Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
File:                     GJiU_9B_W6Edxlvzj9lexByK944.mft (raw, json)
Hash identifier:          VEs74Kk+Eeywrz6QRlyLhU3GmpNwdYRMVGluotPRK4o=
Subject key identifier:   57:E9:DC:F7:96:0E:1C:2E:03:B8:1D:C5:D6:BF:33:27:4B:D5:7D:17
Authority key identifier: 18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E
Certificate issuer:       /CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
Certificate serial:       0196C04B28DDD83CAD81CB78FF5AC7A6923E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
Manifest number:          126E
Signing time:             Sun 11 May 2025 17:01:13 +0000
Manifest this update:     Sun 11 May 2025 17:01:13 +0000
Manifest next update:     Mon 12 May 2025 17:01:13 +0000
Files and hashes:         1: GJiU_9B_W6Edxlvzj9lexByK944.crl (hash: AmzCGsguzswC4ZlRsDNU1eUlQ4pZMEDxq7T68AllpEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:4b:28:dd:d8:3c:ad:81:cb:78:ff:5a:c7:a6:92:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
        Validity
            Not Before: May 11 17:01:13 2025 GMT
            Not After : May 12 17:01:13 2025 GMT
        Subject: CN=57e9dcf7960e1c2e03b81dc5d6bf33274bd57d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bc:e9:6a:86:be:69:f8:4f:a9:8f:c2:9a:9f:
                    e9:1f:f4:a2:56:91:89:18:cd:a5:51:5b:ae:66:f2:
                    3c:10:8d:13:cc:8c:a6:0f:b1:00:5e:73:ac:94:e9:
                    92:35:c9:12:a8:3c:78:80:7a:f0:91:7d:d1:b8:2c:
                    86:da:37:43:76:a5:b2:23:a7:f9:90:ea:79:d7:29:
                    03:1a:95:18:7b:c4:38:c2:71:8d:eb:1a:75:4b:23:
                    9e:ef:2b:28:a9:ae:0b:9c:a8:1b:a0:e7:7c:05:d0:
                    ee:a5:0c:9e:7e:d3:95:56:11:6b:a3:70:2e:26:08:
                    77:f5:63:7e:4c:83:42:4c:0c:9c:f5:e6:dc:2e:05:
                    26:5f:f5:dd:45:8e:79:47:fa:d2:d8:7f:4e:a3:72:
                    11:8c:2d:04:63:f3:08:30:6b:14:07:a0:65:7b:da:
                    ec:f4:a6:9d:d7:53:2c:4f:f2:08:fc:61:b9:99:74:
                    67:26:52:56:b4:7d:fe:c3:2e:8f:cb:41:f2:33:93:
                    27:99:64:3b:6c:ce:ef:70:16:3e:7e:bd:bb:d7:13:
                    28:26:0f:c7:a4:da:ed:48:f5:8b:1e:1f:b4:73:0f:
                    fe:b3:62:c5:c9:99:c0:76:4a:fa:ae:b4:e0:69:4e:
                    8f:3a:50:7f:ff:bd:50:90:f2:08:c2:ae:6a:ec:38:
                    5e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E9:DC:F7:96:0E:1C:2E:03:B8:1D:C5:D6:BF:33:27:4B:D5:7D:17
            X509v3 Authority Key Identifier:
