Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
File:                     Ghrl5JpEq93CKwrb2utkE28l1Gc.mft (raw, json)
Hash identifier:          KEB8gvwO6jzq8sGf0iWMoff2LRUnHGu6Y/RmuumD/Zw=
Subject key identifier:   DE:F4:28:4C:C6:8C:4E:9E:52:A9:1E:47:BA:7B:1F:8F:7F:FD:42:51
Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
Certificate issuer:       /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Certificate serial:       019765164655C54196A7E0CB09914BBE3458
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
Manifest number:          0EC4
Signing time:             Thu 12 Jun 2025 17:00:47 +0000
Manifest this update:     Thu 12 Jun 2025 17:00:47 +0000
Manifest next update:     Fri 13 Jun 2025 17:00:47 +0000
Files and hashes:         1: Ghrl5JpEq93CKwrb2utkE28l1Gc.crl (hash: wo1v3b5zv/lKLoksHB2Ji7nCynJuXtcPz9xpQ9PyF/M=)
                          2: cpGnORo3FcHj_TQuxkaI5d8-w2U.roa (hash: hr4lcfbe0GAfc4/2SJSUkjFlt5FSFur5fxO2G8Z/U5w=)
                          3: yCCi69gLNcXK21OeYiQEc0dJYb0.roa (hash: LUDNYecqqadlSSLSMwizFinS+Qyhum1Iomno4/Dzf7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:16:46:55:c5:41:96:a7:e0:cb:09:91:4b:be:34:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
        Validity
            Not Before: Jun 12 17:00:47 2025 GMT
            Not After : Jun 13 17:00:47 2025 GMT
        Subject: CN=def4284cc68c4e9e52a91e47ba7b1f8f7ffd4251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d6:23:0f:85:0b:ba:36:f4:d0:40:8d:fa:b3:
                    9f:54:48:d0:e7:d6:10:76:3c:a1:38:1d:0a:0c:ac:
                    f3:cc:9f:13:ea:1c:89:4b:e5:61:46:07:67:67:b2:
                    24:eb:14:ef:fc:ce:d5:82:c1:bd:73:67:6d:11:c3:
                    2a:83:c5:90:ab:34:b2:9f:bd:e7:76:55:7d:c8:05:
                    ae:94:36:0c:8e:2a:8e:28:59:f6:d1:17:53:53:94:
                    ae:6a:b9:12:2d:27:4f:8d:a6:a3:44:ac:30:9b:c0:
                    f0:16:7f:3a:7a:dd:a9:dd:15:3c:ec:11:56:f5:df:
                    1c:a4:53:4f:b4:0f:10:c8:49:23:88:f8:57:7e:9f:
                    5e:b3:ca:bb:e6:b3:cf:e9:75:48:a6:72:d5:a3:0e:
                    c1:4b:47:f0:29:e8:a3:25:de:58:5d:30:73:5c:99:
                    a9:0e:fc:7b:3b:c5:b2:13:96:35:c1:7c:46:c9:63:
                    36:91:71:4c:e2:66:00:6d:66:8c:71:0c:ac:b1:96:
                    59:3c:96:98:07:de:1c:4d:d2:fb:21:b1:9b:82:58:
                    37:27:1c:fa:11:a5:e8:88:48:61:1f:fb:c7:49:60:
                    d3:73:3b:90:ff:36:50:27:fb:10:2a:8b:af:07:bf:
                    9a:7c:29:27:85:eb:39:bb:33:e8:4b:0a:69:63:91:
                    1d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F4:28:4C:C6:8C:4E:9E:52:A9:1E:47:BA:7B:1F:8F:7F:FD:42:51
