Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
File:                     G04-M_1PbZy08TyiI3HjCzbPp3Y.mft (raw, json)
Hash identifier:          L8TCXuNL+skhY+KBTrXcLdj3HPHagHDjlYaeAt6bgxw=
Subject key identifier:   46:C2:8F:01:27:B5:7B:02:81:DC:62:B8:CA:9E:9A:29:88:A6:CC:1C
Authority key identifier: 1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76
Certificate issuer:       /CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
Certificate serial:       0198D4E06C2BFDFAFA15D997F393555E4ADE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
Manifest number:          1645
Signing time:             Sat 23 Aug 2025 03:02:14 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:14 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:14 +0000
Files and hashes:         1: G04-M_1PbZy08TyiI3HjCzbPp3Y.crl (hash: 2o6PZFqBH7n8X8kAQr1+MQTKCzhzyi5+8U6NN5ZKUzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:6c:2b:fd:fa:fa:15:d9:97:f3:93:55:5e:4a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
        Validity
            Not Before: Aug 23 03:02:14 2025 GMT
            Not After : Aug 24 03:02:14 2025 GMT
        Subject: CN=46c28f0127b57b0281dc62b8ca9e9a2988a6cc1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e0:7c:55:c6:5b:d8:7e:80:6e:29:dc:a8:76:
                    b4:9f:6d:c7:5c:9a:91:90:c7:9f:4d:f3:62:bc:37:
                    b7:eb:95:a1:21:4e:65:13:dd:91:be:3f:a1:62:ae:
                    ca:48:fc:c7:ab:a7:3c:33:f7:92:b1:9a:c2:b7:65:
                    01:51:30:dd:07:e9:98:1b:c3:83:e3:e0:db:03:65:
                    96:a1:93:b4:c1:59:54:0c:6d:75:49:54:10:0c:5b:
                    76:dd:6d:6d:fa:56:10:2e:b3:20:64:f1:fa:72:d2:
                    a6:ff:46:3c:93:8b:20:e2:90:d4:d5:57:7c:db:75:
                    7f:b0:c2:c1:4f:31:e3:72:73:ed:fc:ff:53:3a:b2:
                    14:c4:6b:1d:d5:26:89:10:4c:ad:c1:fd:5a:60:38:
                    fc:f4:d5:24:8b:ae:c1:14:03:8c:23:f4:96:f5:34:
                    c0:8c:3c:4b:db:e3:bf:c3:ab:54:6e:5e:a1:53:fb:
                    32:11:ed:2f:ad:b7:f1:88:08:1b:76:c3:25:52:b0:
                    7d:5a:b9:59:5f:3b:f4:5c:4f:09:a0:ba:b1:5a:75:
                    81:5d:de:24:8e:35:f4:66:e1:84:3a:af:75:8c:cb:
                    5e:b0:ea:b1:84:ce:ba:b4:d2:c7:50:49:27:0c:3e:
                    14:16:ad:9c:a8:78:8d:0d:b2:67:c2:e1:53:56:6b:
                    b9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C2:8F:01:27:B5:7B:02:81:DC:62:B8:CA:9E:9A:29:88:A6:CC:1C
            X509v3 Authority Key Identifier:
                keyid:1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:2e:d4:2d:29:6c:65:2d:ff:f3:5c:92:c4:e4:6f:23:d7:79:
         72:25:fc:c0:d0:cd:4c:8f:8a:30:56:47:75:61:6d:26:fd:af:
         75:0c:a3:d7:43:72:d2:27:e7:03:eb:d2:d2:13:63:c9:9c:e5:
         6f:4c:6a:c0:56:ed:6d:c2:13:ef:62:c9:30:5d:da:5f:f2:da:
         a1:7c:cc:81:fd:a0:63:1d:03:75:5b:2b:c9:fa:4d:22:07:4c:
         53:bf:46:e5:03:e9:98:89:7c:36:95:0d:c4:70:16:1d:38:0c:
         74:30:7b:e9:1e:24:9d:15:a2:af:cc:86:e6:82:d5:a3:56:ae:
         90:4a:b0:d9:3c:23:da:52:b7:8b:c1:56:c7:6b:7a:65:1c:52:
         f1:ca:83:bb:09:b3:fb:fd:8b:a5:2c:6f:58:c9:2a:37:20:c0:
         1b:a1:e1:dc:42:f1:fd:78:e7:b7:75:70:ea:25:c6:4f:30:b7:
         11:a9:aa:f1:7f:25:e2:05:b8:74:68:1b:83:71:3b:e8:07:4d:
         12:1e:7a:0a:c0:a1:58:4e:47:73:5c:b8:e3:a3:95:05:07:e4:
         60:d4:2e:c9:be:9f:bc:af:51:4f:a4:6e:fe:61:f5:70:6d:19:
         46:ef:8f:30:02:ca:02:0a:f6:af:8a:5d:db:aa:aa:f7:22:25:
         c5:5e:e8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:08 2025 by rpki-client