Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft
File:                     GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft (raw, json)
Hash identifier:          QFRDIT8wQ4f4G9M0f/yoTf4z4nj8PSeBcxW4JjOZBys=
Subject key identifier:   86:B4:78:4E:09:83:5E:96:7C:4E:95:1E:97:13:6F:DD:58:B0:F0:35
Authority key identifier: 19:13:CB:48:56:82:1D:14:CD:2E:0B:76:7C:29:31:A2:2C:15:4E:7C
Certificate issuer:       /CN=1913cb4856821d14cd2e0b767c2931a22c154e7c
Certificate serial:       0196A465C053135AE0D33B6061AC2F530DF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRPLSFaCHRTNLgt2fCkxoiwVTnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft
Manifest number:          09B6
Signing time:             Tue 06 May 2025 07:00:53 +0000
Manifest this update:     Tue 06 May 2025 07:00:53 +0000
Manifest next update:     Wed 07 May 2025 07:00:53 +0000
Files and hashes:         1: GRPLSFaCHRTNLgt2fCkxoiwVTnw.crl (hash: 8b6eq3WqhdPgId+Yy1rV7IQLPOrttHPZDzPyhRGnOOU=)
                          2: zvde-1FktXCEIRB3FHyBiaah4JI.roa (hash: 6R+oudRdqFBVe7OQ/+aXtal9Y8TCWwoFCMfYuyQJNpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRPLSFaCHRTNLgt2fCkxoiwVTnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a4:65:c0:53:13:5a:e0:d3:3b:60:61:ac:2f:53:0d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1913cb4856821d14cd2e0b767c2931a22c154e7c
        Validity
            Not Before: May  6 07:00:53 2025 GMT
            Not After : May  7 07:00:53 2025 GMT
        Subject: CN=86b4784e09835e967c4e951e97136fdd58b0f035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d8:d6:be:fa:5b:2e:58:74:53:47:90:5f:86:
                    c8:49:bb:8e:8f:83:21:0d:7b:95:95:65:de:96:8e:
                    dc:7a:db:e0:0b:da:35:b9:c6:f4:a0:19:d0:91:49:
                    89:7d:1e:15:65:eb:2e:86:f7:06:38:8b:1b:4d:a1:
                    12:15:bf:c7:e0:fb:19:86:4a:e0:30:39:a3:76:89:
                    4e:08:e0:da:c6:01:e9:9d:b9:35:c1:bd:ae:da:72:
                    36:4c:60:97:35:63:9d:ab:db:ef:1e:fd:fa:ca:e4:
                    a4:66:3a:3f:1d:e4:c0:f1:71:27:2c:cd:8a:f9:5f:
                    63:ec:65:14:f3:a5:7a:99:a2:d8:9d:52:4b:87:b5:
                    9d:c8:3b:f8:ac:b5:93:3e:c8:f4:f3:d5:80:30:89:
                    9d:ea:81:1d:cd:33:aa:02:96:b7:f8:77:69:cd:b0:
                    1a:1e:e6:f0:a4:86:29:8b:4e:67:ba:9b:fa:1b:5e:
                    ca:5f:db:1d:22:20:11:97:9d:1d:e0:c4:94:e3:03:
                    ab:60:e4:a6:2b:2c:11:88:7c:aa:a9:d3:13:9c:79:
                    b0:78:c5:f5:4b:f7:7e:50:2b:13:cb:c8:39:08:f4:
                    9e:16:6a:e1:62:8f:bb:4c:e4:5b:80:42:c0:fc:db:
                    a4:74:2e:a1:d0:f6:23:f4:dd:75:a6:15:cc:cf:13:
                    04:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B4:78:4E:09:83:5E:96:7C:4E:95:1E:97:13:6F:DD:58:B0:F0:35
            X509v3 Authority Key Identifier:
                keyid:19:13:CB:48:56:82:1D:14:CD:2E:0B:76:7C:29:31:A2:2C:15:4E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRPLSFaCHRTNLgt2fCkxoiwVTnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:55:69:d3:76:1e:95:43:64:0f:96:2c:79:95:bc:2c:4f:c3:
         d0:50:32:42:91:79:15:38:6a:8a:1b:9c:2d:bd:9d:f2:58:30:
         22:67:78:e2:53:ec:d1:2b:ec:87:b7:32:6d:65:2b:b9:dd:fe:
         6b:0f:b7:db:df:ad:6d:7d:0e:7e:2f:2d:8b:2e:28:62:d6:6e:
         71:6f:bb:56:c4:28:10:a7:00:ca:59:bf:2d:4a:54:47:35:8e:
         c4:d2:3c:76:6f:b6:ab:3e:07:2a:57:86:16:33:95:e1:46:22:
         12:b4:e4:0f:da:dd:3f:a1:5a:e0:b8:32:ea:d7:70:1f:64:f5:
         5e:86:39:0c:06:35:db:56:10:a7:b7:53:15:5b:45:e8:a6:0e:
         0b:6d:05:77:02:e5:2d:9b:46:ea:54:1f:49:0f:e2:f5:6a:74:
         08:46:e9:b6:1d:23:97:a5:f7:bf:6d:f4:13:e9:7e:65:b9:1b:
         c2:e2:57:cb:be:8f:11:6a:8f:0b:69:ec:c1:8b:a5:49:04:0a:
         1a:41:3d:98:03:f7:98:9f:77:15:7f:eb:1c:c5:01:30:3e:fd:
         2d:e4:9c:3f:d5:fb:a5:c4:59:c0:5b:c6:18:81:72:92:9a:31:
         3c:0e:88:5b:5b:26:78:c1:b6:8a:19:ff:5d:a4:7f:65:c0:2b:
         c3:f6:63:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:32:45 2025 by rpki-client