Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft
File:                     GL7k74fvph6QWaCm44LeNxsnqkw.mft (raw, json)
Hash identifier:          aOM6HSTKltmKaguEKYxSwlFqtbB8igbs0OiL6gSUmTg=
Subject key identifier:   10:A8:21:C2:CF:10:97:9D:15:AC:AF:6C:B2:ED:DE:FE:73:9F:43:04
Authority key identifier: 18:BE:E4:EF:87:EF:A6:1E:90:59:A0:A6:E3:82:DE:37:1B:27:AA:4C
Certificate issuer:       /CN=18bee4ef87efa61e9059a0a6e382de371b27aa4c
Certificate serial:       019D37C05F48BF8857BE2D463EDAAB9B1BBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft
Manifest number:          014C
Signing time:             Sun 29 Mar 2026 04:00:47 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:47 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:47 +0000
Files and hashes:         1: Fw6TrrKprUhHQ7LmRg72gkKzYfo.roa (hash: wOkfUq9QEg8uZcY5m7qfEesrjfuWcfYpWI1YJK2QRhs=)
                          2: GL7k74fvph6QWaCm44LeNxsnqkw.crl (hash: +jp8RloQlZOpyCTzEEbJZgUzWoGyFMFNhbXt3QKzMfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:5f:48:bf:88:57:be:2d:46:3e:da:ab:9b:1b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18bee4ef87efa61e9059a0a6e382de371b27aa4c
        Validity
            Not Before: Mar 29 04:00:47 2026 GMT
            Not After : Mar 30 04:00:47 2026 GMT
        Subject: CN=10a821c2cf10979d15acaf6cb2eddefe739f4304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3a:87:2f:1e:36:8b:ae:c7:c1:29:ae:85:48:
                    49:39:69:20:06:16:3d:8b:e7:f4:fd:7b:aa:82:82:
                    54:5a:ec:ab:a1:e4:b6:16:b1:ee:49:23:76:aa:93:
                    50:1d:e2:da:89:60:d7:40:ef:d5:77:66:26:08:fa:
                    05:aa:a1:78:dd:90:8b:0c:52:91:0e:41:98:0a:7e:
                    22:b1:7c:e8:14:e2:9b:d2:f6:59:cf:0a:58:19:d7:
                    46:ed:49:e0:8c:53:a2:7c:66:0f:ff:3a:5e:cc:90:
                    b3:12:9b:6b:7e:bc:22:74:d9:37:ed:5f:63:25:a7:
                    99:0b:e4:91:05:62:79:2d:15:8e:42:06:0a:10:77:
                    ef:06:a5:d0:47:57:d2:dd:ce:e1:ce:5a:89:a5:45:
                    cc:ee:db:27:b6:f0:c4:b5:69:91:2b:35:e1:96:49:
                    c7:45:c9:db:44:03:ca:59:96:58:a7:7c:bc:64:e9:
                    d0:45:6c:4e:ec:da:0b:67:18:b2:a2:f3:cb:a3:8f:
                    2a:b6:60:18:db:db:6e:ad:6d:1e:08:6a:49:5e:53:
                    40:12:bc:f9:24:3c:dd:7f:29:2f:a2:9d:ba:78:d7:
                    e7:25:57:60:ab:b2:a7:f4:cf:8b:a4:08:4d:58:ea:
                    ec:c1:0a:e4:53:af:2a:73:af:4a:5d:81:79:f3:e2:
                    5c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A8:21:C2:CF:10:97:9D:15:AC:AF:6C:B2:ED:DE:FE:73:9F:43:04
            X509v3 Authority Key Identifier:
