Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft
File:                     GL7k74fvph6QWaCm44LeNxsnqkw.mft (raw, json)
Hash identifier:          PTciZgCxp1FKl7PQErNnMfybPFMQF/BgZlS/7gSrCRY=
Subject key identifier:   1A:64:A6:73:79:B6:2A:06:7A:C1:78:BD:4C:0B:ED:FE:2A:1E:6F:BE
Authority key identifier: 18:BE:E4:EF:87:EF:A6:1E:90:59:A0:A6:E3:82:DE:37:1B:27:AA:4C
Certificate issuer:       /CN=18bee4ef87efa61e9059a0a6e382de371b27aa4c
Certificate serial:       01A0024B35987823E2BD9C927750CC7D4064
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft
Manifest number:          02BE
Signing time:             Fri 14 Aug 2026 22:01:18 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:18 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:18 +0000
Files and hashes:         1: Fw6TrrKprUhHQ7LmRg72gkKzYfo.roa (hash: wOkfUq9QEg8uZcY5m7qfEesrjfuWcfYpWI1YJK2QRhs=)
                          2: GL7k74fvph6QWaCm44LeNxsnqkw.crl (hash: iCaWlRVzlOUuMHDJaGjp4V1rGE1DE7kzyJC7CE8CsOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 22:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:35:98:78:23:e2:bd:9c:92:77:50:cc:7d:40:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18bee4ef87efa61e9059a0a6e382de371b27aa4c
        Validity
            Not Before: Aug 14 22:01:18 2026 GMT
            Not After : Aug 15 22:01:18 2026 GMT
        Subject: CN=1a64a67379b62a067ac178bd4c0bedfe2a1e6fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:16:90:0f:81:fd:38:d3:cd:ae:96:50:51:5d:
                    81:d6:65:62:4f:e9:b0:27:3b:3c:62:56:c5:ad:2b:
                    60:6a:99:83:39:98:79:f3:db:06:ed:df:e9:96:37:
                    15:b9:83:1a:d9:64:2b:18:d2:2a:1e:62:2d:ab:62:
                    44:dc:fd:fa:46:32:b0:e2:a8:de:81:37:73:5a:3c:
                    81:99:a4:ec:c4:32:7a:38:bc:7b:d6:51:12:d0:46:
                    58:2d:79:c1:ab:6a:fc:88:31:c8:71:ec:f5:36:da:
                    f2:a7:f8:41:a4:e3:98:de:34:12:2a:5a:e8:be:7e:
                    29:41:fd:42:e4:33:d0:4d:57:3d:fb:30:48:31:72:
                    7b:8e:f8:71:06:fa:83:5f:43:c2:3b:a9:aa:55:2e:
                    4e:1d:03:59:ac:cf:68:d1:14:b2:ab:85:b7:c8:46:
                    e2:38:d8:85:d2:08:48:3d:82:78:d6:6f:95:3d:c5:
                    db:ab:3b:7c:58:d3:48:b3:54:cb:8f:08:1a:e0:3f:
                    d4:81:32:2d:63:9c:54:41:e5:59:b4:0b:6d:0b:dd:
                    1d:5f:fd:d7:1a:0d:20:db:5d:1a:8c:e6:2e:93:9c:
                    2b:96:63:5f:41:f9:17:c6:a9:9a:a8:5b:56:ac:60:
                    7e:18:d8:4f:04:1b:de:e3:39:e5:6f:fa:5a:0e:1e:
                    d9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:64:A6:73:79:B6:2A:06:7A:C1:78:BD:4C:0B:ED:FE:2A:1E:6F:BE
            X509v3 Authority Key Identifier:
                keyid:18:BE:E4:EF:87:EF:A6:1E:90:59:A0:A6:E3:82:DE:37:1B:27:AA:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ee:a3:56:26:e3:52:43:61:0b:8e:9a:ad:d2:ed:87:3a:41:
         8b:73:30:0e:86:e7:12:4a:ed:f2:5b:39:38:75:e0:44:72:81:
         cf:d4:39:5f:3c:84:ba:7f:b0:43:21:0b:c6:37:2e:8a:2f:d7:
         af:90:be:e3:c6:c0:f4:31:7a:a8:82:46:d9:41:06:82:e5:fa:
         e8:9f:d0:2a:ef:90:d4:ed:c0:91:06:e0:9f:1c:6f:53:30:69:
         6a:5a:a8:3f:47:15:a4:17:4a:94:e6:83:78:e7:57:2a:aa:b3:
         00:05:34:dd:9c:6e:06:3b:81:32:f8:77:df:0c:68:5d:b9:b5:
         3b:88:0a:8a:ae:b4:2e:e2:df:2c:9b:00:70:52:0c:0c:a1:b3:
         18:bb:c0:88:d1:84:2a:db:cc:cc:0d:f7:b7:b7:a7:99:d0:74:
         be:75:06:1b:37:87:d6:61:81:70:27:69:bf:ef:ae:9c:af:b1:
         ae:ed:0a:9b:a1:d6:f6:5c:18:cf:e2:ca:0f:d7:e5:d6:a2:b4:
         7e:25:d2:b6:d5:1b:f5:48:ef:87:1d:3d:c8:38:f9:7d:63:ef:
         91:85:8a:b1:f6:fb:e4:83:54:d1:dc:8d:d0:96:f3:a4:75:ec:
         03:b7:fb:6f:c6:3e:d6:ea:24:e2:6c:8a:93:0a:ab:6e:d8:52:
         a3:30:cb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:41:27 2026 by rpki-client