Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
File:                     GjrGrWXloJkgm4i4ec9KCK8IaN4.mft (raw, json)
Hash identifier:          UZ7eb61XaEDKMZBOVLC0gytjPCu/dIvuGpfJj1dNfgo=
Subject key identifier:   46:5E:81:C8:E4:97:4C:C8:0C:0F:F6:A0:8D:F9:70:0A:01:8F:1B:D9
Authority key identifier: 1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE
Certificate issuer:       /CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de
Certificate serial:       019752A1E3D32D50A5B82037F8A5E8968D59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
Manifest number:          1470
Signing time:             Mon 09 Jun 2025 03:00:30 +0000
Manifest this update:     Mon 09 Jun 2025 03:00:30 +0000
Manifest next update:     Tue 10 Jun 2025 03:00:30 +0000
Files and hashes:         1: GjrGrWXloJkgm4i4ec9KCK8IaN4.crl (hash: ccI3GhWhd+SF7tZgRwKHlVD/ckBFMqUoRTrSUxHQJ0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 02:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:a1:e3:d3:2d:50:a5:b8:20:37:f8:a5:e8:96:8d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de
        Validity
            Not Before: Jun  9 03:00:30 2025 GMT
            Not After : Jun 10 03:00:30 2025 GMT
        Subject: CN=465e81c8e4974cc80c0ff6a08df9700a018f1bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:89:69:88:b3:0f:58:c3:68:db:28:27:90:ad:
                    19:fe:ee:26:33:df:11:af:20:a0:5b:f4:a9:b4:f1:
                    48:63:d9:77:f8:07:4d:84:97:b8:bd:e7:ad:b2:27:
                    e7:d0:c2:fc:e3:60:e5:24:06:d6:f9:96:73:7e:fd:
                    9f:bb:3c:1f:41:93:69:cb:63:9b:54:0c:85:e8:94:
                    18:d7:88:66:4a:31:71:e5:a8:1a:13:82:ef:70:65:
                    3a:0b:2a:6f:57:0b:1c:d8:df:93:71:a4:02:39:9e:
                    54:d5:82:9a:0c:30:8c:36:61:97:3e:fa:e4:52:9d:
                    35:5d:25:61:35:25:3a:6a:32:6b:14:a8:bf:34:e0:
                    2b:a3:95:71:78:8e:b6:67:11:17:46:77:e9:68:cb:
                    e7:e3:3c:47:23:ac:0d:5b:76:c4:92:1e:32:d0:b0:
                    c3:7b:28:50:95:05:c4:11:a8:87:b1:08:2b:b1:d3:
                    1e:4b:ee:d3:bc:df:f0:ee:81:ca:6f:ab:1a:9a:2a:
                    73:08:e4:74:ee:2e:15:43:50:63:16:dd:af:a0:54:
                    93:5e:8a:5d:02:ec:1c:9e:0a:77:63:d6:68:87:f0:
                    83:c4:37:7a:44:e5:09:e1:29:a4:01:5f:b7:b2:71:
                    54:9c:56:2c:a3:5f:6d:21:41:4f:69:59:d1:d7:f2:
                    5d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5E:81:C8:E4:97:4C:C8:0C:0F:F6:A0:8D:F9:70:0A:01:8F:1B:D9
            X509v3 Authority Key Identifier:
