Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
File:                     G1NNR62NtYlKX8k0LkVY-U5PF_E.mft (raw, json)
Hash identifier:          7VAbSafQzG0pdCI3dzfWDZx4SMg8KM/dcSxwMBYeo0g=
Subject key identifier:   41:C6:F9:6C:76:AD:48:CC:0F:3C:08:A2:A8:1E:DC:C1:42:17:C6:7F
Authority key identifier: 1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1
Certificate issuer:       /CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
Certificate serial:       0199FDD982EE47E85221C8C236A11E216783
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
Manifest number:          1639
Signing time:             Sun 19 Oct 2025 19:01:54 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:54 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:54 +0000
Files and hashes:         1: G1NNR62NtYlKX8k0LkVY-U5PF_E.crl (hash: DWMt7GZz3xw/d1aesoJowd2qFhsozoiiXnzgtv7Drwk=)
                          2: tpcLfnSFe1LhX4JafoXime7wXxw.roa (hash: 5bEgNy5LIfp1SJAYM4F8oQrbGx7UDr0Zn6gyPZH4W9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:82:ee:47:e8:52:21:c8:c2:36:a1:1e:21:67:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
        Validity
            Not Before: Oct 19 19:01:54 2025 GMT
            Not After : Oct 20 19:01:54 2025 GMT
        Subject: CN=41c6f96c76ad48cc0f3c08a2a81edcc14217c67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:38:7f:a2:67:5e:02:70:ac:c2:7e:27:63:bf:
                    20:03:3e:cc:48:72:e8:2a:95:4f:95:36:95:1e:8d:
                    7d:54:87:d6:8f:60:ba:d6:b9:b9:c6:b2:1c:32:9c:
                    67:55:7e:eb:f7:66:fb:b6:1d:d8:50:2e:97:13:ec:
                    01:cc:2c:1d:0c:02:8c:d3:cf:08:bc:65:54:fc:7a:
                    1d:a4:b8:04:bb:1e:5f:97:3f:9e:b5:13:61:38:cc:
                    35:23:65:12:ad:83:45:31:13:1c:e0:78:e7:6c:2e:
                    71:5e:28:5d:51:2e:96:2d:cd:2e:df:55:0c:97:83:
                    dc:73:6b:fe:57:ab:a7:84:27:d5:31:66:4d:c3:d1:
                    d1:88:46:a4:d4:20:ec:80:df:c5:05:ab:bb:3a:6a:
                    8c:a9:b4:ab:12:83:89:c1:5d:56:90:38:08:df:db:
                    b5:4e:60:05:62:fa:e2:a2:c9:b7:f5:64:39:ba:31:
                    0a:81:33:78:04:98:66:7d:08:ba:9e:a0:41:48:c2:
                    8f:28:35:f0:4d:8a:72:3b:6b:0e:4b:bd:4b:bc:06:
                    fe:c4:87:c1:8a:c7:06:2a:a0:91:d8:c3:0a:98:33:
                    c7:9c:71:5d:b5:82:16:b3:69:67:ee:d3:88:e9:ce:
                    22:e3:32:b5:02:9c:94:91:c4:81:90:85:f6:9f:54:
                    74:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C6:F9:6C:76:AD:48:CC:0F:3C:08:A2:A8:1E:DC:C1:42:17:C6:7F
            X509v3 Authority Key Identifier:
                keyid:1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:72:4b:44:9b:43:5c:dc:e4:74:5a:47:03:98:9d:95:14:40:
         de:d5:78:d8:eb:82:fe:23:be:8e:d5:1f:c3:32:b9:33:75:76:
         5c:6b:4b:e6:9c:3a:2d:4b:9f:40:2f:7f:05:72:fc:8e:0d:e8:
         61:d0:96:c0:09:28:9e:7f:03:97:c7:7f:4d:43:9d:07:59:56:
         d7:34:3e:a4:81:ad:a2:ee:2a:99:47:cb:22:36:8f:97:45:1a:
         af:61:8d:1c:79:72:12:03:41:e7:c7:ce:95:aa:8c:0e:e8:3b:
         74:93:43:44:f8:14:13:99:ce:cd:c0:6a:c9:d7:b3:0a:e8:af:
         23:35:42:cb:88:2e:5e:89:85:82:5f:28:7a:cb:5c:99:02:5e:
         30:01:af:1f:05:e4:12:b9:dc:76:6b:31:63:7d:da:7a:c4:82:
         7d:2f:68:28:53:03:92:1b:47:5e:5d:e2:d0:62:c5:01:41:c8:
         dd:3a:7c:cf:5c:e1:0c:98:ec:3c:b9:01:61:f4:fa:41:a7:d2:
         db:f2:cd:57:99:ba:c6:63:43:ca:b3:d1:da:84:ae:29:9c:66:
         46:25:f1:ed:17:23:5a:94:c1:76:f4:06:3d:51:7e:40:31:18:
         e1:81:f2:b3:b6:3c:85:3e:7e:ed:44:cd:af:77:4e:f0:f3:97:
         24:5f:d0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:00 2025 by rpki-client