
                    e6:89:09:43:49:7f:24:5e:2a:45:c7:9a:31:4c:0a:
                    98:47:c8:fc:bf:58:3a:ea:7c:36:4f:34:10:e2:53:
                    07:7d:ac:32:af:33:f7:91:54:0d:e7:45:0b:af:f4:
                    5a:72:90:8f:94:80:00:03:a6:48:2e:48:03:47:a1:
                    cd:2d:9b:f2:17:7c:15:4f:15:d9:57:2e:2a:76:2a:
                    f0:71:64:3d:d8:87:92:4c:14:3f:2b:bb:3e:fd:9f:
                    a7:5c:c0:78:2c:44:88:58:4e:b2:51:b8:17:a5:8d:
                    5b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:59:3C:7B:60:71:59:65:17:01:19:A1:A1:E8:77:37:4B:10:07:4B
            X509v3 Authority Key Identifier:
                keyid:1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d1:69:ae:f1:59:47:d4:26:6b:5a:e0:2f:69:d5:a6:94:14:
         10:ff:3b:c8:e6:d8:3b:3b:95:20:ae:83:f6:2d:45:1f:da:68:
         e2:db:71:8e:ef:e7:1d:5c:46:81:03:05:b0:e5:ec:e2:07:81:
         8a:35:09:49:18:01:14:ea:ed:c4:53:68:f6:e0:7e:61:cd:3e:
         c9:15:ce:c2:04:ff:87:22:82:83:18:79:c9:f1:90:b9:6b:9d:
         84:42:ca:d2:f1:19:aa:bf:89:fd:98:12:87:16:7f:b3:83:8a:
         09:ec:cf:d4:a2:57:5c:1d:da:2f:9c:39:d0:4c:f9:c4:a8:c0:
         1d:41:c7:b3:5c:2a:a2:bd:07:bd:ca:01:b3:22:9e:56:67:f5:
         28:bd:60:35:f5:35:53:bc:9b:ff:6d:23:7a:a8:94:4f:ed:d9:
         b9:ba:b7:40:77:d4:ca:70:f8:b9:48:12:d6:da:77:a6:e8:d1:
         18:59:fe:0b:01:85:68:0a:83:85:53:45:c1:e4:25:bb:02:a2:
         b5:d2:10:f6:a4:f3:48:70:a3:ef:8f:06:59:03:f4:71:65:9f:
         91:e4:f4:8a:bb:eb:e5:c7:9b:4a:5e:74:0d:97:bb:ed:db:b5:
         0d:cf:2c:ab:bf:b6:84:8b:f3:14:af:37:b4:19:8f:38:53:4a:
         bf:11:ab:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:41:26 2025 by rpki-client