Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft
File:                     GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft (raw, json)
Hash identifier:          KE+a29MjZMXvA/8hfSW6pG49qnlh28GhkM+j+Rw8LcI=
Subject key identifier:   BC:5F:27:D7:41:FD:ED:2B:DF:97:6E:59:0E:F8:FB:00:D2:C7:16:B2
Authority key identifier: 19:13:CB:48:56:82:1D:14:CD:2E:0B:76:7C:29:31:A2:2C:15:4E:7C
Certificate issuer:       /CN=1913cb4856821d14cd2e0b767c2931a22c154e7c
Certificate serial:       01976F2BDBC195C98DDBF5BB7F2670C60CDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRPLSFaCHRTNLgt2fCkxoiwVTnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft
Manifest number:          0A1F
Signing time:             Sat 14 Jun 2025 16:00:34 +0000
Manifest this update:     Sat 14 Jun 2025 16:00:34 +0000
Manifest next update:     Sun 15 Jun 2025 16:00:34 +0000
Files and hashes:         1: GRPLSFaCHRTNLgt2fCkxoiwVTnw.crl (hash: Qv9roZS4u6w3dAUQIJeVLeAXCUNOCvRa3YeP8GAds4g=)
                          2: zvde-1FktXCEIRB3FHyBiaah4JI.roa (hash: 6R+oudRdqFBVe7OQ/+aXtal9Y8TCWwoFCMfYuyQJNpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRPLSFaCHRTNLgt2fCkxoiwVTnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2b:db:c1:95:c9:8d:db:f5:bb:7f:26:70:c6:0c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1913cb4856821d14cd2e0b767c2931a22c154e7c
        Validity
            Not Before: Jun 14 16:00:34 2025 GMT
            Not After : Jun 15 16:00:34 2025 GMT
        Subject: CN=bc5f27d741fded2bdf976e590ef8fb00d2c716b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c9:ed:9d:a9:89:36:6a:66:a3:cf:2b:91:3d:
                    9f:e7:58:db:2d:6f:31:58:4b:ab:d3:43:c1:d9:9e:
                    9d:f5:e1:e9:83:0b:1a:b6:12:81:35:33:f7:31:e4:
                    6b:f1:4e:c5:58:63:07:6d:9c:e8:24:7c:6d:49:97:
                    8f:f6:97:61:52:76:3f:7b:51:a1:77:b8:28:52:0f:
                    a4:61:82:6a:ab:7f:6a:ab:1d:77:8e:c9:23:31:64:
                    b8:b2:0b:26:4b:fe:7b:9d:8c:37:2f:a5:5b:18:58:
                    b3:3d:dd:6e:74:e5:91:f7:f2:19:50:01:50:de:e5:
                    5f:9b:0a:a7:57:6a:cf:b5:6f:5a:73:8d:68:d1:75:
                    fc:20:75:d4:c1:2c:8e:ec:6d:63:77:6a:71:dd:23:
                    2c:2b:77:47:1a:09:6c:99:ab:ab:90:43:01:e2:92:
                    1b:e5:e6:ea:8e:2e:be:e7:41:c2:57:34:2f:17:8c:
                    29:92:bf:75:f7:9b:16:40:e6:3a:fe:26:25:9b:17:
                    23:85:3d:20:2d:36:7d:e5:f6:6a:6d:b2:60:bd:51:
                    0b:0c:a6:ac:a8:f5:2b:7a:a4:3a:6e:f8:ab:93:f3:
                    95:85:f5:98:fc:6b:c9:51:2d:4e:fe:24:cf:19:a3:
                    eb:ce:ff:41:d9:55:4b:0f:34:f4:9e:7c:5f:8c:88:
                    58:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5F:27:D7:41:FD:ED:2B:DF:97:6E:59:0E:F8:FB:00:D2:C7:16:B2
