Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
File:                     GLIwW_twBOUp1iOkd3G45uzQUdY.mft (raw, json)
Hash identifier:          96S84JsKqo+ORvr2G982U0XyflEtmiFkf+f9fnh6Ses=
Subject key identifier:   F0:F7:8B:89:5D:4C:6E:C3:EB:7E:C8:B4:67:7D:59:F4:7A:29:03:44
Authority key identifier: 18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6
Certificate issuer:       /CN=18b2305bfb7004e529d623a47771b8e6ecd051d6
Certificate serial:       0199179AFADFABAE13B01B5B7122979824D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
Manifest number:          38
Signing time:             Fri 05 Sep 2025 02:00:56 +0000
Manifest this update:     Fri 05 Sep 2025 02:00:56 +0000
Manifest next update:     Sat 06 Sep 2025 02:00:56 +0000
Files and hashes:         1: GLIwW_twBOUp1iOkd3G45uzQUdY.crl (hash: qr8VQoc94tXJ3Nxitf3ck2/H45YTIyhMAPU9vtXSmqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:9a:fa:df:ab:ae:13:b0:1b:5b:71:22:97:98:24:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18b2305bfb7004e529d623a47771b8e6ecd051d6
        Validity
            Not Before: Sep  5 02:00:56 2025 GMT
            Not After : Sep  6 02:00:56 2025 GMT
        Subject: CN=f0f78b895d4c6ec3eb7ec8b4677d59f47a290344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:04:bb:25:61:f2:42:6f:77:34:30:f1:57:6a:
                    89:16:c5:6b:a3:6b:51:b5:6e:25:80:2a:1e:aa:40:
                    5a:40:77:7a:ed:b9:a4:18:9b:e3:84:48:b6:32:3f:
                    21:78:07:fb:99:cb:3b:ee:78:75:06:e7:93:34:12:
                    f6:8c:36:6b:56:87:d0:fd:cf:c7:97:b2:bf:03:5e:
                    16:27:39:f0:67:62:01:8a:b6:b6:c5:f0:11:da:11:
                    a3:1f:4d:00:1c:2f:2c:ee:4a:de:5f:c4:37:31:26:
                    06:24:d5:c7:6f:67:90:1b:f3:09:5c:1c:e3:12:01:
                    96:f0:10:b1:6f:47:c7:34:52:15:bb:73:3e:f4:61:
                    a6:24:ad:1f:b7:ec:03:4a:69:3f:15:4d:41:2d:d5:
                    4a:aa:4e:02:ad:71:cc:9f:26:a2:d3:a3:8e:0a:34:
                    b2:48:b3:1f:22:79:93:ff:02:b9:e7:eb:c3:c4:26:
                    6d:de:bd:74:81:24:16:b2:d6:a6:99:00:9f:0f:2a:
                    31:d9:93:43:45:11:96:10:88:cd:34:48:ac:13:87:
                    fc:11:67:23:89:4f:be:16:ef:52:85:71:57:ee:91:
                    0e:79:5e:50:8b:18:5d:d3:a4:c2:75:19:0b:da:0c:
                    f7:25:71:eb:d9:9a:34:91:68:54:17:7c:5e:39:89:
                    d3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F7:8B:89:5D:4C:6E:C3:EB:7E:C8:B4:67:7D:59:F4:7A:29:03:44
            X509v3 Authority Key Identifier:
                keyid:18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:93:2a:44:3a:0f:7d:36:41:14:15:d6:ab:5b:09:7b:3c:e6:
         a1:a4:b9:d5:15:54:d0:c9:63:87:89:d9:91:74:db:57:b8:69:
         59:c1:db:05:1a:64:0a:d4:2d:e8:5d:85:46:b8:09:54:d7:fc:
         57:0f:64:81:c3:19:bb:d9:07:e9:73:09:5f:3b:25:74:6a:47:
         2c:77:ab:c0:5b:4e:66:81:c8:b7:16:dc:6a:d2:a8:2f:e0:8f:
         bb:35:28:b0:d2:12:a3:71:62:80:47:50:b4:a6:a0:d3:e8:9c:
         ea:a8:66:55:28:39:92:da:43:e2:0d:48:69:a2:2d:bf:84:e7:
         21:ab:c5:b9:26:63:6e:6d:56:0e:f3:14:33:9a:44:d0:f5:e4:
         cf:55:8d:90:e3:37:07:27:8a:b3:6e:8e:91:61:ef:7d:f3:ee:
         5c:60:31:9c:e7:8c:d4:bf:e3:e2:49:71:fc:3a:f6:03:8d:af:
         d6:ed:c4:57:36:4d:f5:cf:c3:3c:14:bc:7d:ce:59:3f:fc:73:
         5e:ca:d8:56:51:91:c8:8b:4c:d7:98:ee:56:c1:90:aa:0d:30:
         a6:d1:4e:dc:f4:ac:f0:45:f8:11:26:0d:e5:77:8a:97:92:0f:
         51:78:3f:f7:85:64:e4:bd:26:9c:11:e7:21:a0:40:b2:d8:46:
         5e:5b:4f:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkXmvrfq64TsBtbcSKXmCTVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YjIzMDViZmI3MDA0ZTUyOWQ2MjNhNDc3NzFiOGU2ZWNk
MDUxZDYwHhcNMjUwOTA1MDIwMDU2WhcNMjUwOTA2MDIwMDU2WjAzMTEwLwYDVQQD
EyhmMGY3OGI4OTVkNGM2ZWMzZWI3ZWM4YjQ2NzdkNTlmNDdhMjkwMzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQS7JWHyQm93NDDxV2qJFsVro2tR
tW4lgCoeqkBaQHd67bmkGJvjhEi2Mj8heAf7mcs77nh1BueTNBL2jDZrVofQ/c/H
l7K/A14WJznwZ2IBira2xfAR2hGjH00AHC8s7kreX8Q3MSYGJNXHb2eQG/MJXBzj
EgGW8BCxb0fHNFIVu3M+9GGmJK0ft+wDSmk/FU1BLdVKqk4CrXHMnyai06OOCjSy
SLMfInmT/wK55+vDxCZt3r10gSQWstammQCfDyox2ZNDRRGWEIjNNEisE4f8EWcj
iU++Fu9ShXFX7pEOeV5Qixhd06TCdRkL2gz3JXHr2Zo0kWhUF3xeOYnT7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPD3i4ldTG7D637ItGd9WfR6KQNEMB8GA1UdIwQY
MBaAFBiyMFv7cATlKdYjpHdxuObs0FHWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0xJd1dfdHdCT1VwMWlPa2QzRzQ1dXpRVWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kM2I5YTEtZWQ5ZC00MmM1LTg2ZTkt
NjhiODZlZWMyZmZjLzEvR0xJd1dfdHdCT1VwMWlPa2QzRzQ1dXpRVWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9kM2I5YTEtZWQ5ZC00MmM1LTg2ZTktNjhiODZlZWMyZmZj
LzEvR0xJd1dfdHdCT1VwMWlPa2QzRzQ1dXpRVWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZMqRDoP
fTZBFBXWq1sJezzmoaS51RVU0Mljh4nZkXTbV7hpWcHbBRpkCtQt6F2FRrgJVNf8
Vw9kgcMZu9kH6XMJXzsldGpHLHerwFtOZoHItxbcatKoL+CPuzUosNISo3FigEdQ
tKag0+ic6qhmVSg5ktpD4g1IaaItv4TnIavFuSZjbm1WDvMUM5pE0PXkz1WNkOM3
ByeKs26OkWHvffPuXGAxnOeM1L/j4klx/Dr2A42v1u3EVzZN9c/DPBS8fc5ZP/xz
XsrYVlGRyItM15juVsGQqg0wptFO3PSs8EX4ESYN5XeKl5IPUXg/94Vk5L0mnBHn
IaBAsthGXltPeA==
-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:27 2025 by rpki-client