Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
File:                     GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft (raw, json)
Hash identifier:          JWKoy80LO84yB6kJX6t30ydTWmcGnrQsAubTPA5pY+s=
Subject key identifier:   6A:26:3D:DA:76:E4:F7:92:B1:E3:93:9E:7C:7A:28:2F:07:C6:B6:A1
Authority key identifier: 19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
Certificate issuer:       /CN=194f0b272e243acfaf36346094e58395cc1383b4
Certificate serial:       0197703EF3F88B7F613E2A6B727C3214CDD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
Manifest number:          1107
Signing time:             Sat 14 Jun 2025 21:01:03 +0000
Manifest this update:     Sat 14 Jun 2025 21:01:03 +0000
Manifest next update:     Sun 15 Jun 2025 21:01:03 +0000
Files and hashes:         1: GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl (hash: pEjAsuFt0pnao5RknUbUDH5VKoA6PYcrVNtlm/X+m6c=)
                          2: uIeYeZznF-O1grN0M5g3SmcN33U.roa (hash: y5O+zvgRhkPeGKTBn9Qn4EVE0s2vlCMineSuEirJq9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:3e:f3:f8:8b:7f:61:3e:2a:6b:72:7c:32:14:cd:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194f0b272e243acfaf36346094e58395cc1383b4
        Validity
            Not Before: Jun 14 21:01:03 2025 GMT
            Not After : Jun 15 21:01:03 2025 GMT
        Subject: CN=6a263dda76e4f792b1e3939e7c7a282f07c6b6a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e9:ea:bb:c2:fd:2c:42:a8:d9:f2:b7:19:88:
                    b4:a6:d0:10:13:8a:57:93:c1:97:38:fd:2e:30:08:
                    4b:60:19:52:b1:a2:2a:1a:37:e0:96:7d:59:ff:3d:
                    62:6a:d5:68:72:6f:f1:89:c5:15:4a:6c:17:f5:05:
                    86:fa:4c:28:25:b8:16:4f:51:b8:0f:7b:7a:3c:0e:
                    ad:d5:1f:df:97:6a:67:9f:78:98:6e:9a:5a:83:b9:
                    49:98:43:b1:4d:d6:c4:4d:7a:cc:cc:3e:d9:1e:27:
                    25:02:51:ba:7c:41:0c:49:1e:58:34:0b:ea:b5:1a:
                    90:a0:fe:82:a0:d0:e9:d5:bf:41:89:20:d2:40:d3:
                    6f:ac:6b:ab:3f:c2:60:6a:2c:30:83:ed:51:ba:4c:
                    c7:71:9c:55:08:50:b2:8a:6b:f8:bc:d5:9b:d5:7d:
                    04:92:bd:73:5d:5f:63:a3:95:65:d4:0d:58:63:8e:
                    60:4f:c1:ca:e8:41:ca:c7:95:e0:ba:a3:43:d8:6b:
                    0b:1a:17:76:d8:92:36:31:9b:c9:09:3c:3e:ff:3b:
                    77:d5:64:68:6f:11:53:e4:3e:3c:61:c7:b9:ff:6f:
                    3a:9c:18:f2:7b:a9:d6:d1:91:75:09:ac:af:08:8d:
                    67:05:b7:0c:b0:b3:43:6d:8c:bf:73:8c:a9:bd:d9:
                    47:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:26:3D:DA:76:E4:F7:92:B1:E3:93:9E:7C:7A:28:2F:07:C6:B6:A1