                keyid:1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a4:78:a2:3c:16:5a:f3:24:df:53:c1:c2:08:d6:05:1d:29:
         12:7a:fc:c0:9e:eb:b9:20:e1:2b:de:5d:de:2b:24:e8:cb:85:
         70:30:50:3a:1a:2d:24:2d:aa:a8:39:e4:9f:97:44:c0:23:62:
         7b:94:40:fd:08:04:8b:35:ef:f2:28:85:51:a6:05:fb:ed:bd:
         a2:ed:3e:aa:45:ab:7b:70:85:9b:93:27:8c:56:35:0b:51:96:
         76:2f:f4:2a:4a:27:ff:ce:e5:22:7e:39:a3:fd:4e:e3:79:97:
         3a:ba:fa:8d:78:69:f0:79:33:6a:a7:c1:b9:3b:28:87:31:bf:
         a2:ac:7b:fd:ab:62:80:ca:41:dd:c9:ed:5f:00:3d:d6:7a:3c:
         b8:49:3c:b2:dc:62:8b:f7:a9:d7:63:a9:14:35:35:40:a5:4d:
         c0:07:ec:45:ed:80:24:22:ef:ce:f8:38:78:69:58:ae:ed:1d:
         d6:6e:28:09:1f:f7:75:99:60:14:fa:3b:fe:7d:e6:b9:ab:dd:
         7e:c3:5e:d3:4e:6b:6c:a2:4e:26:ef:60:76:72:ce:b5:28:f8:
         95:7b:69:ac:23:24:f6:b0:61:b3:6f:c4:70:42:98:01:fe:9b:
         62:2c:85:0c:69:e3:47:bd:02:01:42:6c:1f:1a:5f:a6:53:5a:
         dd:7d:a7:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSoePTLVCluCA3+KXolo1ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhM2FjNmFkNjVlNWEwOTkyMDliODhiODc5Y2Y0YTA4YWYw
ODY4ZGUwHhcNMjUwNjA5MDMwMDMwWhcNMjUwNjEwMDMwMDMwWjAzMTEwLwYDVQQD
Eyg0NjVlODFjOGU0OTc0Y2M4MGMwZmY2YTA4ZGY5NzAwYTAxOGYxYmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4lpiLMPWMNo2ygnkK0Z/u4mM98R
ryCgW/SptPFIY9l3+AdNhJe4veetsifn0ML842DlJAbW+ZZzfv2fuzwfQZNpy2Ob
VAyF6JQY14hmSjFx5agaE4LvcGU6CypvVwsc2N+TcaQCOZ5U1YKaDDCMNmGXPvrk
Up01XSVhNSU6ajJrFKi/NOAro5VxeI62ZxEXRnfpaMvn4zxHI6wNW3bEkh4y0LDD
eyhQlQXEEaiHsQgrsdMeS+7TvN/w7oHKb6samipzCOR07i4VQ1BjFt2voFSTXopd
Auwcngp3Y9Zoh/CDxDd6ROUJ4SmkAV+3snFUnFYso19tIUFPaVnR1/Jd7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZegcjkl0zIDA/2oI35cAoBjxvZMB8GA1UdIwQY
MBaAFBo6xq1l5aCZIJuIuHnPSgivCGjeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2pyR3JXWGxvSmtnbTRpNGVjOUtDSzhJYU40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8yZWIyNzYtMmM3Mi00NWE5LWI5ZGUt
NzBjYmU5NjI0MWY1LzEvR2pyR3JXWGxvSmtnbTRpNGVjOUtDSzhJYU40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8yZWIyNzYtMmM3Mi00NWE5LWI5ZGUtNzBjYmU5NjI0MWY1
LzEvR2pyR3JXWGxvSmtnbTRpNGVjOUtDSzhJYU40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6R4ojwW
WvMk31PBwgjWBR0pEnr8wJ7ruSDhK95d3isk6MuFcDBQOhotJC2qqDnkn5dEwCNi
e5RA/QgEizXv8iiFUaYF++29ou0+qkWre3CFm5MnjFY1C1GWdi/0Kkon/87lIn45
o/1O43mXOrr6jXhp8HkzaqfBuTsohzG/oqx7/atigMpB3cntXwA91no8uEk8stxi
i/ep12OpFDU1QKVNwAfsRe2AJCLvzvg4eGlYru0d1m4oCR/3dZlgFPo7/n3muavd
fsNe005rbKJOJu9gdnLOtSj4lXtprCMk9rBhs2/EcEKYAf6bYiyFDGnjR70CAUJs
HxpfplNa3X2nEA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 09:02:59 2025 by rpki-client