Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
File:                     Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft (raw, json)
Hash identifier:          +q9J4666Zs+k22dJPq3GsC8PXVksN2qj23xLWfsm8K8=
Subject key identifier:   03:7B:11:F2:34:30:A3:EE:C7:63:EC:37:C1:85:5E:18:56:D5:DF:75
Authority key identifier: 1A:5B:7D:43:BB:4C:83:E7:C7:D9:7C:E0:75:43:A9:6D:74:C6:9F:DA
Certificate issuer:       /CN=1a5b7d43bb4c83e7c7d97ce07543a96d74c69fda
Certificate serial:       0196C3B9DA289EA8DE555554248439B3CB80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
Manifest number:          0F75
Signing time:             Mon 12 May 2025 09:00:59 +0000
Manifest this update:     Mon 12 May 2025 09:00:59 +0000
Manifest next update:     Tue 13 May 2025 09:00:59 +0000
Files and hashes:         1: Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl (hash: y/xnkBbKrR7TP6lJqsLiefdUj3US7p6FltseUczo70w=)
                          2: H0COiaXg1EPyNKPDom-EUSSKISY.roa (hash: MIq94Fsgw9khyXovQNvHuap+wuDPe/60Pb4JAxZUi4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 09:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:b9:da:28:9e:a8:de:55:55:54:24:84:39:b3:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5b7d43bb4c83e7c7d97ce07543a96d74c69fda
        Validity
            Not Before: May 12 09:00:59 2025 GMT
            Not After : May 13 09:00:59 2025 GMT
        Subject: CN=037b11f23430a3eec763ec37c1855e1856d5df75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ae:f6:85:1c:07:48:ee:e1:b3:c4:b5:b2:4f:
                    eb:73:58:38:f6:19:34:83:a8:a5:91:72:b2:b5:ff:
                    3d:bf:b1:c8:f4:09:09:bb:1b:46:7c:f6:43:f5:ab:
                    db:3d:5d:e8:56:dc:61:d6:c2:27:d1:18:a0:12:76:
                    7e:d7:69:84:95:df:02:df:a1:20:a2:c5:3f:b2:16:
                    cb:32:9b:6c:3d:f4:5b:d4:cf:a1:97:c7:67:02:e3:
                    f7:a2:19:25:ec:5e:b6:9b:4f:20:59:be:89:95:51:
                    ba:b0:ea:8e:cf:de:11:80:e8:2d:dc:83:ad:2d:54:
                    51:64:bf:d4:c9:a4:4d:33:ca:b6:ea:55:43:4e:f2:
                    94:e0:5d:5b:06:fb:d4:c2:95:76:c5:a1:c4:cc:55:
                    43:57:e7:4b:fb:dd:a1:07:0d:a7:c7:03:5c:a6:68:
                    17:1a:a9:49:63:e5:57:10:0b:94:e2:ae:5b:27:39:
                    87:0f:0b:af:20:86:4e:9f:5a:1f:93:5d:89:ed:80:
                    dd:a3:2c:c2:a1:ec:b7:6e:38:11:05:f0:c7:27:f9:
                    46:3e:55:ed:de:70:02:8f:79:2d:24:ac:d2:4e:2f:
                    3a:86:2a:12:ca:72:19:3a:86:4f:7a:48:8b:13:e4:
                    e0:34:5c:16:54:68:2e:a7:ec:ac:c2:9b:19:e7:43:
                    48:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7B:11:F2:34:30:A3:EE:C7:63:EC:37:C1:85:5E:18:56:D5:DF:75
