Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft
File:                     GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft (raw, json)
Hash identifier:          tzdpRRONxbHTwbZWbJxEPBluuytPvOT4DnVN1HVe5vY=
Subject key identifier:   1E:3A:64:8E:F5:AF:92:F6:09:E9:C2:49:5E:98:C4:D4:50:9E:B3:FA
Authority key identifier: 1A:5B:E1:55:03:7E:B7:E6:5C:12:AC:9A:A2:A2:C3:25:03:8C:3A:9B
Certificate issuer:       /CN=1a5be155037eb7e65c12ac9aa2a2c325038c3a9b
Certificate serial:       019770E388EB929EB989D1DEC18A9A623892
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GlvhVQN-t-ZcEqyaoqLDJQOMOps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft
Manifest number:          0967
Signing time:             Sun 15 Jun 2025 00:00:49 +0000
Manifest this update:     Sun 15 Jun 2025 00:00:49 +0000
Manifest next update:     Mon 16 Jun 2025 00:00:49 +0000
Files and hashes:         1: GlvhVQN-t-ZcEqyaoqLDJQOMOps.crl (hash: afrU1Y3/xA52G91mQxes5ww4NselFgVA8UHK/n74oFo=)
                          2: rXUz4Cja7Rn5f2K-Nekwfgc7eDw.roa (hash: fOnAbwYbkSj5pWsL7oCaEBc8d/CJJxJmdgkbmFTZcpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GlvhVQN-t-ZcEqyaoqLDJQOMOps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:e3:88:eb:92:9e:b9:89:d1:de:c1:8a:9a:62:38:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5be155037eb7e65c12ac9aa2a2c325038c3a9b
        Validity
            Not Before: Jun 15 00:00:49 2025 GMT
            Not After : Jun 16 00:00:49 2025 GMT
        Subject: CN=1e3a648ef5af92f609e9c2495e98c4d4509eb3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b2:ab:0a:e0:0b:54:25:1b:25:b8:aa:8d:7c:
                    90:bb:58:9e:64:3e:e9:a8:2c:0d:6e:30:54:f3:32:
                    ab:62:86:08:be:d0:e5:96:6a:36:03:05:72:71:e0:
                    7f:33:db:98:f5:d3:74:a5:09:b8:d8:7a:0e:a0:b1:
                    6f:72:05:a2:b4:d0:03:b1:29:78:00:85:02:f9:64:
                    eb:ef:30:8b:92:7c:6c:03:f1:b5:47:fe:74:17:79:
                    c1:32:62:71:03:94:ef:dc:88:3c:c6:0a:b1:3f:ca:
                    ce:f4:6d:e9:21:b0:51:16:35:cc:e5:22:1f:d6:34:
                    2c:87:68:96:5d:dd:dd:4a:d8:9f:e2:51:95:e3:94:
                    d1:d9:7b:eb:1a:3d:33:ed:80:e3:cd:9c:de:a3:90:
                    f1:e3:e4:33:e6:11:35:24:4b:c6:00:85:c8:23:77:
                    5d:ae:af:5a:d5:87:fd:09:52:30:70:5d:d6:d4:95:
                    3d:32:fa:d6:9e:53:fd:76:94:e2:36:a3:d6:45:a1:
                    4b:c1:c6:a5:35:59:b6:b8:c2:af:06:bf:5c:2a:0b:
                    a9:c0:ad:e5:1e:ed:1f:8f:ff:33:3b:56:fa:cb:d8:
                    85:79:ee:d1:72:f6:d7:69:bc:7c:91:b8:b5:3f:a7:
                    d4:57:93:fa:d1:49:49:07:ca:eb:1e:da:af:ec:ff:
                    30:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3A:64:8E:F5:AF:92:F6:09:E9:C2:49:5E:98:C4:D4:50:9E:B3:FA
            X509v3 Authority Key Identifier:
                keyid:1A:5B:E1:55:03:7E:B7:E6:5C:12:AC:9A:A2:A2:C3:25:03:8C:3A:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlvhVQN-t-ZcEqyaoqLDJQOMOps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:fa:9c:13:39:a1:6b:96:c8:6d:1c:89:7e:51:36:57:30:b8:
         20:d3:ca:47:4a:92:2d:40:89:d2:04:b9:36:0c:73:26:70:a1:
         91:e2:0b:1c:0b:ab:54:50:05:97:86:51:25:ec:48:d6:a9:c1:
         c6:89:50:ee:02:fd:f1:e6:dc:71:0f:b5:a7:30:f8:0b:7d:45:
         39:f6:60:6b:7c:02:92:7f:47:09:37:77:59:fb:66:04:c0:f1:
         d7:51:13:9f:7b:f9:f6:f7:d6:30:61:8c:4e:8b:83:a2:e8:3a:
         02:79:03:78:69:97:55:1f:b7:90:48:09:1b:f2:dc:fe:8e:d9:
         ef:c7:4f:df:6c:6b:e4:5a:42:fc:f1:b0:3b:6c:08:18:74:e7:
         a5:18:e2:b5:f3:4f:41:ed:c0:bc:7e:a9:a9:6b:b0:7c:b2:76:
         2f:6e:24:bc:42:e7:c9:c5:7d:3d:ed:c7:89:1b:a1:81:e0:e4:
         a3:bb:d4:40:51:53:3a:2c:96:2d:c0:12:a3:11:2f:07:7d:81:
         d4:91:11:69:f8:bc:cd:4e:ff:ba:ff:ed:a3:31:7e:8a:a4:23:
         70:b2:32:a8:29:69:e0:75:af:7f:32:61:0c:fd:0e:1e:30:aa:
         1e:97:97:56:d9:6b:24:86:3f:b8:f6:ba:e4:53:59:89:79:2c:
         68:b6:54:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:43 2025 by rpki-client