Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
File:                     G55Be7nssazpSR68KCO7eJNLLN8.mft (raw, json)
Hash identifier:          mJB8gtzZGZca6rQ5fx0giEc3LPz04MjUuxWEZshPImY=
Subject key identifier:   9D:37:01:05:AC:F1:8D:3B:B3:0D:D4:C8:90:93:7D:E7:7A:5A:F9:D0
Authority key identifier: 1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF
Certificate issuer:       /CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
Certificate serial:       0198D706230A919AE2DA47F2E3350A4C2A33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
Manifest number:          14F8
Signing time:             Sat 23 Aug 2025 13:02:40 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:40 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:40 +0000
Files and hashes:         1: G55Be7nssazpSR68KCO7eJNLLN8.crl (hash: T3+dgF8/VvReqChi36Vtl2ktDRtppmYuicjdgrKj0Ao=)
                          2: uDXgZr4d7paw0tQnlQAuxTAiQJ4.roa (hash: ZLVG9qnKbapzUcUyG3vXPFRhsGi/6YqVmyuunmvWt4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:06:23:0a:91:9a:e2:da:47:f2:e3:35:0a:4c:2a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
        Validity
            Not Before: Aug 23 13:02:40 2025 GMT
            Not After : Aug 24 13:02:40 2025 GMT
        Subject: CN=9d370105acf18d3bb30dd4c890937de77a5af9d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ab:bb:1f:11:1c:5b:c1:fa:a4:19:72:b8:96:
                    dc:3a:c9:ae:7c:c4:97:cd:d8:f1:34:69:69:f9:68:
                    4a:8b:51:c3:51:e1:ca:4c:2b:35:ff:70:a4:2a:3b:
                    6c:ad:b7:cc:72:aa:54:02:5c:73:8a:37:44:19:ba:
                    a7:db:e6:fd:38:c7:4f:e2:b9:c6:fe:e8:bc:24:6b:
                    87:3e:27:4f:74:6e:b4:b1:cd:4f:ac:4c:67:6d:66:
                    f0:3c:76:01:13:e6:34:c2:02:f5:f4:46:b0:05:0e:
                    ed:63:61:70:72:5f:92:0d:9a:c2:9c:9b:d8:e6:40:
                    77:e1:ba:ea:e3:ea:7b:db:07:80:cc:c2:78:1c:67:
                    4c:5d:a6:f8:9e:ab:d3:4d:2f:b8:df:73:b8:24:b1:
                    98:2a:71:40:3e:cd:9b:87:c8:40:b9:60:6c:f3:7c:
                    ce:f3:8c:53:c0:aa:84:c7:b9:e6:a0:05:f4:7d:1a:
                    c3:c0:10:d6:12:d6:0a:1a:02:f4:36:de:56:62:69:
                    4b:2c:8b:16:0c:34:93:2a:ba:f9:88:f6:43:5e:85:
                    4b:a4:cb:2c:b8:4b:7e:65:2f:3b:f7:af:de:17:99:
                    12:3d:fd:3c:f9:6f:11:43:84:69:8e:89:07:bb:ef:
                    0a:93:1d:72:30:1a:4b:0e:9c:5f:db:0a:93:ac:a1:
                    bb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:37:01:05:AC:F1:8D:3B:B3:0D:D4:C8:90:93:7D:E7:7A:5A:F9:D0
            X509v3 Authority Key Identifier:
                keyid:1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:06:f4:d3:4c:4e:d9:4d:d1:2d:a0:0e:39:6b:82:e0:93:a9:
         26:5e:56:b0:07:ed:4d:fb:3f:5f:5a:32:ca:d9:2c:dd:ac:8c:
         0b:fd:19:11:f4:2b:c1:bf:9f:e5:be:1d:55:a6:a3:54:69:38:
         f5:5c:a5:0b:5e:74:76:68:9a:ce:11:80:3e:32:51:92:a7:a8:
         61:5c:29:90:5d:81:40:bf:ac:9b:ea:09:34:9b:de:98:34:42:
         0b:b6:74:b7:24:ab:5a:d1:df:d3:fa:2a:8b:c9:e6:10:9c:92:
         e7:1c:81:9e:49:5d:2e:06:6b:4f:f5:d0:df:de:49:c3:0f:c9:
         96:5d:a5:5f:ed:1b:62:d9:c2:f6:a9:47:5b:17:8f:0c:cd:a1:
         d8:c2:d4:54:45:c1:db:1a:db:f4:c3:7f:7e:13:74:88:79:54:
         07:46:90:4a:e6:98:ef:c8:5d:d3:15:1b:b3:e3:57:c8:48:18:
         ad:74:ef:ef:4b:91:54:65:f9:2d:2d:63:6f:b1:e3:a0:62:6b:
         5a:a1:07:a8:c3:8c:70:8b:5e:a8:1f:79:45:ca:c2:ea:ec:9a:
         10:0b:bc:15:fd:69:dc:0f:28:65:ac:f1:d1:ea:2c:e3:9e:72:
         69:68:47:b7:2a:8d:7e:f7:39:6d:a5:4f:67:d6:44:67:99:a0:
         92:dd:b6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:14:33 2025 by rpki-client