Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
File:                     G04-M_1PbZy08TyiI3HjCzbPp3Y.mft (raw, json)
Hash identifier:          d1cmNRAhRFCs/nGwPFJuzvtq1lEzjJ/k94mgf0rrMVQ=
Subject key identifier:   71:AA:87:76:E7:F1:B2:E2:3D:79:5C:31:05:44:87:2D:2A:ED:80:94
Authority key identifier: 1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76
Certificate issuer:       /CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
Certificate serial:       0197B70E8C09AC8EAAA20B15438DE50D932B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
Manifest number:          15B1
Signing time:             Sat 28 Jun 2025 15:01:12 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:12 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:12 +0000
Files and hashes:         1: G04-M_1PbZy08TyiI3HjCzbPp3Y.crl (hash: wCdkdFFkX2VnHITn/DbKvuoMyfae5TQqO15DtkqK/Nw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:8c:09:ac:8e:aa:a2:0b:15:43:8d:e5:0d:93:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
        Validity
            Not Before: Jun 28 15:01:12 2025 GMT
            Not After : Jun 29 15:01:12 2025 GMT
        Subject: CN=71aa8776e7f1b2e23d795c310544872d2aed8094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7d:5a:a1:b0:72:81:72:55:60:df:29:fb:a9:
                    4c:a7:51:8f:d5:09:83:7d:16:b4:80:f4:35:f7:da:
                    97:78:f1:d0:7d:d8:34:79:fe:75:2b:d6:ee:e2:21:
                    f2:58:37:3b:ad:6a:f9:d3:bb:fa:c5:74:ff:c9:09:
                    2d:d5:1b:2d:fb:e1:01:9c:2c:2b:9a:5c:54:0b:a9:
                    12:a7:16:98:1d:97:51:27:52:e5:ff:b2:7e:2e:6d:
                    0b:4b:ba:db:45:11:ad:35:64:ad:2e:1f:a5:bd:70:
                    4d:91:12:9a:f2:00:c5:7b:db:14:e2:93:f3:dd:5c:
                    8d:ab:7b:fe:d1:9c:47:9f:f9:22:08:a9:62:58:71:
                    e6:b9:60:04:7e:16:05:5c:65:aa:f1:39:88:6d:00:
                    9a:13:31:df:3f:60:fb:b1:36:00:78:f4:ee:5c:75:
                    22:03:31:b2:6d:4b:65:e0:79:20:e0:f4:26:53:fd:
                    55:81:6d:cc:46:ab:d7:c2:9a:ac:a7:b9:90:e9:f8:
                    09:b8:11:9b:8c:21:c2:1e:ab:59:5e:be:fd:45:71:
                    2c:b2:60:4d:7a:f2:0c:29:68:96:23:08:3e:e1:59:
                    b3:f0:59:c1:d9:8d:82:dc:a2:40:a7:80:c2:b7:4e:
                    cc:8a:6b:04:dd:d0:a1:8f:d9:7a:45:4f:a1:c2:7a:
                    eb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AA:87:76:E7:F1:B2:E2:3D:79:5C:31:05:44:87:2D:2A:ED:80:94
            X509v3 Authority Key Identifier:
                keyid:1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:65:80:7b:7e:4f:21:12:0a:c3:27:21:9b:86:86:c0:fb:bd:
         41:c8:73:6c:00:38:22:6b:63:95:5b:80:69:1f:e7:32:88:39:
         8f:4d:3b:0e:d2:e3:83:62:46:04:0d:cc:54:9c:ba:e6:a4:ad:
         18:95:f4:41:3c:eb:5a:66:62:59:8b:4c:fd:27:f4:a8:95:67:
         b6:79:1a:3b:81:09:f7:44:90:c9:ce:f3:b6:03:bd:ec:46:9f:
         bd:d3:25:02:e6:83:16:e2:df:b1:12:53:39:0f:36:d9:71:20:
         0a:2d:32:4c:20:46:6a:e4:81:14:9a:30:06:3d:88:4d:ff:f7:
         a2:59:0a:cd:ff:bc:02:d5:59:59:fd:19:42:7d:3b:a0:4c:eb:
         a2:06:e0:32:ef:71:b9:ae:44:48:aa:39:96:6e:ee:ac:90:f1:
         34:52:c2:ba:1c:df:19:27:00:27:ee:f6:6a:08:97:3c:e4:ea:
         e6:69:21:74:dd:d2:b9:ce:b5:cc:d4:a9:4d:1b:ba:1e:29:79:
         76:38:f7:d8:81:6b:f0:bc:bd:74:2f:27:f6:75:ed:e9:c0:02:
         10:60:a8:4e:2e:c9:f4:e4:ab:1d:4e:36:be:b8:0e:d9:15:b1:
         2e:18:88:60:0b:39:81:8b:16:71:16:6a:ff:0b:03:a8:74:a4:
         78:2a:25:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:18 2025 by rpki-client