                keyid:18:BE:E4:EF:87:EF:A6:1E:90:59:A0:A6:E3:82:DE:37:1B:27:AA:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:1d:7f:ee:08:62:2b:47:d7:1c:a1:47:2d:dd:98:73:d3:63:
         aa:22:38:16:02:02:64:c0:be:c8:ad:e6:9a:34:46:5d:71:6e:
         b7:f5:e4:87:62:03:18:e2:c0:41:30:7c:32:48:e9:c4:c5:65:
         1c:d3:1b:ac:48:00:88:39:05:55:84:74:bc:da:84:dd:52:2d:
         26:f2:3c:0f:51:90:75:62:7e:13:5a:23:34:9f:80:1a:de:95:
         da:52:9d:e6:f6:52:64:63:58:5a:3f:60:57:5e:8e:66:b6:21:
         db:fc:f3:3d:19:dd:0b:3c:6b:92:ce:7f:0a:7b:e9:8d:71:22:
         a4:f1:46:ac:cb:ef:ef:5f:69:66:47:34:50:17:a6:83:e7:d1:
         03:1e:26:6c:cc:af:d2:32:6f:7b:bb:39:f0:6e:39:42:ab:23:
         ee:82:55:04:cb:05:e1:51:f8:17:4c:02:63:4b:30:24:1b:dc:
         7c:d6:d6:56:18:73:b1:27:9e:ab:c1:ae:3c:db:96:e3:c2:80:
         52:0d:8f:b3:ae:0f:21:6d:61:e3:61:0b:43:34:38:a7:70:a5:
         fd:cc:58:7c:39:37:91:94:13:4f:a1:f9:ea:c9:bb:b1:ca:1e:
         8b:55:9f:5f:c8:57:1a:54:7d:57:79:df:fc:d8:e0:db:3b:9b:
         8c:d2:a5:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wF9Iv4hXvi1GPtqrmxu9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YmVlNGVmODdlZmE2MWU5MDU5YTBhNmUzODJkZTM3MWIy
N2FhNGMwHhcNMjYwMzI5MDQwMDQ3WhcNMjYwMzMwMDQwMDQ3WjAzMTEwLwYDVQQD
EygxMGE4MjFjMmNmMTA5NzlkMTVhY2FmNmNiMmVkZGVmZTczOWY0MzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTqHLx42i67HwSmuhUhJOWkgBhY9
i+f0/XuqgoJUWuyroeS2FrHuSSN2qpNQHeLaiWDXQO/Vd2YmCPoFqqF43ZCLDFKR
DkGYCn4isXzoFOKb0vZZzwpYGddG7UngjFOifGYP/zpezJCzEptrfrwidNk37V9j
JaeZC+SRBWJ5LRWOQgYKEHfvBqXQR1fS3c7hzlqJpUXM7tsntvDEtWmRKzXhlknH
RcnbRAPKWZZYp3y8ZOnQRWxO7NoLZxiyovPLo48qtmAY29turW0eCGpJXlNAErz5
JDzdfykvop26eNfnJVdgq7Kn9M+LpAhNWOrswQrkU68qc69KXYF58+JcgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCoIcLPEJedFayvbLLt3v5zn0MEMB8GA1UdIwQY
MBaAFBi+5O+H76YekFmgpuOC3jcbJ6pMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0w3azc0ZnZwaDZRV2FDbTQ0TGVOeHNucWt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS80YTRkNDItNDQzYy00NzFkLWExNTMt
MTMyODg1YzkwMmIxLzEvR0w3azc0ZnZwaDZRV2FDbTQ0TGVOeHNucWt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS80YTRkNDItNDQzYy00NzFkLWExNTMtMTMyODg1YzkwMmIx
LzEvR0w3azc0ZnZwaDZRV2FDbTQ0TGVOeHNucWt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALR1/7ghi
K0fXHKFHLd2Yc9NjqiI4FgICZMC+yK3mmjRGXXFut/Xkh2IDGOLAQTB8MkjpxMVl
HNMbrEgAiDkFVYR0vNqE3VItJvI8D1GQdWJ+E1ojNJ+AGt6V2lKd5vZSZGNYWj9g
V16OZrYh2/zzPRndCzxrks5/CnvpjXEipPFGrMvv719pZkc0UBemg+fRAx4mbMyv
0jJve7s58G45Qqsj7oJVBMsF4VH4F0wCY0swJBvcfNbWVhhzsSeeq8GuPNuW48KA
Ug2Ps64PIW1h42ELQzQ4p3Cl/cxYfDk3kZQTT6H56sm7scoei1WfX8hXGlR9V3nf
/Njg2zubjNKlIw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:52 2026 by rpki-client