Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
File:                     g4dr-7WujP4Ra7X18oZKEWITqk8.mft (raw, json)
Hash identifier:          zQmEw9/qvBqK/FLPrg9fW2qIpNL/dI9GeB3zoNrpDag=
Subject key identifier:   67:29:67:FF:FB:FE:EC:94:AF:84:6B:78:26:60:CA:BF:8D:96:DA:8B
Authority key identifier: 83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F
Certificate issuer:       /CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f
Certificate serial:       0198D583D6EA9ED773C23A4F8838455491E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 06:00:43 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:43 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:43 +0000
Files and hashes:         1: g4dr-7WujP4Ra7X18oZKEWITqk8.crl (hash: 0bBFCw8PTUafG4dPnuyzhuENwQmTnNjknjx2XDz21FI=)
                          2: on6c4T5uruUZ19cPvyYxdOa3Uo4.roa (hash: DzOTGbti7Ycex9SFmllizCyD+Zg7ddBWN0hhpKZi1gA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:d6:ea:9e:d7:73:c2:3a:4f:88:38:45:54:91:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f
        Validity
            Not Before: Aug 23 06:00:43 2025 GMT
            Not After : Aug 24 06:00:43 2025 GMT
        Subject: CN=672967fffbfeec94af846b782660cabf8d96da8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:24:29:73:7d:8f:00:31:36:c2:1d:92:59:de:
                    cb:d9:cb:ec:c4:fd:ea:2e:84:b3:b1:7f:b4:a7:6a:
                    3c:57:69:f0:6d:8c:07:8b:ff:d1:d3:a3:59:3c:6c:
                    b0:1a:2e:c1:00:8a:fe:08:cd:6c:02:5d:70:2f:b2:
                    9e:6a:e2:46:e8:3a:f5:1c:eb:4e:cf:cb:ff:30:f7:
                    60:b7:e0:29:f6:fa:33:32:24:0c:49:c6:f9:dc:7b:
                    17:7e:1f:94:81:b4:65:19:31:e4:56:d2:26:9d:7d:
                    48:a2:05:55:dc:84:65:c0:4b:82:94:5f:06:b7:49:
                    db:69:2d:46:1f:3d:cc:1d:54:e5:49:ed:b4:da:02:
                    2e:d5:bf:06:93:f5:e3:56:25:8a:c4:07:ae:46:c1:
                    3f:b3:60:10:f0:d5:93:02:e7:39:a2:f4:af:d7:ba:
                    fb:69:b9:4a:7f:41:c7:8b:79:40:e7:f1:49:09:08:
                    26:6a:cc:1f:84:50:d5:81:4d:73:ce:bb:2f:9c:43:
                    e2:1a:70:8b:9e:88:5b:7b:0a:cc:75:c4:46:9d:5d:
                    e3:69:31:6c:96:a7:79:86:cb:8a:58:0d:d8:c7:70:
                    61:d5:ef:e5:4d:2c:4c:e3:2a:e9:79:0b:9e:c4:28:
                    25:1b:a2:0b:a3:0c:51:6b:c0:c6:56:cf:69:de:73:
                    9a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:29:67:FF:FB:FE:EC:94:AF:84:6B:78:26:60:CA:BF:8D:96:DA:8B
            X509v3 Authority Key Identifier:
                keyid:83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:84:6c:83:16:c2:e8:03:89:dc:b9:e6:d9:5c:89:a6:c2:70:
         93:19:aa:1c:ab:8a:d5:32:0a:f1:65:ea:8f:1f:67:c9:f7:41:
         06:52:7b:45:ff:38:c1:e0:cb:c7:77:56:87:fe:c5:28:60:f9:
         2d:47:c2:f5:18:4f:3e:a7:3a:4e:6a:8b:03:af:ff:b2:e1:ff:
         b8:bd:e5:32:65:c5:6d:c7:d8:de:80:9f:ac:08:c7:9d:90:ed:
         5f:1b:2e:ca:7f:06:b0:fd:aa:01:91:58:74:63:bb:a5:db:43:
         3e:5c:6b:b6:25:41:bb:b8:ee:c5:6b:30:35:b7:1d:82:8c:a8:
         77:13:50:17:e5:db:ec:1c:75:b0:66:60:a4:0a:46:c4:18:5a:
         aa:d2:00:60:5b:a0:31:5d:5d:8a:fc:e4:91:38:1f:7e:4d:b3:
         9b:8d:ab:a1:b9:76:97:a2:fd:f0:1b:31:19:2b:5b:8f:96:5b:
         13:1c:8c:5a:0d:f5:7a:f1:8d:c2:c4:70:e9:e4:14:fb:ef:41:
         ce:78:8a:77:8d:b8:72:83:bc:9b:fd:d9:a2:2d:47:51:58:4c:
         57:69:3b:06:d2:2b:d1:ae:72:64:ea:08:27:d6:20:00:d1:2a:
         2e:ae:ed:f0:59:70:36:89:4f:12:28:2e:73:48:65:07:18:90:
         49:97:f2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:11 2025 by rpki-client