Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft
File:                     GLbl-LQJfB26dKICIGFFk5_x4do.mft (raw, json)
Hash identifier:          sqBtBWuApKHbo5zz5ODYy7IhksKe3BVvdKL5ivLmHOg=
Subject key identifier:   85:8B:E4:2F:CA:1D:44:A6:39:BC:66:84:4A:61:46:41:78:62:42:55
Authority key identifier: 18:B6:E5:F8:B4:09:7C:1D:BA:74:A2:02:20:61:45:93:9F:F1:E1:DA
Certificate issuer:       /CN=18b6e5f8b4097c1dba74a202206145939ff1e1da
Certificate serial:       0196789F54828BC78E44586CD6F2B5C267C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft
Manifest number:          0F0B
Signing time:             Sun 27 Apr 2025 19:00:29 +0000
Manifest this update:     Sun 27 Apr 2025 19:00:29 +0000
Manifest next update:     Mon 28 Apr 2025 19:00:29 +0000
Files and hashes:         1: GLbl-LQJfB26dKICIGFFk5_x4do.crl (hash: eRq5pV9/xrJuGek+g2GiIeFNDZMftIsiy9TVNKMcyVA=)
                          2: HBHAqT8jajsD1nwf_6k2IJVgvHo.roa (hash: Y84KjLE8NtO9vOG8nx25z9ZTKrfTK1iHhME9/Rj/s64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:9f:54:82:8b:c7:8e:44:58:6c:d6:f2:b5:c2:67:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18b6e5f8b4097c1dba74a202206145939ff1e1da
        Validity
            Not Before: Apr 27 19:00:29 2025 GMT
            Not After : Apr 28 19:00:29 2025 GMT
        Subject: CN=858be42fca1d44a639bc66844a61464178624255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a3:1f:eb:6a:9b:fc:74:e0:04:da:c4:23:14:
                    37:41:ec:5e:58:b5:84:8a:4b:91:a3:27:ac:cd:4e:
                    d4:67:6a:43:aa:5f:c1:80:84:4b:ba:26:50:25:b8:
                    3b:ab:9c:ee:4b:02:17:b5:70:4c:d5:f1:78:fd:45:
                    80:5d:b8:19:cf:c3:5c:f6:7e:0a:11:f4:fa:ea:a3:
                    63:4a:e4:5d:05:ae:42:ff:0c:b3:8b:2f:a3:4c:ae:
                    8a:53:4f:cd:74:ef:cc:a1:4d:08:ba:a9:44:d5:65:
                    82:97:f7:82:5f:08:68:1b:51:a3:a9:ad:93:89:4e:
                    23:9a:b6:0b:43:24:e3:97:44:25:48:ef:e7:1c:23:
                    38:df:0c:c0:3b:00:c7:f4:e1:de:87:d7:a6:08:a5:
                    43:9d:21:ff:0f:de:1f:be:7e:fe:80:70:55:1d:ed:
                    f0:d7:d0:0a:4c:5a:d8:8f:0e:60:8f:4d:b8:cb:e5:
                    5b:cb:19:19:ed:65:ee:7b:08:a6:75:ab:13:a9:1e:
                    2d:19:ff:7d:c8:84:2d:87:7e:16:92:06:dd:78:95:
                    04:74:25:48:69:49:3c:2d:f5:b7:df:37:04:ef:8a:
                    53:ac:a0:3b:58:41:a8:d9:98:15:79:88:a9:c7:fa:
                    1f:8a:fb:57:00:69:ed:cf:3a:f8:53:c1:b2:18:9c:
                    01:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8B:E4:2F:CA:1D:44:A6:39:BC:66:84:4A:61:46:41:78:62:42:55
            X509v3 Authority Key Identifier:
                keyid:18:B6:E5:F8:B4:09:7C:1D:BA:74:A2:02:20:61:45:93:9F:F1:E1:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:84:c4:7f:25:d2:ba:05:ff:f7:fb:18:26:21:74:ae:2b:00:
         44:c2:a7:85:4f:30:b1:55:8b:23:b3:cf:50:05:86:3b:64:e4:
         95:4f:b5:fd:81:bf:9c:b2:54:66:90:af:5b:a2:22:9e:60:1a:
         11:b0:23:49:0c:45:9d:a4:a1:bb:16:33:df:f0:e0:c7:55:c2:
         56:5f:f7:ba:8b:95:74:d3:cc:32:f5:8e:9e:85:09:f3:17:9f:
         cd:c5:c7:49:e2:0f:7c:2f:68:e1:13:19:78:26:48:c0:61:df:
         78:48:53:85:c5:0d:25:aa:05:5a:ab:c0:db:a2:9e:cc:dd:a0:
         35:cd:97:28:33:33:b4:65:1b:3d:c8:e8:cc:b4:4b:fb:d4:0e:
         3f:72:00:44:1d:2e:42:6d:28:1a:e7:43:40:1a:bb:94:03:55:
         a2:86:9d:a5:66:93:9e:b5:17:11:0a:5f:a4:a4:db:8b:6b:64:
         d9:a1:2d:d0:18:13:80:fa:e1:93:c2:30:06:ee:c4:1b:db:83:
         e0:a2:a1:20:b3:77:80:2e:fb:b2:24:4b:c0:9d:90:c3:96:78:
         e8:39:6a:ed:24:1f:c2:b5:e4:e7:d3:a8:ac:89:b3:a7:32:22:
         e2:ce:40:83:08:8c:4f:7d:84:c5:d8:8a:4c:5a:de:d3:fc:ad:
         86:eb:9e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:24:16 2025 by rpki-client