Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
File:                     G1NNR62NtYlKX8k0LkVY-U5PF_E.mft (raw, json)
Hash identifier:          xPbNic1gwEwRjpy7bM0OHAA+2r+AQFt6FFtFFYWxQd0=
Subject key identifier:   67:89:C5:9E:C7:91:96:FA:29:04:E9:9A:59:EB:4B:F6:EF:03:B0:24
Authority key identifier: 1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1
Certificate issuer:       /CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
Certificate serial:       0196B96CAC97D4BD4044E207DFFF469D63E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
Manifest number:          1488
Signing time:             Sat 10 May 2025 09:00:29 +0000
Manifest this update:     Sat 10 May 2025 09:00:29 +0000
Manifest next update:     Sun 11 May 2025 09:00:29 +0000
Files and hashes:         1: G1NNR62NtYlKX8k0LkVY-U5PF_E.crl (hash: FQfH2RytOXvXRJaDEWJDXVE4Z7xo8/q7YCmmU18paAk=)
                          2: tpcLfnSFe1LhX4JafoXime7wXxw.roa (hash: 5bEgNy5LIfp1SJAYM4F8oQrbGx7UDr0Zn6gyPZH4W9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 09:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:6c:ac:97:d4:bd:40:44:e2:07:df:ff:46:9d:63:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
        Validity
            Not Before: May 10 09:00:29 2025 GMT
            Not After : May 11 09:00:29 2025 GMT
        Subject: CN=6789c59ec79196fa2904e99a59eb4bf6ef03b024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1d:98:c4:fc:e6:ec:17:b1:cf:e1:ba:15:20:
                    0c:8b:06:be:36:a8:48:6a:6b:c2:d8:d5:dc:f6:08:
                    a9:07:f8:0b:2d:ae:48:56:7f:1b:67:36:7e:8f:c4:
                    56:6b:ae:db:69:86:5c:bd:20:6f:23:dc:9c:13:53:
                    06:7e:d0:6b:13:b3:0d:2b:1d:18:0a:43:98:db:f9:
                    46:03:9a:30:c0:30:88:52:72:31:9c:82:7d:71:db:
                    96:5f:ab:85:38:8a:97:8c:5e:f0:d4:bb:f8:0a:93:
                    38:24:c8:82:8b:d6:6f:1c:b2:0d:3d:00:39:32:30:
                    55:68:97:41:59:a7:be:d3:17:bb:ac:a2:fd:91:8a:
                    89:3d:70:b7:3d:27:ce:9a:61:c0:ce:41:28:83:a0:
                    8f:3c:49:02:75:f5:72:e3:97:4d:2c:81:49:ec:a3:
                    67:25:b5:13:ee:03:c3:33:32:76:8f:01:7a:a3:5d:
                    27:fc:96:9a:5d:8c:a8:e4:c2:a1:43:0c:be:dc:e2:
                    72:7e:1d:a9:e0:52:eb:be:09:bb:e6:5c:c5:c2:29:
                    0e:ac:1a:be:62:a5:18:72:7b:0b:37:23:1f:aa:3e:
                    b4:42:d0:60:65:1b:e2:66:74:6d:35:b7:97:a9:8e:
                    57:f0:bf:d0:d7:05:05:15:14:1a:6c:0f:8e:93:d5:
                    bf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:89:C5:9E:C7:91:96:FA:29:04:E9:9A:59:EB:4B:F6:EF:03:B0:24
            X509v3 Authority Key Identifier:
                keyid:1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:05:b0:80:98:77:68:9f:d0:5b:8f:57:4b:1a:1b:fe:d8:16:
         57:55:8d:64:0e:3b:48:3e:9e:b0:ae:c8:f9:33:1e:7a:fb:69:
         2c:3c:b5:a3:ab:f5:df:7a:35:49:e6:41:37:94:bc:f4:95:57:
         29:43:ff:02:f9:9a:4c:46:74:6a:ea:0d:dd:df:b7:09:e1:99:
         46:e9:cb:84:15:b5:bc:25:4d:66:5f:28:2e:b6:ca:0d:fb:a6:
         51:9f:12:ca:fd:52:45:cc:0c:ea:c6:e9:74:70:7a:02:d9:09:
         8f:15:fc:66:65:ed:cf:a8:c5:e6:f6:51:da:11:69:60:0e:92:
         08:8b:dc:46:61:7b:a5:49:a8:d0:d9:a8:4e:6a:40:89:84:be:
         a2:78:7e:d3:ea:57:d4:32:9f:42:21:fa:fa:3e:48:6c:7c:72:
         aa:b9:b6:64:91:8e:1c:e7:16:3a:8e:74:db:b6:41:dd:c7:5b:
         7b:26:e2:08:ff:19:54:71:4a:d5:d4:38:55:01:80:cf:bf:08:
         08:91:73:74:16:f4:19:92:a1:c8:39:9f:5b:74:93:94:bb:ab:
         0c:dd:8c:61:2b:39:b3:59:93:4e:e3:b0:c0:1a:3d:13:0b:3d:
         f5:75:1f:65:c0:12:e8:03:c5:c6:25:78:0d:e2:36:a7:67:c4:
         10:85:aa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:50:18 2025 by rpki-client