Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft
File:                     GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft (raw, json)
Hash identifier:          DJFqfhCFMn8UFjmvMNTVdHzWG7mw1k4YkcZl2kIidU0=
Subject key identifier:   C2:71:ED:2E:67:C7:35:B6:6C:55:0C:B3:A8:2D:FD:00:A1:00:41:44
Authority key identifier: 19:13:CB:48:56:82:1D:14:CD:2E:0B:76:7C:29:31:A2:2C:15:4E:7C
Certificate issuer:       /CN=1913cb4856821d14cd2e0b767c2931a22c154e7c
Certificate serial:       0196760C116D2F2621ADADDBDF466CFAE96A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRPLSFaCHRTNLgt2fCkxoiwVTnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft
Manifest number:          099E
Signing time:             Sun 27 Apr 2025 07:00:24 +0000
Manifest this update:     Sun 27 Apr 2025 07:00:24 +0000
Manifest next update:     Mon 28 Apr 2025 07:00:24 +0000
Files and hashes:         1: GRPLSFaCHRTNLgt2fCkxoiwVTnw.crl (hash: /qpIU4tUMIjLps36npCLyxXXGAXJLicg+ZdhtIi4Bxc=)
                          2: zvde-1FktXCEIRB3FHyBiaah4JI.roa (hash: 6R+oudRdqFBVe7OQ/+aXtal9Y8TCWwoFCMfYuyQJNpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GRPLSFaCHRTNLgt2fCkxoiwVTnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:11:6d:2f:26:21:ad:ad:db:df:46:6c:fa:e9:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1913cb4856821d14cd2e0b767c2931a22c154e7c
        Validity
            Not Before: Apr 27 07:00:24 2025 GMT
            Not After : Apr 28 07:00:24 2025 GMT
        Subject: CN=c271ed2e67c735b66c550cb3a82dfd00a1004144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:eb:94:5c:c4:b7:c3:ce:78:3e:35:68:b8:57:
                    98:95:b8:7d:da:5e:4a:37:37:29:77:b3:de:53:ea:
                    ef:08:90:2c:b9:26:07:9b:c7:43:9b:30:cb:b1:91:
                    49:ce:a0:d7:81:76:7f:44:46:af:0b:c7:6d:9a:c0:
                    ee:23:ab:69:ac:b6:9e:6f:b7:0a:0d:b7:02:d2:21:
                    8c:18:2c:d0:80:7d:44:51:5e:82:86:f3:15:63:fb:
                    b6:06:26:84:b7:2e:ee:64:0a:91:2b:b1:c2:aa:e3:
                    21:9b:2e:9d:0d:ed:db:b7:36:73:1a:84:af:41:f4:
                    bf:86:5d:18:62:45:7b:bf:23:c7:bb:a0:bc:ea:1b:
                    61:82:a1:f0:b3:4a:64:5d:da:04:dc:30:5b:12:8f:
                    cc:5e:e7:86:09:fd:51:fb:48:47:96:1f:28:6f:1a:
                    54:b0:27:52:74:43:4a:e9:1d:dd:38:66:87:0a:31:
                    e8:a8:5b:9f:6b:1f:fe:a1:27:21:b5:e1:fb:6a:cc:
                    93:32:f7:29:5b:a9:ca:cb:98:5d:10:ae:c9:e5:49:
                    1d:25:9b:2f:dc:b4:4d:20:e3:b4:28:83:c8:dc:af:
                    02:10:12:3c:bb:0b:36:28:1c:b0:97:db:ad:f8:c5:
                    c3:68:e9:22:35:29:bb:42:af:89:39:62:92:6d:69:
                    7e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:71:ED:2E:67:C7:35:B6:6C:55:0C:B3:A8:2D:FD:00:A1:00:41:44
            X509v3 Authority Key Identifier:
                keyid:19:13:CB:48:56:82:1D:14:CD:2E:0B:76:7C:29:31:A2:2C:15:4E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRPLSFaCHRTNLgt2fCkxoiwVTnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:c2:3f:44:1d:99:ad:77:a6:fa:67:d6:8c:e5:25:84:5d:45:
         ea:0c:8c:a2:cc:2b:ff:50:b3:ca:a6:64:9b:16:a8:6f:82:15:
         64:8a:5d:d1:2c:c1:ae:83:36:55:ff:ec:72:04:49:82:eb:50:
         90:3e:80:db:35:2d:a3:65:6f:c7:07:2e:70:9d:4c:82:b5:d0:
         26:92:72:b5:ea:85:77:6e:4b:1c:23:10:b8:6f:ce:45:95:3d:
         e8:c3:d0:e4:da:05:36:4e:15:84:c4:0c:af:35:bb:1b:c0:bd:
         37:e3:de:aa:2b:91:71:28:b6:c0:ad:18:c2:35:ed:fa:6c:c7:
         e8:e3:10:f8:4c:a3:75:a7:9e:62:c9:29:04:c1:89:1b:7f:91:
         ab:fb:89:d2:a9:66:2e:1b:9a:91:7f:b4:3b:6f:74:ab:7b:3e:
         69:5c:a9:be:d1:90:a7:ae:52:0a:31:e8:30:7a:2b:a8:43:e3:
         a7:6b:31:3b:f6:8d:cc:48:dd:54:3b:e5:70:0b:72:98:1e:f7:
         ee:e8:ac:0f:fc:2c:6e:77:66:28:ba:e6:0b:00:5d:55:11:66:
         a8:ec:e0:bf:25:a9:a8:c3:20:d1:c4:68:ae:76:fb:d2:de:2f:
         0c:86:90:ec:fb:f8:52:6a:51:fa:88:72:b4:24:23:45:e2:ab:
         33:a3:f5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:10:43 2025 by rpki-client