Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
File:                     G6QV0W5y4zPyk2wcXhffJDeBCMI.mft (raw, json)
Hash identifier:          bne/nUnRrumvr1jwfJprTTOaWvC7mtIQXKQfrfCpT54=
Subject key identifier:   B5:CE:E0:A8:63:77:4B:01:85:C5:B3:8B:92:F7:88:C1:29:D6:98:F8
Authority key identifier: 1B:A4:15:D1:6E:72:E3:33:F2:93:6C:1C:5E:17:DF:24:37:81:08:C2
Certificate issuer:       /CN=1ba415d16e72e333f2936c1c5e17df24378108c2
Certificate serial:       0198D7737E2F8CC5E020C215288C4CC635DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
Manifest number:          04E9
Signing time:             Sat 23 Aug 2025 15:02:06 +0000
Manifest this update:     Sat 23 Aug 2025 15:02:06 +0000
Manifest next update:     Sun 24 Aug 2025 15:02:06 +0000
Files and hashes:         1: G6QV0W5y4zPyk2wcXhffJDeBCMI.crl (hash: 6Sh8YS5Sh8iZyaOxX+PA0ACpflY43jXzcxT5xWtf1Yw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:73:7e:2f:8c:c5:e0:20:c2:15:28:8c:4c:c6:35:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba415d16e72e333f2936c1c5e17df24378108c2
        Validity
            Not Before: Aug 23 15:02:06 2025 GMT
            Not After : Aug 24 15:02:06 2025 GMT
        Subject: CN=b5cee0a863774b0185c5b38b92f788c129d698f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:34:91:e6:d6:ee:3e:36:c7:97:4f:86:47:71:
                    16:1e:69:52:03:75:77:01:b6:de:b3:b1:6c:2b:f4:
                    23:a1:62:99:d8:93:eb:b0:ca:26:ed:8f:09:1f:9c:
                    f3:22:6a:65:af:59:3e:d3:45:df:e6:21:cb:82:68:
                    30:de:b1:28:d5:1b:e4:1d:c6:f2:63:1a:51:4a:c5:
                    58:e5:80:21:d0:90:f0:b5:01:a3:36:b7:fd:72:ce:
                    20:c8:73:0f:e4:58:82:df:87:c0:ee:20:72:43:d2:
                    e2:74:ca:e9:3e:a0:7e:e7:98:30:f8:73:cf:1e:db:
                    5f:6f:c2:6b:36:b5:fc:7d:5a:92:27:f4:f6:69:86:
                    02:4a:44:4b:99:61:5b:e8:e1:4f:cd:b2:d7:f3:02:
                    3d:b7:ef:3d:01:eb:5e:04:db:8e:92:db:4a:32:8b:
                    37:b8:df:3d:8d:9c:ee:b4:35:81:a4:aa:ef:0a:2e:
                    30:7e:1e:7c:cb:8b:84:73:32:26:fe:70:e5:25:1c:
                    57:61:3b:3f:3a:aa:7e:7a:fe:41:fa:a9:c8:3a:93:
                    f9:4c:0e:5d:5e:6e:f0:1a:b4:8a:57:68:81:cc:83:
                    39:15:3b:ad:a1:16:3d:93:23:ad:11:3e:c9:a2:26:
                    a8:1e:79:43:6e:2c:45:60:61:af:fe:6f:74:c2:61:
                    0f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CE:E0:A8:63:77:4B:01:85:C5:B3:8B:92:F7:88:C1:29:D6:98:F8
            X509v3 Authority Key Identifier:
                keyid:1B:A4:15:D1:6E:72:E3:33:F2:93:6C:1C:5E:17:DF:24:37:81:08:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ab:b1:94:63:77:1d:b6:00:5c:d7:1c:f4:af:09:c2:05:19:
         1a:6d:37:2d:63:07:ba:e6:cf:34:e3:db:ac:2b:f3:c8:34:38:
         c7:2f:de:36:83:d4:4b:5a:ee:b7:48:a7:3f:b3:33:fd:10:47:
         3a:b1:45:83:aa:9b:9a:ca:2c:9f:35:be:08:5a:79:3a:96:29:
         b4:be:3b:fb:66:ac:d7:2b:e8:be:8a:87:67:79:a9:f0:35:7c:
         20:ee:18:ae:82:11:ac:9b:07:c9:f6:f9:81:7b:d5:e5:9d:52:
         f0:f5:a8:e6:7e:d8:7e:4d:b2:ac:34:a6:0a:87:4f:4e:7d:f8:
         89:0a:16:4a:9d:6a:33:19:2e:34:a1:fa:18:c2:a8:1e:db:dc:
         e3:e0:82:47:11:c1:bf:eb:6f:4f:cb:ca:d3:8d:81:f5:e3:53:
         4a:80:b0:90:9f:85:24:3b:f9:4f:a1:22:31:01:89:58:2b:e4:
         d5:c0:ee:fa:5b:45:14:bd:3a:72:c4:6c:62:52:10:c3:1c:fc:
         ae:34:03:59:ef:0c:e4:f5:26:b4:84:26:c5:91:cf:c0:32:c6:
         20:b9:b9:9e:d8:92:c6:f8:fc:fa:ec:19:4d:b0:e3:7d:1c:d2:
         05:ad:53:b2:46:64:02:1f:83:dd:85:90:fd:9c:64:09:fb:17:
         4c:c0:9b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:48:10 2025 by rpki-client