Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
File:                     Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft (raw, json)
Hash identifier:          LXk84X7mOH5Yyo+chDAUUGPRDyQZogmYwmW6bczuYLo=
Subject key identifier:   FC:48:DD:70:35:47:F6:5F:56:43:8C:D0:5B:32:5F:4F:42:13:73:08
Authority key identifier: 1A:5B:7D:43:BB:4C:83:E7:C7:D9:7C:E0:75:43:A9:6D:74:C6:9F:DA
Certificate issuer:       /CN=1a5b7d43bb4c83e7c7d97ce07543a96d74c69fda
Certificate serial:       0199221E3252360293F10E7CA569652A392A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
Manifest number:          10AF
Signing time:             Sun 07 Sep 2025 03:00:28 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:28 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:28 +0000
Files and hashes:         1: Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl (hash: hlJnjt/sXT4eIAq0atIwQb/7HVfKmraz3jlKYmDDGNM=)
                          2: H0COiaXg1EPyNKPDom-EUSSKISY.roa (hash: MIq94Fsgw9khyXovQNvHuap+wuDPe/60Pb4JAxZUi4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:32:52:36:02:93:f1:0e:7c:a5:69:65:2a:39:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5b7d43bb4c83e7c7d97ce07543a96d74c69fda
        Validity
            Not Before: Sep  7 03:00:28 2025 GMT
            Not After : Sep  8 03:00:28 2025 GMT
        Subject: CN=fc48dd703547f65f56438cd05b325f4f42137308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:79:d5:0b:f7:fd:61:f8:69:d5:19:38:f3:9d:
                    4f:ce:fc:e8:50:07:aa:e4:45:9d:23:44:d4:f9:3a:
                    9b:32:6c:b0:9d:fd:b2:ac:94:58:8b:b9:38:30:39:
                    5c:50:8b:c2:c3:e2:73:12:5f:b5:4b:6e:4b:e6:f2:
                    9e:1f:62:54:ba:d6:6b:1e:e9:67:36:55:ac:11:8a:
                    38:d5:84:93:1d:92:2a:a4:ae:5c:de:94:18:00:a6:
                    9c:53:47:a2:80:74:5c:ef:22:dd:cb:bc:55:82:6a:
                    e3:c0:42:04:ec:3f:94:78:40:61:c6:0d:95:03:fe:
                    9c:f9:62:5a:6e:04:8b:12:3a:26:a8:0f:11:66:88:
                    c4:16:a0:cf:44:9d:03:05:8c:cd:fe:41:a7:e0:cb:
                    d2:03:92:81:b1:97:0a:6c:8c:91:6a:b4:b1:db:4b:
                    cf:20:c7:77:7a:4c:bc:5b:7a:b3:a3:e5:33:39:f7:
                    73:3a:31:6a:fa:2b:50:aa:f9:62:f5:78:b8:eb:54:
                    ed:f5:9b:af:9c:a2:16:72:c2:e4:30:fd:1d:54:be:
                    3b:94:b4:0f:25:80:b4:d7:08:30:2d:e9:42:57:39:
                    63:3d:54:f2:19:99:66:0f:ae:d2:17:a8:69:7e:65:
                    a8:2b:f0:2a:78:3e:d2:3e:21:88:88:df:e6:fe:97:
                    62:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:48:DD:70:35:47:F6:5F:56:43:8C:D0:5B:32:5F:4F:42:13:73:08
            X509v3 Authority Key Identifier:
                keyid:1A:5B:7D:43:BB:4C:83:E7:C7:D9:7C:E0:75:43:A9:6D:74:C6:9F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:4b:6f:f0:b9:71:62:16:16:9b:37:bf:67:e1:6a:26:5c:6b:
         96:f4:6a:44:8f:b4:2c:18:d1:0d:70:80:16:e4:44:37:61:64:
         ae:c5:53:6d:f7:10:7b:bd:77:9a:ff:51:cb:94:88:e9:be:7c:
         7c:12:04:96:60:c0:22:80:b9:b0:5e:be:f7:1a:63:2c:47:d5:
         78:5a:4c:2d:01:1d:9d:74:9c:d9:5b:df:fd:f7:80:a7:a6:e5:
         ee:86:19:27:89:db:1f:5e:37:f7:d6:c7:19:eb:b5:b9:c7:17:
         2c:12:fd:06:1a:23:d2:82:5f:ab:55:6d:c0:a7:1a:14:06:87:
         27:00:67:ec:78:67:db:3e:2f:cf:c7:d2:47:24:81:04:23:51:
         84:66:89:3c:ea:3d:3f:c6:10:d1:ea:bb:a6:79:b3:a3:67:91:
         9d:93:a2:de:4d:c9:89:2b:62:a2:31:35:44:bf:1f:06:0b:2b:
         f4:22:fb:8d:fe:59:e9:6d:e2:f5:3d:dc:6f:1b:0a:15:15:f3:
         02:76:50:3c:b4:4e:46:0e:f5:ad:13:be:1a:c5:9c:e2:c4:fd:
         73:df:fe:e4:a1:c2:80:42:b4:c6:22:f1:60:28:40:b4:0a:bf:
         cd:f2:06:14:ca:45:68:3a:ce:14:db:89:3b:c1:06:51:f3:a8:
         ef:79:01:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:23 2025 by rpki-client