            X509v3 Authority Key Identifier:
                keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:25:8b:2e:10:e7:92:9a:21:d5:45:f1:4f:92:66:df:31:b6:
         0b:ce:db:d5:7d:77:0a:2c:df:36:e4:d5:4f:53:e2:bf:ae:af:
         fe:40:ed:b8:ff:07:21:df:b4:e2:98:9b:1f:c2:c6:dc:a3:32:
         d9:8c:8a:2a:34:65:ca:ef:f9:ea:d2:3f:0d:94:2a:71:09:01:
         7e:f3:c0:39:6d:c8:18:55:11:61:39:80:d0:18:9c:4c:85:15:
         f4:32:e8:5f:30:7d:a9:1b:94:a8:f8:12:a3:bd:c2:d2:13:95:
         9e:e5:7f:4d:4a:fe:8f:b7:9e:7d:52:97:4b:d9:ac:29:6f:17:
         c1:53:e3:9d:c2:c6:d2:85:97:48:05:e6:1c:4f:84:86:bd:86:
         5d:2c:e6:1e:28:20:f9:08:8c:b8:16:93:91:01:9a:91:90:14:
         c1:97:f4:92:99:04:a7:e1:85:61:77:47:2a:e6:0d:59:30:f0:
         f3:d1:03:24:d9:7f:74:d0:dd:a4:e9:10:da:ac:8f:01:c3:97:
         13:80:28:14:ce:9a:1d:51:ea:3d:1d:19:e4:15:15:a3:1a:92:
         7e:4e:10:6c:de:b5:66:68:f5:b3:b6:06:fc:f1:b4:12:e3:55:
         52:72:a9:48:d9:cf:ac:e5:43:c2:c4:86:28:40:19:11:2f:b3:
         cc:bc:19:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdlFkZVxUGWp+DLCZFLvjRYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMWFlNWU0OWE0NGFiZGRjMjJiMGFkYmRhZWI2NDEzNmYy
NWQ0NjcwHhcNMjUwNjEyMTcwMDQ3WhcNMjUwNjEzMTcwMDQ3WjAzMTEwLwYDVQQD
EyhkZWY0Mjg0Y2M2OGM0ZTllNTJhOTFlNDdiYTdiMWY4ZjdmZmQ0MjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9YjD4ULujb00ECN+rOfVEjQ59YQ
djyhOB0KDKzzzJ8T6hyJS+VhRgdnZ7Ik6xTv/M7VgsG9c2dtEcMqg8WQqzSyn73n
dlV9yAWulDYMjiqOKFn20RdTU5SuarkSLSdPjaajRKwwm8DwFn86et2p3RU87BFW
9d8cpFNPtA8QyEkjiPhXfp9es8q75rPP6XVIpnLVow7BS0fwKeijJd5YXTBzXJmp
Dvx7O8WyE5Y1wXxGyWM2kXFM4mYAbWaMcQyssZZZPJaYB94cTdL7IbGbglg3Jxz6
EaXoiEhhH/vHSWDTczuQ/zZQJ/sQKouvB7+afCknhes5uzPoSwppY5EddwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN70KEzGjE6eUqkeR7p7H49//UJRMB8GA1UdIwQY
MBaAFBoa5eSaRKvdwisK29rrZBNvJdRnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2hybDVKcEVxOTNDS3dyYjJ1dGtFMjhsMUdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85OWRjY2EtOTYzYS00MDAzLWJmYWYt
YTExNjlhMjg5YzU0LzEvR2hybDVKcEVxOTNDS3dyYjJ1dGtFMjhsMUdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85OWRjY2EtOTYzYS00MDAzLWJmYWYtYTExNjlhMjg5YzU0
LzEvR2hybDVKcEVxOTNDS3dyYjJ1dGtFMjhsMUdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALSWLLhDn
kpoh1UXxT5Jm3zG2C87b1X13CizfNuTVT1Piv66v/kDtuP8HId+04pibH8LG3KMy
2YyKKjRlyu/56tI/DZQqcQkBfvPAOW3IGFURYTmA0BicTIUV9DLoXzB9qRuUqPgS
o73C0hOVnuV/TUr+j7eefVKXS9msKW8XwVPjncLG0oWXSAXmHE+Ehr2GXSzmHigg
+QiMuBaTkQGakZAUwZf0kpkEp+GFYXdHKuYNWTDw89EDJNl/dNDdpOkQ2qyPAcOX
E4AoFM6aHVHqPR0Z5BUVoxqSfk4QbN61Zmj1s7YG/PG0EuNVUnKpSNnPrOVDwsSG
KEAZES+zzLwZhQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 22:05:34 2025 by rpki-client