            X509v3 Authority Key Identifier:
                keyid:19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ca:f7:d4:bd:3d:58:b5:a3:0f:2a:82:45:32:bc:2c:cc:74:
         dc:71:f0:54:0a:00:56:3c:fc:d3:fe:da:7d:b6:5e:74:12:f6:
         9f:1f:da:49:32:50:7d:f6:dc:e1:a2:3e:b0:63:e4:8b:70:54:
         3c:02:66:2a:eb:65:2b:20:e3:95:09:6e:75:5a:23:4f:b5:3b:
         bc:0e:52:ee:e5:47:a5:e7:47:8c:3b:08:3d:24:f6:5e:b1:b4:
         7e:28:93:30:76:28:8b:db:dc:84:e0:79:97:bb:41:10:95:9f:
         7e:b7:2f:69:22:53:a6:db:5a:46:84:73:88:f4:5f:02:ab:dd:
         b8:a2:c0:76:54:ae:7f:83:09:36:24:13:82:19:1e:a8:72:c5:
         74:9d:ed:55:f5:b8:f7:d1:28:de:15:1f:2d:47:55:03:7a:7a:
         e9:4b:ac:43:e1:2c:c2:b8:68:e5:2d:b8:41:7c:22:d0:80:a4:
         51:cd:52:2f:f6:60:a5:f2:0d:44:ef:d8:20:19:bb:96:2b:eb:
         a8:e4:8b:bc:f7:ff:3c:b3:35:d8:9d:4e:2d:64:42:c0:bf:f0:
         28:d4:e5:e9:3b:2b:27:d7:9d:37:46:b5:f2:2c:a7:15:f2:8f:
         0f:02:54:05:8f:49:69:0e:43:11:57:05:a9:f7:80:da:50:3e:
         5c:06:65:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwPvP4i39hPiprcnwyFM3XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NGYwYjI3MmUyNDNhY2ZhZjM2MzQ2MDk0ZTU4Mzk1Y2Mx
MzgzYjQwHhcNMjUwNjE0MjEwMTAzWhcNMjUwNjE1MjEwMTAzWjAzMTEwLwYDVQQD
Eyg2YTI2M2RkYTc2ZTRmNzkyYjFlMzkzOWU3YzdhMjgyZjA3YzZiNmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOnqu8L9LEKo2fK3GYi0ptAQE4pX
k8GXOP0uMAhLYBlSsaIqGjfgln1Z/z1iatVocm/xicUVSmwX9QWG+kwoJbgWT1G4
D3t6PA6t1R/fl2pnn3iYbppag7lJmEOxTdbETXrMzD7ZHiclAlG6fEEMSR5YNAvq
tRqQoP6CoNDp1b9BiSDSQNNvrGurP8Jgaiwwg+1RukzHcZxVCFCyimv4vNWb1X0E
kr1zXV9jo5Vl1A1YY45gT8HK6EHKx5XguqND2GsLGhd22JI2MZvJCTw+/zt31WRo
bxFT5D48Yce5/286nBjye6nW0ZF1CayvCI1nBbcMsLNDbYy/c4ypvdlHxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGomPdp25PeSseOTnnx6KC8HxrahMB8GA1UdIwQY
MBaAFBlPCycuJDrPrzY0YJTlg5XME4O0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1U4TEp5NGtPcy12TmpSZ2xPV0RsY3dUZzdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hNTNkMzQtYzNkNi00OWRiLWFiN2Yt
YTljY2U1NmEwNjY4LzEvR1U4TEp5NGtPcy12TmpSZ2xPV0RsY3dUZzdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hNTNkMzQtYzNkNi00OWRiLWFiN2YtYTljY2U1NmEwNjY4
LzEvR1U4TEp5NGtPcy12TmpSZ2xPV0RsY3dUZzdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcr31L09
WLWjDyqCRTK8LMx03HHwVAoAVjz80/7afbZedBL2nx/aSTJQffbc4aI+sGPki3BU
PAJmKutlKyDjlQludVojT7U7vA5S7uVHpedHjDsIPST2XrG0fiiTMHYoi9vchOB5
l7tBEJWffrcvaSJTpttaRoRziPRfAqvduKLAdlSuf4MJNiQTghkeqHLFdJ3tVfW4
99Eo3hUfLUdVA3p66UusQ+Eswrho5S24QXwi0ICkUc1SL/ZgpfINRO/YIBm7livr
qOSLvPf/PLM12J1OLWRCwL/wKNTl6TsrJ9edN0a18iynFfKPDwJUBY9JaQ5DEVcF
qfeA2lA+XAZlmA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:45:27 2025 by rpki-client