Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
File:                     GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft (raw, json)
Hash identifier:          /YLuG5b3iLmTzLQhilKnS7F+8pQ0nUHMMQmRRnd8Ckk=
Subject key identifier:   D9:54:0E:47:78:82:97:E7:98:BA:F4:1B:FF:79:DC:5C:B6:BF:95:7C
Authority key identifier: 18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
Certificate issuer:       /CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Certificate serial:       01976F2C10FA70CEB06C967E2B2615D7CA04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
Manifest number:          1591
Signing time:             Sat 14 Jun 2025 16:00:48 +0000
Manifest this update:     Sat 14 Jun 2025 16:00:48 +0000
Manifest next update:     Sun 15 Jun 2025 16:00:48 +0000
Files and hashes:         1: GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl (hash: gfj4k3mhIJ802l9VPEmt8Pm1upYJfrR+syp86epo7Zw=)
                          2: YuDsO55F13UZ0cxSF251Oa2EzOk.roa (hash: E2zFm6YI+MUI5s6ZcM5A4TjlG7YlaadinjimTXzpUsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:10:fa:70:ce:b0:6c:96:7e:2b:26:15:d7:ca:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
        Validity
            Not Before: Jun 14 16:00:48 2025 GMT
            Not After : Jun 15 16:00:48 2025 GMT
        Subject: CN=d9540e47788297e798baf41bff79dc5cb6bf957c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9e:9f:9c:b4:cf:9c:3b:a0:ec:58:c1:d2:f2:
                    bc:d5:79:b4:47:68:04:57:a1:b3:19:f1:0f:2f:0b:
                    6b:ac:8d:58:17:81:4b:6f:01:67:13:5f:cc:e9:fb:
                    1d:a7:29:69:6a:fc:f7:6a:ba:45:04:f6:6c:e7:d5:
                    99:7e:a5:6e:bc:14:07:ba:d9:e2:e5:17:56:c9:75:
                    c6:df:d7:d0:ce:d5:21:e7:b9:8e:f7:94:b4:14:a8:
                    06:1c:20:13:f4:de:b8:9f:40:19:0f:6b:2a:d5:6c:
                    df:45:ee:79:f1:ef:75:50:6e:2a:b7:01:dd:a1:7c:
                    cc:c5:7b:fa:fc:3f:39:dd:dd:23:4f:8a:ab:f9:fc:
                    5c:0c:93:f8:25:7d:f3:4d:6b:28:24:07:2d:a9:ee:
                    9d:ea:97:a3:1b:da:6a:c2:e3:6a:fd:82:03:b2:67:
                    17:28:d1:d6:87:67:01:10:bc:b1:8c:bd:80:91:71:
                    37:1f:b4:11:e7:d0:3b:20:49:4a:ff:ae:43:57:b1:
                    8d:2c:ab:de:58:b6:34:ce:ea:f6:0d:02:f0:81:7b:
                    15:2e:c1:ff:dd:6b:a3:21:3e:18:75:f5:d2:5d:1d:
                    c7:8d:fd:33:5a:8e:03:8e:a6:46:59:af:28:fd:28:
                    4b:83:07:e9:5b:d9:11:da:61:a3:22:bc:ab:41:06:
                    cc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:54:0E:47:78:82:97:E7:98:BA:F4:1B:FF:79:DC:5C:B6:BF:95:7C