            X509v3 Authority Key Identifier:
                keyid:1A:5B:7D:43:BB:4C:83:E7:C7:D9:7C:E0:75:43:A9:6D:74:C6:9F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:c0:5d:39:24:6a:48:bb:b4:4f:44:c3:a5:36:aa:2b:45:64:
         1a:ef:6e:f2:68:44:1f:c6:a7:f4:0a:a7:17:5e:f1:45:56:47:
         a5:39:9a:e2:e2:b8:03:6c:66:6b:80:6d:b5:42:0c:3b:b7:b3:
         35:8c:14:44:68:9a:e8:2c:00:30:63:61:83:c1:d0:06:7b:03:
         28:a9:e0:35:a6:16:1b:a1:8e:de:89:3d:5b:f5:3b:eb:9c:c5:
         69:a4:50:3d:04:3f:85:80:26:ab:15:ec:79:cc:22:f9:1c:51:
         7c:d1:4e:20:57:8e:d9:a8:4a:d0:ff:5e:0f:e0:e7:3e:e2:fe:
         5b:3a:f1:59:8e:e3:96:7d:b2:15:f1:8e:d8:51:bb:44:01:d5:
         8a:e5:d1:19:c8:9e:1c:5c:60:a5:b9:cc:d1:7f:22:ce:4d:e0:
         11:9a:54:d5:1d:54:7c:a6:ef:ae:80:76:d2:3c:8c:80:9a:72:
         29:08:43:c5:ae:f4:65:3d:6a:9b:2c:39:f4:43:30:8f:c4:a6:
         22:ab:14:fb:f6:c7:8c:6c:f1:04:99:c0:60:77:8a:8d:80:c4:
         59:7c:7b:3d:c4:53:54:6e:b9:43:ad:04:3a:9f:4c:d6:bb:b0:
         09:a7:93:38:2b:de:81:f6:77:2e:9e:53:b2:78:09:1f:ea:a8:
         e1:b2:a1:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDudoonqjeVVVUJIQ5s8uAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNWI3ZDQzYmI0YzgzZTdjN2Q5N2NlMDc1NDNhOTZkNzRj
NjlmZGEwHhcNMjUwNTEyMDkwMDU5WhcNMjUwNTEzMDkwMDU5WjAzMTEwLwYDVQQD
EygwMzdiMTFmMjM0MzBhM2VlYzc2M2VjMzdjMTg1NWUxODU2ZDVkZjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK72hRwHSO7hs8S1sk/rc1g49hk0
g6ilkXKytf89v7HI9AkJuxtGfPZD9avbPV3oVtxh1sIn0RigEnZ+12mEld8C36Eg
osU/shbLMptsPfRb1M+hl8dnAuP3ohkl7F62m08gWb6JlVG6sOqOz94RgOgt3IOt
LVRRZL/UyaRNM8q26lVDTvKU4F1bBvvUwpV2xaHEzFVDV+dL+92hBw2nxwNcpmgX
GqlJY+VXEAuU4q5bJzmHDwuvIIZOn1ofk12J7YDdoyzCoey3bjgRBfDHJ/lGPlXt
3nACj3ktJKzSTi86hioSynIZOoZPekiLE+TgNFwWVGgup+yswpsZ50NIAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAN7EfI0MKPux2PsN8GFXhhW1d91MB8GA1UdIwQY
MBaAFBpbfUO7TIPnx9l84HVDqW10xp/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2x0OVE3dE1nLWZIMlh6Z2RVT3BiWFRHbjlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC84YWQ2NGEtMDU3Zi00NzJhLTg5YjEt
NWVlZjAyNGQ5YTkyLzEvR2x0OVE3dE1nLWZIMlh6Z2RVT3BiWFRHbjlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC84YWQ2NGEtMDU3Zi00NzJhLTg5YjEtNWVlZjAyNGQ5YTky
LzEvR2x0OVE3dE1nLWZIMlh6Z2RVT3BiWFRHbjlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcBdOSRq
SLu0T0TDpTaqK0VkGu9u8mhEH8an9AqnF17xRVZHpTma4uK4A2xma4BttUIMO7ez
NYwURGia6CwAMGNhg8HQBnsDKKngNaYWG6GO3ok9W/U765zFaaRQPQQ/hYAmqxXs
ecwi+RxRfNFOIFeO2ahK0P9eD+DnPuL+WzrxWY7jln2yFfGO2FG7RAHViuXRGcie
HFxgpbnM0X8izk3gEZpU1R1UfKbvroB20jyMgJpyKQhDxa70ZT1qmyw59EMwj8Sm
IqsU+/bHjGzxBJnAYHeKjYDEWXx7PcRTVG65Q60EOp9M1ruwCaeTOCvegfZ3Lp5T
sngJH+qo4bKh8g==
-----END CERTIFICATE-----
Generated at Mon May 12 19:07:05 2025 by rpki-client