Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
File:                     G04-M_1PbZy08TyiI3HjCzbPp3Y.mft (raw, json)
Hash identifier:          4dtzvP3H479cMunhcUfJwdPPAmD+PXm3iXNz5mqWzLg=
Subject key identifier:   60:60:7C:72:07:81:0B:C3:B5:BB:C6:A5:42:F0:24:17:96:75:EC:EF
Authority key identifier: 1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76
Certificate issuer:       /CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
Certificate serial:       0196C3B9D08B8C93B739A900EE3DEE945462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
Manifest number:          1533
Signing time:             Mon 12 May 2025 09:00:56 +0000
Manifest this update:     Mon 12 May 2025 09:00:56 +0000
Manifest next update:     Tue 13 May 2025 09:00:56 +0000
Files and hashes:         1: G04-M_1PbZy08TyiI3HjCzbPp3Y.crl (hash: dQUwog+NBAMfzuAivoqJTKRL3NXrWIS5kTKHjY0zC9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:b9:d0:8b:8c:93:b7:39:a9:00:ee:3d:ee:94:54:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
        Validity
            Not Before: May 12 09:00:56 2025 GMT
            Not After : May 13 09:00:56 2025 GMT
        Subject: CN=60607c7207810bc3b5bbc6a542f024179675ecef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5e:4b:10:8f:c0:a1:13:e5:c1:fd:74:34:56:
                    ea:a6:07:7c:88:34:6c:09:24:e8:b6:33:19:02:a8:
                    e9:ee:ed:bf:84:39:ca:0c:73:6d:6a:3e:fd:7b:7b:
                    15:5f:63:3a:10:1b:c3:46:62:d3:f5:dc:f3:4a:8f:
                    02:4b:94:af:21:a6:0a:0e:49:bc:67:ae:14:41:0f:
                    ae:0c:bf:1b:07:77:41:3c:f0:42:09:43:7f:2d:12:
                    ab:ce:77:31:df:87:1f:f3:62:46:3b:f4:ff:03:b8:
                    0c:db:30:d4:c9:bb:d8:58:4d:a1:79:4b:49:52:1e:
                    e0:95:7e:22:be:ab:e8:81:c2:14:29:f7:5d:0a:d4:
                    5b:53:55:3c:8d:b0:67:bc:58:0d:dc:99:8a:6e:c1:
                    bb:e3:ac:fd:17:15:bc:df:65:a4:75:b4:0d:86:3b:
                    ba:16:5f:43:7e:18:ee:a5:98:b7:e9:da:2d:5a:ea:
                    d4:28:43:ec:74:23:34:78:68:b7:a9:5f:cc:33:82:
                    90:e9:2f:4f:29:ee:75:02:df:78:c3:52:72:4b:d0:
                    0f:c1:da:93:a7:aa:b6:11:9b:ec:dd:ae:a7:6a:11:
                    ed:12:b6:da:91:3b:d6:bd:ac:fd:8f:26:1c:8b:39:
                    5f:36:9d:3f:5a:90:6b:7a:32:9c:ad:20:bd:a6:de:
                    72:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:60:7C:72:07:81:0B:C3:B5:BB:C6:A5:42:F0:24:17:96:75:EC:EF
            X509v3 Authority Key Identifier:
                keyid:1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:6c:4f:01:22:ca:97:b3:c5:62:d3:19:4e:69:2d:18:94:5f:
         c1:65:ad:34:dc:b1:c3:4d:dc:76:8c:ab:a1:81:f8:8f:3b:24:
         ca:8b:27:61:a0:4e:21:8e:92:30:9a:33:c8:79:d5:6c:13:7d:
         00:1c:80:5f:e7:62:32:f5:7c:09:8a:37:12:4e:d3:e0:10:b9:
         a2:eb:d8:ee:d0:54:e6:d2:09:29:50:4f:5d:e0:cb:06:2a:71:
         6e:ec:05:85:d4:9e:93:7d:df:9e:9a:84:47:9e:5c:60:7c:52:
         44:a9:89:cc:49:7d:0f:23:26:ce:7f:60:e3:e0:b4:16:88:e4:
         33:8d:6a:ee:66:e2:f8:a8:52:34:00:23:2f:32:80:6f:4c:81:
         16:fb:9e:be:22:eb:e5:93:3a:81:bb:9a:42:7f:b2:29:ed:c4:
         4c:30:85:80:cd:66:08:04:8a:77:76:3e:a3:76:8b:75:dd:78:
         87:08:97:ac:5d:6c:ce:c0:3d:fb:b5:ab:20:10:b5:5a:7e:08:
         e1:b4:88:3d:48:f9:38:15:90:1c:52:bb:56:b9:78:bd:ba:d6:
         82:48:08:bd:ef:29:bc:56:c1:2f:9d:c6:ca:6e:af:c9:4c:17:
         04:53:04:33:39:49:e6:88:3b:df:42:a4:56:4f:1d:ab:59:19:
         5b:d3:dd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:24:36 2025 by rpki-client