Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft
File:                     GLbl-LQJfB26dKICIGFFk5_x4do.mft (raw, json)
Hash identifier:          4JypKPo8Q6BCh59dZ/IaIyWKUy1QDRJvoiqTiQfm0Wc=
Subject key identifier:   09:11:25:62:BA:B1:8F:EB:DF:69:67:BE:4C:2F:D1:B2:FF:32:54:BC
Authority key identifier: 18:B6:E5:F8:B4:09:7C:1D:BA:74:A2:02:20:61:45:93:9F:F1:E1:DA
Certificate issuer:       /CN=18b6e5f8b4097c1dba74a202206145939ff1e1da
Certificate serial:       01958B16B80CC4D5FF29163506B990646CEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft
Manifest number:          0E90
Signing time:             Wed 12 Mar 2025 16:01:16 +0000
Manifest this update:     Wed 12 Mar 2025 16:01:16 +0000
Manifest next update:     Thu 13 Mar 2025 16:01:16 +0000
Files and hashes:         1: GLbl-LQJfB26dKICIGFFk5_x4do.crl (hash: WH+XEpzZ5HqaIbJQcqsIdwasZuVD5SXGFTX6lCn+e0E=)
                          2: HBHAqT8jajsD1nwf_6k2IJVgvHo.roa (hash: Y84KjLE8NtO9vOG8nx25z9ZTKrfTK1iHhME9/Rj/s64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 16:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:16:b8:0c:c4:d5:ff:29:16:35:06:b9:90:64:6c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18b6e5f8b4097c1dba74a202206145939ff1e1da
        Validity
            Not Before: Mar 12 16:01:16 2025 GMT
            Not After : Mar 13 16:01:16 2025 GMT
        Subject: CN=09112562bab18febdf6967be4c2fd1b2ff3254bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0f:37:79:ef:96:df:32:36:60:ba:4e:6e:e1:
                    6e:39:b5:32:a1:00:c3:52:1c:d8:d0:80:34:4d:dd:
                    0b:9f:b3:ea:1a:fc:db:26:87:aa:30:cc:0c:c8:d8:
                    51:45:8e:74:6c:03:c3:b6:24:04:d9:9d:39:5d:df:
                    5e:79:c8:a4:41:87:9e:39:2c:53:a4:26:35:54:f3:
                    71:a2:4b:85:38:7c:e5:ae:b9:91:e7:42:dd:4d:ee:
                    8c:c5:0e:2e:89:54:2e:68:39:e3:73:a8:6d:45:9e:
                    28:51:de:9d:83:26:7c:07:41:b1:e5:b0:5b:c2:87:
                    3b:6b:1e:7f:28:dd:f7:d0:6e:18:13:b6:5f:0a:c4:
                    d3:d1:c6:ab:03:2f:f9:4f:57:56:95:c6:d3:af:1a:
                    14:5c:cd:fb:39:b3:6a:a7:15:a4:f3:95:9e:32:f4:
                    b0:08:6b:f0:e5:b1:d1:c1:fd:23:27:a2:6b:f0:db:
                    e5:48:49:dc:ea:05:8e:54:2d:62:9b:b1:49:dd:f3:
                    51:90:77:d8:bd:dd:9a:76:bd:55:ac:d3:46:d1:2c:
                    31:b9:e9:8b:20:45:41:40:51:1a:7f:1b:fd:db:86:
                    a5:50:1a:7b:59:a2:2c:65:c0:87:72:fb:8d:0c:5a:
                    10:0f:69:02:5f:e8:34:f8:03:8b:73:80:be:c0:e6:
                    d2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:11:25:62:BA:B1:8F:EB:DF:69:67:BE:4C:2F:D1:B2:FF:32:54:BC
            X509v3 Authority Key Identifier:
                keyid:18:B6:E5:F8:B4:09:7C:1D:BA:74:A2:02:20:61:45:93:9F:F1:E1:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:2e:42:b1:b2:d1:51:36:e6:38:cb:92:cb:51:ae:ae:a7:8d:
         72:ed:6c:38:c2:66:9a:9b:d8:82:c0:d9:a7:9d:83:8a:00:f6:
         69:9e:df:15:c0:10:d7:be:e2:6b:aa:26:eb:17:1f:73:71:7d:
         2c:b4:d0:1f:21:ad:dd:8c:39:38:62:9f:81:bb:1d:e6:3a:b8:
         85:5b:b0:9e:34:d9:52:86:9f:5e:1f:b8:29:9a:1e:a5:cb:16:
         43:82:a4:73:65:d8:ff:a3:9b:65:74:fd:c3:d1:61:a3:79:a5:
         88:4f:b2:69:5f:12:98:b9:5f:b3:47:a8:45:ee:94:3a:c1:ef:
         33:50:ac:ad:ca:44:8c:ce:ef:79:00:87:13:3a:99:ec:d4:01:
         79:16:52:d0:4b:26:c7:a3:a7:c3:a7:e0:6a:2d:7e:60:8f:29:
         85:aa:99:82:12:39:e5:15:fd:f1:3f:84:5f:9e:ef:c7:12:e0:
         8c:5f:7b:5d:05:84:93:5b:9d:2e:ec:4f:f6:81:36:79:c0:9f:
         3f:41:ed:ac:70:de:92:7b:fd:b2:06:e9:63:9f:7e:c1:9b:cd:
         df:37:62:c7:ee:97:85:be:54:5c:91:fc:e7:e0:63:a1:7a:5f:
         4e:07:10:88:90:a4:a6:e8:0e:7d:37:b3:6e:8d:1d:e4:75:52:
         ce:8a:b5:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLFrgMxNX/KRY1BrmQZGzrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YjZlNWY4YjQwOTdjMWRiYTc0YTIwMjIwNjE0NTkzOWZm
MWUxZGEwHhcNMjUwMzEyMTYwMTE2WhcNMjUwMzEzMTYwMTE2WjAzMTEwLwYDVQQD
EygwOTExMjU2MmJhYjE4ZmViZGY2OTY3YmU0YzJmZDFiMmZmMzI1NGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w83ee+W3zI2YLpObuFuObUyoQDD
UhzY0IA0Td0Ln7PqGvzbJoeqMMwMyNhRRY50bAPDtiQE2Z05Xd9eecikQYeeOSxT
pCY1VPNxokuFOHzlrrmR50LdTe6MxQ4uiVQuaDnjc6htRZ4oUd6dgyZ8B0Gx5bBb
woc7ax5/KN330G4YE7ZfCsTT0carAy/5T1dWlcbTrxoUXM37ObNqpxWk85WeMvSw
CGvw5bHRwf0jJ6Jr8NvlSEnc6gWOVC1im7FJ3fNRkHfYvd2adr1VrNNG0SwxuemL
IEVBQFEafxv924alUBp7WaIsZcCHcvuNDFoQD2kCX+g0+AOLc4C+wObS3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkRJWK6sY/r32lnvkwv0bL/MlS8MB8GA1UdIwQY
MBaAFBi25fi0CXwdunSiAiBhRZOf8eHaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0xibC1MUUpmQjI2ZEtJQ0lHRkZrNV94NGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83MzE2MGQtMTcxNC00NGYyLTliZTQt
YTdkNDI1M2IyNzFmLzEvR0xibC1MUUpmQjI2ZEtJQ0lHRkZrNV94NGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83MzE2MGQtMTcxNC00NGYyLTliZTQtYTdkNDI1M2IyNzFm
LzEvR0xibC1MUUpmQjI2ZEtJQ0lHRkZrNV94NGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEC5CsbLR
UTbmOMuSy1GurqeNcu1sOMJmmpvYgsDZp52DigD2aZ7fFcAQ177ia6om6xcfc3F9
LLTQHyGt3Yw5OGKfgbsd5jq4hVuwnjTZUoafXh+4KZoepcsWQ4Kkc2XY/6ObZXT9
w9Fho3mliE+yaV8SmLlfs0eoRe6UOsHvM1CsrcpEjM7veQCHEzqZ7NQBeRZS0Esm
x6Onw6fgai1+YI8phaqZghI55RX98T+EX57vxxLgjF97XQWEk1udLuxP9oE2ecCf
P0HtrHDeknv9sgbpY59+wZvN3zdix+6Xhb5UXJH85+BjoXpfTgcQiJCkpugOfTez
bo0d5HVSzoq1HA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:07 2025 by rpki-client