Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
File:                     G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft (raw, json)
Hash identifier:          hnspbgOjCRAi5hBamgNffogdrBbOmTTkG4BO0x0LhDI=
Subject key identifier:   3E:78:B6:47:A8:BF:07:C9:9D:29:4D:13:DD:59:33:4C:80:D6:C3:D2
Authority key identifier: 1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3
Certificate issuer:       /CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
Certificate serial:       0197B6A0F96CD25645241F99773BA79B8E7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
Manifest number:          0A7A
Signing time:             Sat 28 Jun 2025 13:01:32 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:32 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:32 +0000
Files and hashes:         1: G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl (hash: MFOYOSncMXrcMY/YW3r9LiFTDsCho3BME/Ua3ui7jfA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:f9:6c:d2:56:45:24:1f:99:77:3b:a7:9b:8e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
        Validity
            Not Before: Jun 28 13:01:32 2025 GMT
            Not After : Jun 29 13:01:32 2025 GMT
        Subject: CN=3e78b647a8bf07c99d294d13dd59334c80d6c3d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c2:a3:d4:0f:20:04:80:2a:59:98:1a:03:3b:
                    ac:de:b8:23:47:c0:b4:42:de:3f:ac:55:10:37:d7:
                    8f:dc:98:6d:99:ce:d7:2e:03:5a:d8:96:d4:c4:d9:
                    54:a7:92:af:93:4f:0f:d1:ad:cf:a9:2e:c4:5e:8a:
                    ca:76:f1:c2:f5:bc:60:46:de:d5:c4:a1:99:6b:da:
                    7f:ba:eb:cf:a2:46:60:51:bb:43:af:ec:fc:d6:fe:
                    cb:3e:89:63:c2:6b:75:ab:73:da:3a:7c:96:ed:b5:
                    58:aa:00:b7:2e:3b:6b:50:ca:32:88:d7:e2:16:e7:
                    62:3c:c2:85:4b:ce:d8:3f:4f:dd:35:d8:86:a3:97:
                    a2:29:1a:d4:1d:f2:a0:5c:33:bc:8f:0b:07:98:23:
                    4d:97:b0:c7:95:d5:71:de:a5:07:c3:05:43:aa:d7:
                    30:58:2b:90:74:7a:d2:e0:de:03:c1:60:e0:8d:7f:
                    61:a7:de:99:3a:9d:f7:38:0a:fb:ef:df:c8:2d:7e:
                    d1:c0:9e:da:5d:e2:19:36:4a:92:db:3c:0f:03:97:
                    fb:9e:e2:21:c2:46:7e:6d:89:77:7e:6e:ca:ff:46:
                    38:ed:58:d2:04:4a:2a:d0:80:80:e9:a9:03:8d:1e:
                    72:3e:e7:42:a1:ac:8b:8e:7b:6a:88:86:71:40:1f:
                    0d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:78:B6:47:A8:BF:07:C9:9D:29:4D:13:DD:59:33:4C:80:D6:C3:D2
            X509v3 Authority Key Identifier:
                keyid:1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:90:86:81:e4:99:9a:5b:2f:e5:9c:ac:49:cb:a6:1d:7c:3c:
         f4:cf:59:47:4d:fd:05:a9:fc:92:91:47:32:6a:c6:86:85:4a:
         79:13:b0:e6:2f:22:d9:99:50:de:d1:71:fd:89:2d:ff:34:d3:
         04:bc:6b:0f:8f:b7:15:a3:1c:e8:7b:9b:b5:45:23:9d:6b:e1:
         43:e9:a1:4b:cc:94:84:db:9c:36:17:76:f3:ca:fd:97:e1:a8:
         2f:ad:63:86:5a:a1:45:6c:7b:ec:5f:72:b0:99:27:02:2b:ec:
         39:30:3d:2d:4e:41:0f:0c:1e:e8:9f:74:af:78:9e:cc:fd:2f:
         f2:36:df:23:f7:2f:3a:dd:81:0c:91:2c:45:c9:8a:73:a2:8d:
         5c:51:a0:1c:e0:7f:3d:9a:1d:fc:cc:03:f9:68:60:90:92:88:
         90:90:7d:26:a0:f7:0d:ab:93:d2:7c:35:50:0c:a6:9d:69:9c:
         a8:b5:9d:38:15:5e:95:c4:d0:d7:6d:ac:56:8c:48:56:67:92:
         24:40:4f:1b:81:4e:32:7d:b4:c2:f0:e1:48:4f:a6:92:c2:49:
         6c:b3:fc:97:a1:a1:a8:b1:37:45:60:a2:77:ed:42:57:be:89:
         89:09:f7:c4:c2:5b:57:e4:f6:b7:41:ee:5b:72:e8:8a:a1:0e:
         44:07:74:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:17 2025 by rpki-client