                keyid:18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:75:37:c7:4c:cc:e9:1a:a1:eb:f2:4a:60:e5:88:5a:ed:e5:
         de:1d:65:d6:ca:85:24:6a:58:02:aa:a4:eb:c3:d0:84:ec:9d:
         40:ae:10:09:13:1e:45:21:02:91:e4:85:e2:6b:ce:55:50:6f:
         f2:26:ec:01:08:d1:5e:58:37:f5:60:94:87:56:e2:f7:ea:f4:
         7c:f9:cc:a7:00:b3:42:1f:7f:a2:47:10:ce:eb:cb:70:a2:56:
         2e:89:be:38:2c:c5:05:e8:e5:3d:86:de:7e:f5:3b:50:4b:87:
         00:d5:d1:ab:ae:4a:1a:49:2b:a3:2c:2e:3a:c3:4d:de:aa:c9:
         23:38:01:fd:8c:d7:bf:19:97:3c:94:bd:c5:74:fc:17:1f:26:
         8a:01:d3:84:75:7b:fe:a4:7d:22:62:15:69:81:db:34:c6:0f:
         49:be:67:9b:23:5c:e2:6a:4f:d3:5b:45:05:9a:d0:e9:23:02:
         16:67:b8:b0:87:e0:83:26:f2:0c:c3:bc:22:89:c1:b8:3a:9f:
         08:9b:36:0b:b0:28:b5:ee:3f:a9:05:6e:d6:19:97:63:b5:06:
         4d:7a:b5:42:79:26:59:e6:12:b7:f6:ac:e0:f0:67:3d:5b:70:
         50:94:11:aa:fa:57:2e:dd:19:2a:64:85:0b:21:08:6d:c5:a4:
         6d:76:fc:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbASyjd2Dytgct4/1rHppI+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OTg5NGZmZDA3ZjViYTExZGM2NWJmMzhmZDk1ZWM0MWM4
YWY3OGUwHhcNMjUwNTExMTcwMTEzWhcNMjUwNTEyMTcwMTEzWjAzMTEwLwYDVQQD
Eyg1N2U5ZGNmNzk2MGUxYzJlMDNiODFkYzVkNmJmMzMyNzRiZDU3ZDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7zpaoa+afhPqY/Cmp/pH/SiVpGJ
GM2lUVuuZvI8EI0TzIymD7EAXnOslOmSNckSqDx4gHrwkX3RuCyG2jdDdqWyI6f5
kOp51ykDGpUYe8Q4wnGN6xp1SyOe7ysoqa4LnKgboOd8BdDupQyeftOVVhFro3Au
Jgh39WN+TINCTAyc9ebcLgUmX/XdRY55R/rS2H9Oo3IRjC0EY/MIMGsUB6Ble9rs
9Kad11MsT/II/GG5mXRnJlJWtH3+wy6Py0HyM5MnmWQ7bM7vcBY+fr271xMoJg/H
pNrtSPWLHh+0cw/+s2LFyZnAdkr6rrTgaU6POlB//71QkPIIwq5q7DheewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfp3PeWDhwuA7gdxda/MydL1X0XMB8GA1UdIwQY
MBaAFBiYlP/Qf1uhHcZb84/ZXsQciveOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0ppVV85Ql9XNkVkeGx2emo5bGV4QnlLOTQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81MjM0NzMtMWZlMC00ZTdlLTk0NTUt
Y2NjOWIzMzdjY2EwLzEvR0ppVV85Ql9XNkVkeGx2emo5bGV4QnlLOTQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi81MjM0NzMtMWZlMC00ZTdlLTk0NTUtY2NjOWIzMzdjY2Ew
LzEvR0ppVV85Ql9XNkVkeGx2emo5bGV4QnlLOTQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0nU3x0zM
6Rqh6/JKYOWIWu3l3h1l1sqFJGpYAqqk68PQhOydQK4QCRMeRSECkeSF4mvOVVBv
8ibsAQjRXlg39WCUh1bi9+r0fPnMpwCzQh9/okcQzuvLcKJWLom+OCzFBejlPYbe
fvU7UEuHANXRq65KGkkroywuOsNN3qrJIzgB/YzXvxmXPJS9xXT8Fx8migHThHV7
/qR9ImIVaYHbNMYPSb5nmyNc4mpP01tFBZrQ6SMCFme4sIfggybyDMO8IonBuDqf
CJs2C7Aote4/qQVu1hmXY7UGTXq1QnkmWeYSt/as4PBnPVtwUJQRqvpXLt0ZKmSF
CyEIbcWkbXb8rQ==
-----END CERTIFICATE-----
Generated at Sun May 11 18:58:19 2025 by rpki-client