Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft
File:                     GL7k74fvph6QWaCm44LeNxsnqkw.mft (raw, json)
Hash identifier:          3Rn0AWlMDcw15cI7eB5eHTD27IM3JjZoe/T4vtR5uMQ=
Subject key identifier:   E7:E0:97:75:C7:36:E5:F6:90:69:4E:E9:1E:93:EA:61:E8:4E:4B:AF
Authority key identifier: 18:BE:E4:EF:87:EF:A6:1E:90:59:A0:A6:E3:82:DE:37:1B:27:AA:4C
Certificate issuer:       /CN=18bee4ef87efa61e9059a0a6e382de371b27aa4c
Certificate serial:       019E30E05CF7330EBCBCDD0DCE99C782CA91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft
Manifest number:          01CD
Signing time:             Sat 16 May 2026 13:01:10 +0000
Manifest this update:     Sat 16 May 2026 13:01:10 +0000
Manifest next update:     Sun 17 May 2026 13:01:10 +0000
Files and hashes:         1: Fw6TrrKprUhHQ7LmRg72gkKzYfo.roa (hash: wOkfUq9QEg8uZcY5m7qfEesrjfuWcfYpWI1YJK2QRhs=)
                          2: GL7k74fvph6QWaCm44LeNxsnqkw.crl (hash: Efkufu9FhnbPMg+LVvKhaZHausamAQuD9JWJZhghuIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:5c:f7:33:0e:bc:bc:dd:0d:ce:99:c7:82:ca:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18bee4ef87efa61e9059a0a6e382de371b27aa4c
        Validity
            Not Before: May 16 13:01:10 2026 GMT
            Not After : May 17 13:01:10 2026 GMT
        Subject: CN=e7e09775c736e5f690694ee91e93ea61e84e4baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:24:51:37:65:a1:62:36:21:13:7c:fe:c5:6e:
                    ac:ee:10:c2:5a:3c:31:b8:4c:15:6c:28:96:44:ac:
                    7a:7f:bb:7e:00:49:61:34:f6:ba:a8:2c:8c:4b:53:
                    5f:76:f9:57:e6:86:f8:db:7b:2b:ad:db:72:bd:5b:
                    06:d9:82:5e:6d:56:c5:7a:b9:3c:dc:d5:f3:82:57:
                    cb:19:5a:0d:aa:e9:5d:dd:bc:cd:a7:47:15:99:8f:
                    82:af:d0:78:0c:9d:ca:9b:61:66:80:1e:fb:5a:4d:
                    12:bc:0a:e7:5c:13:aa:91:f5:a6:48:72:e7:b0:0c:
                    94:4f:1f:99:cd:ea:0d:dd:27:b7:f4:96:0f:b3:d7:
                    a6:12:2a:6a:63:a6:7f:ba:89:23:3b:b3:70:67:b3:
                    f7:e7:94:3c:42:0c:02:bf:74:68:8a:ac:50:42:5c:
                    36:40:d0:81:aa:1e:1e:11:a5:30:fb:18:bb:4c:70:
                    f6:be:7c:69:1d:75:da:b6:3b:53:91:9d:db:30:14:
                    d4:ff:49:0c:65:d0:81:7f:67:11:d3:c2:f3:f7:3a:
                    cc:13:4a:8a:fe:d2:96:fc:0d:16:9e:92:84:20:77:
                    8c:61:56:16:5c:8b:0d:4a:95:d2:cc:54:7c:3a:6e:
                    59:1c:9f:a0:8f:5d:d0:91:57:16:30:e0:83:d7:79:
                    c6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E0:97:75:C7:36:E5:F6:90:69:4E:E9:1E:93:EA:61:E8:4E:4B:AF
            X509v3 Authority Key Identifier:
                keyid:18:BE:E4:EF:87:EF:A6:1E:90:59:A0:A6:E3:82:DE:37:1B:27:AA:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:e9:22:e2:0a:6e:11:01:d2:ec:00:30:dd:c7:9e:f9:04:2a:
         b4:30:b4:62:3a:f6:c6:d3:60:35:88:a1:c9:26:80:23:ed:8b:
         d3:88:7b:88:7e:cc:fb:38:f3:7d:f8:65:3b:9e:4a:af:45:7c:
         d9:f7:9e:17:fb:d3:a9:b0:67:d0:3d:da:75:c5:a4:f6:d5:5a:
         b0:b2:35:3a:dc:1a:dd:3c:4d:8d:b0:ba:6b:23:36:28:57:cf:
         8c:ad:b7:4b:1b:f9:f8:13:00:15:c0:fe:df:45:42:bc:48:56:
         f2:0a:b7:39:a8:c9:a5:ec:10:c2:ac:c5:8c:00:32:d6:72:d7:
         62:8f:ba:b7:6c:56:f3:cd:27:4a:5b:65:43:b2:aa:40:0e:da:
         73:89:9d:9b:b4:40:fa:da:55:41:27:b1:ec:64:8b:ef:c6:43:
         6e:38:9d:25:97:41:16:f3:be:f6:fb:04:7a:67:cc:24:e8:36:
         97:64:58:1c:80:55:3e:4f:07:bc:94:d4:20:f0:24:c3:3b:f5:
         6f:d2:35:81:b4:9e:b1:88:72:62:15:b1:1a:0c:e3:06:97:c9:
         b8:74:b2:33:0b:06:11:08:09:f8:de:2b:21:f7:f3:84:71:4d:
         22:34:5d:58:f0:92:b8:df:46:0f:52:c7:72:b3:6a:8f:01:2f:
         72:93:be:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:27 2026 by rpki-client