            X509v3 Authority Key Identifier:
                keyid:18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:10:2d:9d:2e:9e:19:7f:5e:a7:c4:e0:8e:9e:6c:8f:0c:d5:
         92:c1:c8:2c:9f:56:a0:3a:66:39:83:8d:b3:72:e0:3b:c4:ba:
         14:9f:9e:76:40:26:eb:b4:fa:b9:ae:d3:1d:e2:87:a7:eb:f9:
         e0:a1:62:71:a4:ce:bb:47:8f:2f:93:2f:40:5c:ed:24:10:66:
         3f:b1:43:1f:91:3a:6f:cf:b5:f3:75:3d:c5:19:19:4e:24:0a:
         b6:35:23:bd:b6:83:9a:60:2e:13:da:8f:28:ad:7c:1e:53:bd:
         74:98:60:c4:d5:ee:07:4e:eb:1c:40:9c:50:59:b8:8b:d8:f4:
         68:2e:ad:0c:40:90:60:95:1c:31:ce:c8:75:3f:b7:9f:12:62:
         43:65:7f:2a:a4:2e:db:75:fd:59:1e:33:f7:e8:c9:f3:16:33:
         3e:94:63:89:30:d2:b3:d8:58:11:33:3e:2a:da:28:00:f9:7f:
         4f:b2:03:2c:52:16:89:79:7f:27:0f:7c:ff:35:a1:a4:8e:06:
         67:53:34:41:5e:0c:e3:10:b1:d9:7b:4f:81:87:30:0d:92:ec:
         e7:75:d2:1d:58:8d:5c:2f:36:8e:e4:92:be:ce:1d:18:a1:df:
         d4:22:93:63:39:78:0a:f8:ea:f7:1f:c7:58:15:9f:b4:d5:b2:
         4c:8e:fc:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLBD6cM6wbJZ+KyYV18oEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OTk0N2E5YTVkODhjYzYyY2M4OTgyNjhmMmJjYWZkNmE3
ZmZjNWIwHhcNMjUwNjE0MTYwMDQ4WhcNMjUwNjE1MTYwMDQ4WjAzMTEwLwYDVQQD
EyhkOTU0MGU0Nzc4ODI5N2U3OThiYWY0MWJmZjc5ZGM1Y2I2YmY5NTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy56fnLTPnDug7FjB0vK81Xm0R2gE
V6GzGfEPLwtrrI1YF4FLbwFnE1/M6fsdpylpavz3arpFBPZs59WZfqVuvBQHutni
5RdWyXXG39fQztUh57mO95S0FKgGHCAT9N64n0AZD2sq1WzfRe558e91UG4qtwHd
oXzMxXv6/D853d0jT4qr+fxcDJP4JX3zTWsoJActqe6d6pejG9pqwuNq/YIDsmcX
KNHWh2cBELyxjL2AkXE3H7QR59A7IElK/65DV7GNLKveWLY0zur2DQLwgXsVLsH/
3WujIT4YdfXSXR3Hjf0zWo4DjqZGWa8o/ShLgwfpW9kR2mGjIryrQQbMBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlUDkd4gpfnmLr0G/953Fy2v5V8MB8GA1UdIwQY
MBaAFBiZR6ml2IzGLMiYJo8ryv1qf/xbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0psSHFhWFlqTVlzeUpnbWp5dktfV3BfX0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83MjlmOTItNWYwMy00MTU4LTkwYWMt
NmQ0MjhmMWMxNWZkLzEvR0psSHFhWFlqTVlzeUpnbWp5dktfV3BfX0ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS83MjlmOTItNWYwMy00MTU4LTkwYWMtNmQ0MjhmMWMxNWZk
LzEvR0psSHFhWFlqTVlzeUpnbWp5dktfV3BfX0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhRAtnS6e
GX9ep8Tgjp5sjwzVksHILJ9WoDpmOYONs3LgO8S6FJ+edkAm67T6ua7THeKHp+v5
4KFicaTOu0ePL5MvQFztJBBmP7FDH5E6b8+183U9xRkZTiQKtjUjvbaDmmAuE9qP
KK18HlO9dJhgxNXuB07rHECcUFm4i9j0aC6tDECQYJUcMc7IdT+3nxJiQ2V/KqQu
23X9WR4z9+jJ8xYzPpRjiTDSs9hYETM+KtooAPl/T7IDLFIWiXl/Jw98/zWhpI4G
Z1M0QV4M4xCx2XtPgYcwDZLs53XSHViNXC82juSSvs4dGKHf1CKTYzl4Cvjq9x/H
WBWftNWyTI78rQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 20:34:25 2025 by rpki-client