Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
File:                     GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft (raw, json)
Hash identifier:          p6rhD86waG4zCOmDNxFN4Jx/K4ooonNei5Jiii2hN5E=
Subject key identifier:   1A:91:EE:6E:CF:D1:00:6C:F2:E8:F8:06:A5:0C:AB:8C:2B:80:0B:02
Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
Certificate issuer:       /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Certificate serial:       01A029C60F46411C99D047F8456F92BCFFFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
Manifest number:          188C
Signing time:             Sat 22 Aug 2026 14:00:40 +0000
Manifest this update:     Sat 22 Aug 2026 14:00:40 +0000
Manifest next update:     Sun 23 Aug 2026 14:00:40 +0000
Files and hashes:         1: 4aCUeUm4DYpWSQ7MSed7gWheYek.roa (hash: 3dUedzWX4ggiRmXBQIk9G5+5iMNmw05uaAyT3EfChQQ=)
                          2: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl (hash: xovmMRDk66JRnflxeRX2rFObdsz3E3JSRKUq1sUOXYg=)
                          3: LGAzazAsvBBjNUS-QipfT8L_rKc.roa (hash: D5sjWJz5RfyDQZFF/L4/mTT1RT97QDK5mPQgERHSqvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:29:c6:0f:46:41:1c:99:d0:47:f8:45:6f:92:bc:ff:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
        Validity
            Not Before: Aug 22 14:00:40 2026 GMT
            Not After : Aug 23 14:00:40 2026 GMT
        Subject: CN=1a91ee6ecfd1006cf2e8f806a50cab8c2b800b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ef:52:76:ce:3a:9d:b3:6e:db:f8:0b:5a:1f:
                    fc:1d:8e:0b:4f:f2:6c:2f:37:fb:f7:de:7d:96:84:
                    75:0f:03:37:03:6e:45:32:83:c7:5b:22:a9:0f:90:
                    f7:73:96:5f:52:b9:9d:48:7e:59:f0:29:32:8c:7c:
                    0e:34:87:9e:c8:99:89:d5:0e:c0:40:c0:ee:ac:d6:
                    89:b5:0b:28:ca:0c:64:10:93:ad:16:61:eb:2c:b7:
                    6f:d6:17:6b:1d:68:fa:fc:27:bd:fa:fb:b6:4c:b6:
                    68:f9:22:a3:fc:cb:7b:d6:8e:8a:d0:e7:f6:63:bd:
                    a2:e8:b3:e2:be:ff:f3:d8:2c:66:09:46:2d:37:71:
                    da:47:b1:80:44:a0:e6:1a:f5:4c:85:17:36:be:dd:
                    25:ec:a0:69:ee:3e:6a:ce:ce:b8:6f:80:05:2f:0f:
                    a8:df:4f:62:27:79:72:0c:e5:ba:d7:ec:1d:92:a5:
                    9d:56:30:c5:f5:bb:32:c5:4d:6f:96:2b:80:b3:f3:
                    6d:f2:70:9b:4c:1c:ab:c7:84:5e:c8:5c:02:cb:ae:
                    c2:8d:86:d8:f1:0a:9c:d0:5e:a1:a7:ce:7f:81:cb:
                    1b:05:be:0a:d2:d5:32:28:f2:05:6f:7c:14:3a:46:
                    4b:a3:67:e3:02:4c:69:fb:48:f9:2d:a2:66:8e:b8:
                    10:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:91:EE:6E:CF:D1:00:6C:F2:E8:F8:06:A5:0C:AB:8C:2B:80:0B:02
            X509v3 Authority Key Identifier:
                keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4b:31:e3:98:4f:ea:14:48:8d:9b:e1:ac:5a:82:10:4e:10:
         62:8e:51:1a:ca:33:58:dd:d9:5f:a4:94:72:50:35:79:a7:b3:
         87:b2:b7:9d:95:b9:a7:6c:b1:15:19:50:77:f7:ea:17:e3:fe:
         16:a4:af:56:16:86:cb:e1:85:01:2f:07:6e:17:eb:79:d2:a9:
         3b:b9:ee:46:d0:b4:43:7c:1b:b4:3b:e4:4c:a2:24:db:9e:25:
         38:36:dd:e7:b7:0a:2d:b2:86:4b:81:13:17:ea:59:51:bf:e4:
         c8:3b:e9:b5:d6:58:e6:ee:f6:15:be:4c:2b:69:56:33:64:e0:
         28:ef:35:b1:6e:91:fb:e2:d7:aa:e7:a4:2b:d6:59:0f:b6:81:
         f8:45:d2:db:74:3d:61:f9:e7:ef:5f:c2:f6:3d:35:c1:c4:b7:
         35:30:b4:d0:27:ff:e8:57:b9:bd:2d:20:9c:47:4c:fb:42:9e:
         9a:14:34:54:db:b9:66:13:8f:3e:0a:3f:8f:5b:ab:2d:83:e3:
         5e:a6:5a:5a:4d:74:bb:6a:2f:7b:9a:53:b6:6e:ba:ea:05:0f:
         c2:eb:e1:f8:23:43:bd:48:75:58:dc:93:50:18:30:e7:8a:72:
         dc:a6:53:a5:6b:b8:54:87:e9:0b:8b:4c:4b:48:31:b1:06:65:
         b3:e8:75:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaApxg9GQRyZ0Ef4RW+SvP//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4Yjg4OWYwZGRiYjUyODAxZTJkMmU3YTJlYmUxMTY3Y2Fk
MzRjMDYwHhcNMjYwODIyMTQwMDQwWhcNMjYwODIzMTQwMDQwWjAzMTEwLwYDVQQD
EygxYTkxZWU2ZWNmZDEwMDZjZjJlOGY4MDZhNTBjYWI4YzJiODAwYjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO9Sds46nbNu2/gLWh/8HY4LT/Js
Lzf79959loR1DwM3A25FMoPHWyKpD5D3c5ZfUrmdSH5Z8CkyjHwONIeeyJmJ1Q7A
QMDurNaJtQsoygxkEJOtFmHrLLdv1hdrHWj6/Ce9+vu2TLZo+SKj/Mt71o6K0Of2
Y72i6LPivv/z2CxmCUYtN3HaR7GARKDmGvVMhRc2vt0l7KBp7j5qzs64b4AFLw+o
309iJ3lyDOW61+wdkqWdVjDF9bsyxU1vliuAs/Nt8nCbTByrx4ReyFwCy67CjYbY
8Qqc0F6hp85/gcsbBb4K0tUyKPIFb3wUOkZLo2fjAkxp+0j5LaJmjrgQyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqR7m7P0QBs8uj4BqUMq4wrgAsCMB8GA1UdIwQY
MBaAFBi4ifDdu1KAHi0uei6+EWfK00wGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82ZTE5NjEtM2RhNi00N2MxLTliNmQt
ZGJiNjRhNjgzNWFkLzEvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82ZTE5NjEtM2RhNi00N2MxLTliNmQtZGJiNjRhNjgzNWFk
LzEvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARUsx45hP
6hRIjZvhrFqCEE4QYo5RGsozWN3ZX6SUclA1eaezh7K3nZW5p2yxFRlQd/fqF+P+
FqSvVhaGy+GFAS8HbhfredKpO7nuRtC0Q3wbtDvkTKIk254lODbd57cKLbKGS4ET
F+pZUb/kyDvptdZY5u72Fb5MK2lWM2TgKO81sW6R++LXquekK9ZZD7aB+EXS23Q9
Yfnn71/C9j01wcS3NTC00Cf/6Fe5vS0gnEdM+0KemhQ0VNu5ZhOPPgo/j1urLYPj
XqZaWk10u2ove5pTtm666gUPwuvh+CNDvUh1WNyTUBgw54py3KZTpWu4VIfpC4tM
S0gxsQZls+h1kg==
-----END CERTIFICATE-----
Generated at Sat Aug 22 20:21:42 2026 by rpki-client