Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
File:                     glLEw3Iyf9wsF7SVuFiRp23kJRA.mft (raw, json)
Hash identifier:          08mcrt+IflX/7+Nqbi/ak2Xt+A5OuYhbdZ92j7SBWXA=
Subject key identifier:   7F:96:FF:59:65:59:6B:35:07:BE:AA:07:97:81:43:12:3E:36:6A:9B
Authority key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
Certificate issuer:       /CN=8252c4c372327fdc2c17b495b85891a76de42510
Certificate serial:       01A08F44E10E031A96505DF1B9370A721DF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
Manifest number:          0910
Signing time:             Fri 11 Sep 2026 07:00:50 +0000
Manifest this update:     Fri 11 Sep 2026 07:00:50 +0000
Manifest next update:     Sat 12 Sep 2026 07:00:50 +0000
Files and hashes:         1: glLEw3Iyf9wsF7SVuFiRp23kJRA.crl (hash: 1yZY6YjiFSQb2A0aIcb0RiEPjaDP6qjtmQoaTSIz3NU=)
                          2: z8hJl8rGyd_56TuV5GLYx9xFhho.roa (hash: XAMtoMHmL3C5zB92ZcL52Exd5SlTcXF5KJm8ioosamE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8f:44:e1:0e:03:1a:96:50:5d:f1:b9:37:0a:72:1d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8252c4c372327fdc2c17b495b85891a76de42510
        Validity
            Not Before: Sep 11 07:00:50 2026 GMT
            Not After : Sep 12 07:00:50 2026 GMT
        Subject: CN=7f96ff5965596b3507beaa07978143123e366a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:14:41:64:f8:e4:d3:9a:14:fa:cf:26:49:d3:
                    09:cb:e1:c7:67:a7:a9:8b:3b:9d:ef:de:a8:78:37:
                    3b:fb:ba:e0:04:76:f4:80:8b:a2:11:32:ea:33:41:
                    ff:40:af:04:bd:38:7d:8c:f9:d5:9c:6c:67:e8:0c:
                    5e:29:7b:4c:f0:9c:ae:f9:ef:5d:47:cc:95:52:ae:
                    c7:80:59:15:76:71:3c:ba:b2:8b:e3:4d:42:d5:79:
                    f4:5d:86:d7:6e:af:8b:18:50:ad:8e:69:35:ad:94:
                    e3:c8:a3:20:a2:7a:e4:e8:68:c0:fb:ce:6f:3a:5b:
                    9e:63:16:91:8e:43:b1:f1:b8:67:3a:a4:57:29:67:
                    04:e1:e4:c6:9c:cb:cc:3e:83:62:7d:0e:aa:3f:ad:
                    8b:0e:bc:bf:75:df:a0:5e:bb:63:4f:73:d8:bf:08:
                    44:23:9b:e7:9a:d5:22:8e:7c:2a:25:20:c4:ac:81:
                    64:bc:f8:c8:96:5a:52:5f:64:90:d3:6a:b0:ed:cb:
                    74:cc:06:cb:17:73:50:5a:f7:b5:20:65:c3:0f:cb:
                    0e:eb:13:99:4e:6e:35:68:81:20:ab:55:70:47:b4:
                    a0:29:19:4f:c4:b9:35:ff:e2:52:ba:3f:32:26:04:
                    67:e8:63:99:9b:6f:77:c5:8a:64:e2:37:e5:f7:a5:
                    16:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:96:FF:59:65:59:6B:35:07:BE:AA:07:97:81:43:12:3E:36:6A:9B
            X509v3 Authority Key Identifier:
                keyid:82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:f0:33:43:d5:a1:84:f5:e9:53:ab:03:ef:6a:48:a8:ad:f2:
         82:cd:7e:2a:e2:a0:65:9e:b5:ce:30:80:0d:b2:b2:48:61:e3:
         72:0f:fd:7c:10:8a:e4:db:b9:08:4b:fa:13:b2:2f:9d:c1:9f:
         b6:71:67:c7:3d:55:8e:48:13:f2:64:75:ab:ea:2d:44:c4:40:
         8a:52:e3:a8:56:33:83:33:8b:d2:a6:01:bb:d3:56:0a:0f:60:
         8f:a1:51:80:c7:97:d4:a6:f7:b1:70:df:80:8c:99:63:de:41:
         93:91:39:ae:ed:4e:35:5a:83:80:9a:16:cc:2e:3d:53:c3:79:
         df:fa:35:79:8c:db:53:e2:34:95:3d:e9:b3:58:6a:93:8a:2f:
         71:5e:13:33:6a:d1:87:15:01:6a:4e:2e:ac:10:f8:5a:22:cd:
         b3:80:ba:e9:5f:56:4f:f3:10:02:42:6f:0f:53:00:23:98:3d:
         88:8d:95:77:0d:54:12:38:52:1f:34:76:aa:45:c0:32:39:ad:
         b2:11:30:10:ae:de:36:c7:bb:e7:ea:78:6e:ea:4f:2e:35:c2:
         bc:3f:e1:03:75:30:71:06:62:f0:29:3e:78:ca:21:be:a7:a6:
         cc:fa:ba:01:7f:20:af:08:dc:78:a5:73:b9:9b:b3:ab:ae:74:
         30:e4:fa:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCPROEOAxqWUF3xuTcKch3zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNTJjNGMzNzIzMjdmZGMyYzE3YjQ5NWI4NTg5MWE3NmRl
NDI1MTAwHhcNMjYwOTExMDcwMDUwWhcNMjYwOTEyMDcwMDUwWjAzMTEwLwYDVQQD
Eyg3Zjk2ZmY1OTY1NTk2YjM1MDdiZWFhMDc5NzgxNDMxMjNlMzY2YTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxRBZPjk05oU+s8mSdMJy+HHZ6ep
izud796oeDc7+7rgBHb0gIuiETLqM0H/QK8EvTh9jPnVnGxn6AxeKXtM8Jyu+e9d
R8yVUq7HgFkVdnE8urKL401C1Xn0XYbXbq+LGFCtjmk1rZTjyKMgonrk6GjA+85v
OlueYxaRjkOx8bhnOqRXKWcE4eTGnMvMPoNifQ6qP62LDry/dd+gXrtjT3PYvwhE
I5vnmtUijnwqJSDErIFkvPjIllpSX2SQ02qw7ct0zAbLF3NQWve1IGXDD8sO6xOZ
Tm41aIEgq1VwR7SgKRlPxLk1/+JSuj8yJgRn6GOZm293xYpk4jfl96UWFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+W/1llWWs1B76qB5eBQxI+NmqbMB8GA1UdIwQY
MBaAFIJSxMNyMn/cLBe0lbhYkadt5CUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2xMRXczSXlmOXdzRjdTVnVGaVJwMjNrSlJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82YzQ1MzItMDdkOC00ZGIzLTliNTUt
ZmVlMWQwMmYxMzAzLzEvZ2xMRXczSXlmOXdzRjdTVnVGaVJwMjNrSlJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy82YzQ1MzItMDdkOC00ZGIzLTliNTUtZmVlMWQwMmYxMzAz
LzEvZ2xMRXczSXlmOXdzRjdTVnVGaVJwMjNrSlJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPAzQ9Wh
hPXpU6sD72pIqK3ygs1+KuKgZZ61zjCADbKySGHjcg/9fBCK5Nu5CEv6E7IvncGf
tnFnxz1VjkgT8mR1q+otRMRAilLjqFYzgzOL0qYBu9NWCg9gj6FRgMeX1Kb3sXDf
gIyZY95Bk5E5ru1ONVqDgJoWzC49U8N53/o1eYzbU+I0lT3ps1hqk4ovcV4TM2rR
hxUBak4urBD4WiLNs4C66V9WT/MQAkJvD1MAI5g9iI2Vdw1UEjhSHzR2qkXAMjmt
shEwEK7eNse75+p4bupPLjXCvD/hA3UwcQZi8Ck+eMohvqemzPq6AX8grwjceKVz
uZuzq650MOT6eg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 09:13:11 2026 by rpki-client