Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
File:                     Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft (raw, json)
Hash identifier:          UFRzYeponIMyfCmc19bxwbMXMe8vOMH6eHAaHh5G294=
Subject key identifier:   41:D9:D5:F4:46:B6:16:8C:7C:7A:08:49:43:B9:CE:2C:B9:AC:50:BC
Authority key identifier: 1A:5B:7D:43:BB:4C:83:E7:C7:D9:7C:E0:75:43:A9:6D:74:C6:9F:DA
Certificate issuer:       /CN=1a5b7d43bb4c83e7c7d97ce07543a96d74c69fda
Certificate serial:       019FA1BB30F16141642D7187079DCFE42537
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
Manifest number:          140D
Signing time:             Mon 27 Jul 2026 04:00:27 +0000
Manifest this update:     Mon 27 Jul 2026 04:00:27 +0000
Manifest next update:     Tue 28 Jul 2026 04:00:27 +0000
Files and hashes:         1: Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl (hash: /OqYCVWl7FykBHPThaPkK7/o51LXF7ssAAoL/cnmSC4=)
                          2: w-zK3gICwu0tZ5BpaCsJ-LEyh_4.roa (hash: MaoF3Nxzc8V8R020ySbLtYOSWWBezqUdqr7TNLevqTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:bb:30:f1:61:41:64:2d:71:87:07:9d:cf:e4:25:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5b7d43bb4c83e7c7d97ce07543a96d74c69fda
        Validity
            Not Before: Jul 27 04:00:27 2026 GMT
            Not After : Jul 28 04:00:27 2026 GMT
        Subject: CN=41d9d5f446b6168c7c7a084943b9ce2cb9ac50bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:dc:fe:31:e0:f9:f1:84:e1:57:cd:8d:94:10:
                    39:96:96:35:0c:c8:01:24:ae:47:6e:88:a6:64:46:
                    8d:91:1c:7a:da:f0:5c:ba:22:30:68:21:32:95:7b:
                    25:16:01:d2:0f:37:d3:e0:56:9f:cc:3b:ad:1e:9b:
                    ba:a9:84:01:44:9d:f1:39:7f:ff:f5:3c:65:07:b2:
                    93:7b:4d:86:8a:df:2a:b9:06:bb:96:89:ff:5f:55:
                    81:06:07:42:b0:91:a9:22:dc:96:91:bb:7b:7d:a5:
                    e1:bf:a2:36:c8:6a:c5:2c:7f:fe:80:62:9c:9d:39:
                    8c:1a:b0:5d:ce:f1:9a:ff:34:91:44:02:b7:96:38:
                    09:bc:c9:71:a7:c8:fa:3c:04:68:b1:73:d3:5a:38:
                    fd:79:d1:73:91:a4:26:b4:59:89:a9:85:52:01:95:
                    d8:1f:c0:1a:27:55:cd:9f:83:8d:83:19:63:05:fb:
                    92:8f:c1:16:a4:d9:d8:2e:c8:96:33:12:b7:b3:60:
                    bf:cb:7b:94:6f:32:ae:0c:a7:0d:f3:9f:8d:45:43:
                    66:7e:87:46:a9:50:28:07:57:1d:e7:12:84:51:fd:
                    a8:03:32:ad:c1:fe:35:8a:7d:a0:8b:fd:26:82:11:
                    65:b1:e0:7d:78:c0:19:35:26:65:01:00:6d:f5:a2:
                    a5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D9:D5:F4:46:B6:16:8C:7C:7A:08:49:43:B9:CE:2C:B9:AC:50:BC
            X509v3 Authority Key Identifier:
                keyid:1A:5B:7D:43:BB:4C:83:E7:C7:D9:7C:E0:75:43:A9:6D:74:C6:9F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ff:68:94:ed:e6:43:5c:15:8b:49:7e:61:31:9a:84:d0:b8:
         ba:62:1c:f2:e5:14:cb:2b:fd:4d:9b:c7:79:ef:48:3b:ce:ef:
         87:67:66:42:82:35:51:f8:25:73:af:bd:ac:72:92:f8:0e:2d:
         cc:3d:4c:5a:86:bc:54:82:02:a6:ee:cd:fc:ee:de:3e:a8:c7:
         d5:d9:93:de:f7:00:9d:83:0d:f7:d0:44:bd:99:a2:bb:e9:52:
         9c:ba:fb:10:8f:81:30:85:09:3b:ba:ec:63:78:33:c7:65:6d:
         81:05:e6:41:84:ec:e8:5b:ab:39:e6:e2:d4:f3:d6:53:d0:30:
         ca:d0:5b:ba:51:cd:b4:4b:e8:c7:09:66:84:d2:7f:9b:a6:c3:
         89:8d:ed:69:db:ed:0d:b9:57:1f:6a:ba:47:b9:72:0d:22:81:
         aa:fc:a2:6e:bf:5a:0e:fb:c9:c7:7b:d3:6e:4f:c1:e2:9d:57:
         de:a4:b8:74:b2:0c:b4:91:c4:06:bf:bc:85:86:cf:a2:b4:3d:
         cc:44:76:97:54:67:6f:d6:0b:2f:10:3d:2a:c2:14:f1:ab:9a:
         96:43:41:31:46:a8:c8:04:cc:90:50:1d:45:27:20:64:ed:86:
         e9:af:09:17:79:2c:2c:40:b3:bb:11:a3:69:92:a0:f7:bc:96:
         25:4b:94:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:38:04 2026 by rpki-client