            X509v3 Authority Key Identifier:
                keyid:19:13:CB:48:56:82:1D:14:CD:2E:0B:76:7C:29:31:A2:2C:15:4E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRPLSFaCHRTNLgt2fCkxoiwVTnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:e3:06:68:fa:1d:c2:cf:1d:0d:10:c2:29:be:b2:46:e2:07:
         10:52:d0:80:a4:38:97:90:39:18:ee:54:e7:57:b2:31:70:f9:
         32:6a:f2:10:91:22:47:a1:be:23:f3:7d:d1:62:c6:18:a0:0e:
         9b:97:77:d0:16:38:8a:ac:ba:55:e6:eb:cd:40:e6:a8:b2:a1:
         e4:b1:9b:2a:b2:19:36:53:b0:dd:37:4b:14:8c:72:4e:b6:f3:
         32:a9:34:fe:e4:f2:88:fe:77:b4:a4:9f:27:56:0f:c5:25:9c:
         0c:df:50:24:7a:ae:a2:34:16:9a:61:f9:9e:8b:5b:6c:e2:a1:
         ec:d8:e3:31:d7:08:85:4c:ce:ff:5e:42:5e:6d:c0:8a:8a:7d:
         7c:99:d3:22:65:17:96:6a:0a:ba:dd:6f:ef:fd:95:b2:13:dd:
         b1:f4:dc:ac:49:0c:ab:33:3d:3c:03:ef:4e:69:f8:bf:ab:0d:
         e6:f4:d8:13:a1:96:d1:f9:1c:1e:d7:8f:3f:e2:b6:f2:86:3c:
         65:15:f3:39:79:44:89:44:df:70:ff:d6:d5:21:d0:f5:60:e1:
         b2:c0:39:b3:e3:42:2e:9a:f9:92:6f:a1:9a:c2:99:c7:3c:2a:
         e4:78:3a:52:a1:2f:41:e6:11:9a:a0:f0:79:ed:bc:87:5d:82:
         b0:2a:68:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvK9vBlcmN2/W7fyZwxgzdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MTNjYjQ4NTY4MjFkMTRjZDJlMGI3NjdjMjkzMWEyMmMx
NTRlN2MwHhcNMjUwNjE0MTYwMDM0WhcNMjUwNjE1MTYwMDM0WjAzMTEwLwYDVQQD
EyhiYzVmMjdkNzQxZmRlZDJiZGY5NzZlNTkwZWY4ZmIwMGQyYzcxNmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcntnamJNmpmo88rkT2f51jbLW8x
WEur00PB2Z6d9eHpgwsathKBNTP3MeRr8U7FWGMHbZzoJHxtSZeP9pdhUnY/e1Gh
d7goUg+kYYJqq39qqx13jskjMWS4sgsmS/57nYw3L6VbGFizPd1udOWR9/IZUAFQ
3uVfmwqnV2rPtW9ac41o0XX8IHXUwSyO7G1jd2px3SMsK3dHGglsmaurkEMB4pIb
5ebqji6+50HCVzQvF4wpkr9195sWQOY6/iYlmxcjhT0gLTZ95fZqbbJgvVELDKas
qPUreqQ6bvirk/OVhfWY/GvJUS1O/iTPGaPrzv9B2VVLDzT0nnxfjIhYnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxfJ9dB/e0r35duWQ74+wDSxxayMB8GA1UdIwQY
MBaAFBkTy0hWgh0UzS4LdnwpMaIsFU58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1JQTFNGYUNIUlROTGd0MmZDa3hvaXdWVG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xOTc3ZGUtMWRmNC00MDRjLTlkYTkt
MDc3OWRmMWRkNjRkLzEvR1JQTFNGYUNIUlROTGd0MmZDa3hvaXdWVG53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8xOTc3ZGUtMWRmNC00MDRjLTlkYTktMDc3OWRmMWRkNjRk
LzEvR1JQTFNGYUNIUlROTGd0MmZDa3hvaXdWVG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+MGaPod
ws8dDRDCKb6yRuIHEFLQgKQ4l5A5GO5U51eyMXD5MmryEJEiR6G+I/N90WLGGKAO
m5d30BY4iqy6VebrzUDmqLKh5LGbKrIZNlOw3TdLFIxyTrbzMqk0/uTyiP53tKSf
J1YPxSWcDN9QJHquojQWmmH5notbbOKh7NjjMdcIhUzO/15CXm3Aiop9fJnTImUX
lmoKut1v7/2VshPdsfTcrEkMqzM9PAPvTmn4v6sN5vTYE6GW0fkcHtePP+K28oY8
ZRXzOXlEiUTfcP/W1SHQ9WDhssA5s+NCLpr5km+hmsKZxzwq5Hg6UqEvQeYRmqDw
ee28h12CsCpoOw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:50:17 2025 by rpki-client