Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
File:                     G_GA7KTkQF6Heotjkjp1iNd-OdI.mft (raw, json)
Hash identifier:          Y7RexLPuTKS1l+9dizKZbsBs2gsEZlmwqDD/cTghVcM=
Subject key identifier:   BB:31:C8:2C:61:24:E4:BE:B0:E0:E8:08:5A:E6:E4:F2:8D:D2:8E:8F
Authority key identifier: 1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2
Certificate issuer:       /CN=1bf180eca4e4405e877a8b63923a7588d77e39d2
Certificate serial:       0197B7457D8F7D21CAF7E7E99559F4C08176
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
Manifest number:          050C
Signing time:             Sat 28 Jun 2025 16:01:14 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:14 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:14 +0000
Files and hashes:         1: G_GA7KTkQF6Heotjkjp1iNd-OdI.crl (hash: 7rENU7HiglteLza4Lw0VDJG7aw4gDuT8w9rT8H+b+Rk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:7d:8f:7d:21:ca:f7:e7:e9:95:59:f4:c0:81:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf180eca4e4405e877a8b63923a7588d77e39d2
        Validity
            Not Before: Jun 28 16:01:14 2025 GMT
            Not After : Jun 29 16:01:14 2025 GMT
        Subject: CN=bb31c82c6124e4beb0e0e8085ae6e4f28dd28e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:44:96:eb:a3:19:18:2a:c6:70:cf:b3:c1:5c:
                    6b:fb:47:c6:a3:5f:78:57:b6:0c:4f:2e:cb:3b:03:
                    f2:73:b1:97:3a:bf:e3:41:28:4d:8c:a9:10:08:72:
                    66:eb:fe:93:22:8a:f6:49:bf:04:71:1b:55:0e:6f:
                    4e:38:f3:7e:d9:05:88:cd:73:9a:31:e5:4b:99:9f:
                    c3:32:7a:9c:23:03:81:36:63:8b:66:01:c8:e0:d5:
                    3e:d5:39:d7:bd:00:1e:24:52:8f:d5:46:fb:e3:3d:
                    27:75:ac:2f:68:a1:f7:70:18:ee:00:56:20:16:5d:
                    45:99:92:c1:73:54:b6:85:3a:53:c7:c6:36:96:f6:
                    07:ac:f9:38:db:d8:d6:3f:de:96:af:0a:1a:13:82:
                    da:d0:44:81:93:cb:a0:2b:b5:4f:9e:b2:94:18:bc:
                    1e:ee:a3:e3:61:1c:70:a2:b6:6e:4a:ac:a7:1a:15:
                    dd:f0:d1:fb:4d:30:25:6e:06:e4:36:ba:b1:38:4e:
                    fa:c9:21:bb:e9:1f:f2:c1:c1:77:ba:d6:c0:b5:2d:
                    88:75:41:6f:29:dc:d3:d2:4d:6a:b0:e1:f6:33:52:
                    04:0f:da:9c:b8:b2:b7:6e:56:2e:70:e8:40:e9:5d:
                    95:e3:8e:19:38:e4:d6:c9:7f:95:d3:bb:4a:12:02:
                    a3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:31:C8:2C:61:24:E4:BE:B0:E0:E8:08:5A:E6:E4:F2:8D:D2:8E:8F
            X509v3 Authority Key Identifier:
                keyid:1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d7:e8:a9:00:ad:1b:92:5c:18:88:c1:47:d5:e4:ec:d0:c3:
         7a:73:2e:23:74:8a:87:52:d8:be:85:86:01:92:94:98:e6:5e:
         dc:68:0f:76:c9:65:2c:6b:e0:5f:fe:e4:a1:9e:5c:c5:a5:e2:
         02:c5:4c:bf:59:5d:2b:9a:fc:29:ad:fe:c3:92:c4:ed:7d:9f:
         9f:22:b7:37:56:73:a3:2e:12:ce:f4:46:5a:c0:75:cd:44:16:
         a1:60:6d:19:2a:cc:25:81:6c:01:b9:2e:26:1b:41:a1:f3:7a:
         c2:65:ea:f8:6c:95:a9:68:34:4c:7a:39:0f:4c:2a:b1:17:2c:
         b4:37:3d:b6:a9:20:ea:53:1d:cd:75:3b:6e:2d:9b:ee:9a:56:
         47:e2:ba:23:7c:7a:4e:f3:4b:6d:c8:2f:30:79:0c:89:2d:7c:
         93:8d:52:bc:22:04:31:eb:73:d2:11:3b:5e:03:6b:b5:e8:f1:
         3f:d0:0d:c9:10:13:1f:ad:bd:06:8c:87:eb:4d:5a:75:82:49:
         d7:2c:de:56:f5:e6:91:4f:d7:2f:c8:8a:51:73:77:fa:cb:25:
         09:2e:1a:2d:05:99:76:3d:63:bd:ed:b0:ad:20:66:fc:9a:97:
         cd:77:d7:03:aa:0a:6e:aa:dd:6c:0c:2f:8a:ea:22:d6:8c:7e:
         22:20:3c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----