Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
File:                     G-u7vrbpIjF2ylod8UmJhgF-jig.mft (raw, json)
Hash identifier:          LZU8r7V9i1nfNuiOY1hrKp2icR2tpIc67EV/DE1b5eI=
Subject key identifier:   ED:57:46:05:8A:4D:59:D9:87:A6:E5:59:48:09:63:EA:33:FE:A7:BB
Authority key identifier: 1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28
Certificate issuer:       /CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
Certificate serial:       0198D66028B7A43E10CC183C943378F0D6A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
Manifest number:          152A
Signing time:             Sat 23 Aug 2025 10:01:22 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:22 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:22 +0000
Files and hashes:         1: G-u7vrbpIjF2ylod8UmJhgF-jig.crl (hash: 9PEyn0SnBSD5pH23AJE3OdmUODAL22HZPA5toJPOy5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:28:b7:a4:3e:10:cc:18:3c:94:33:78:f0:d6:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
        Validity
            Not Before: Aug 23 10:01:22 2025 GMT
            Not After : Aug 24 10:01:22 2025 GMT
        Subject: CN=ed5746058a4d59d987a6e559480963ea33fea7bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:95:36:b0:d3:37:cf:f8:ae:40:d0:fc:26:2e:
                    45:c6:b9:3f:1c:5c:0d:15:6a:6a:b0:4e:8b:28:75:
                    2c:51:2d:fb:4a:b7:d9:09:cf:fc:ec:7c:ae:c5:03:
                    ba:06:83:21:f8:a0:e6:7a:c9:19:b4:b2:37:16:1e:
                    4b:8f:ab:38:2d:86:e5:d7:01:a8:fe:f4:01:3e:1f:
                    72:70:07:d4:cc:ea:09:90:6d:56:68:ca:e2:cd:33:
                    b6:ab:4f:0c:b3:fe:8a:aa:cc:c2:dc:24:a1:95:b9:
                    56:c6:29:09:cb:7a:91:37:24:c1:47:13:1f:ad:c1:
                    8f:f1:36:b5:1c:81:fa:9f:fe:03:a2:1b:de:48:fc:
                    1f:81:53:da:9c:28:3e:5a:75:00:af:1d:f6:7a:0f:
                    0d:9e:f9:aa:8e:a6:1b:4c:2f:96:d3:58:8c:fa:f3:
                    f2:86:ff:11:27:2a:8d:2d:2d:ed:3e:48:7e:df:db:
                    b9:2c:62:ec:31:36:62:51:53:95:4a:f3:b4:db:05:
                    38:6a:e3:f7:6a:00:15:c2:7b:fc:e2:41:e1:e3:2d:
                    36:3c:e6:d5:59:87:34:b3:75:8a:e2:b6:3a:ab:96:
                    de:42:d4:60:ba:98:23:1a:d9:90:e4:48:c6:f9:29:
                    86:b8:12:3b:27:9d:14:4c:31:20:22:f2:e8:06:2c:
                    31:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:57:46:05:8A:4D:59:D9:87:A6:E5:59:48:09:63:EA:33:FE:A7:BB
            X509v3 Authority Key Identifier:
                keyid:1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:a6:7e:d6:96:1b:67:f6:7d:a2:22:8b:bd:66:50:3c:b8:fe:
         1f:58:be:d3:e7:fe:d2:e6:2b:8f:c5:87:0b:2e:45:c7:c4:fc:
         1d:f8:ee:61:c1:77:f2:c8:e8:aa:9a:07:f1:67:3b:46:e2:2e:
         53:a6:7e:36:c8:4a:98:ef:ec:e2:88:bc:44:66:4c:93:d0:57:
         0f:3c:c3:68:8d:d8:bf:9f:35:c0:6a:ba:0a:12:55:a8:e7:05:
         88:f3:d6:be:60:3e:50:4e:28:9d:7e:aa:28:30:75:22:93:4c:
         ac:a4:6c:2b:4f:25:13:1f:9c:f3:c9:e6:0a:5e:25:72:4b:40:
         e7:89:9a:20:ee:e7:7e:6d:71:83:9d:e7:ff:5a:b0:09:66:ac:
         57:18:74:d6:08:b6:98:b5:26:e8:57:9f:d4:2d:6a:df:7e:f0:
         29:6a:72:26:bf:15:57:17:40:ac:58:67:98:d0:be:d5:40:58:
         04:8e:e6:d3:01:1a:e1:c8:09:b8:d3:40:d6:c4:c6:a8:48:73:
         83:04:04:2e:06:3a:d5:56:56:42:0e:36:8f:3f:86:97:30:3f:
         9b:e8:69:ea:b5:e6:ff:fa:9c:47:71:fa:d3:9f:7a:5f:f2:44:
         20:93:1a:5b:2b:27:68:67:f6:f9:74:39:49:8d:dd:86:f2:7c:
         a5:1a:91:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:41 2025 by rpki-client