Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
File:                     GbLh_EALv53LIGat49v-XJ6rLn0.mft (raw, json)
Hash identifier:          rrKGmjYWvXmRDsMQtMjoTpzgU0IenMWHI2obfZ7f9n4=
Subject key identifier:   72:1F:86:93:36:87:64:DA:83:0D:00:2A:32:9E:B5:D8:35:38:51:A8
Authority key identifier: 19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
Certificate issuer:       /CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Certificate serial:       019D371B787A9BE7985F4F1623B16A663A39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
Manifest number:          1166
Signing time:             Sun 29 Mar 2026 01:00:40 +0000
Manifest this update:     Sun 29 Mar 2026 01:00:40 +0000
Manifest next update:     Mon 30 Mar 2026 01:00:40 +0000
Files and hashes:         1: GbLh_EALv53LIGat49v-XJ6rLn0.crl (hash: BTbaS08PWY/kVMPbTa3EJa6wzcg2ZB6+QAnPjXPk390=)
                          2: ePI6xD2cfu7fzAdug0Km--LXZXw.roa (hash: A5otAx8dQYDetFTAWi3ze+gQMQ2WC4fRm0x+IwV20E0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:1b:78:7a:9b:e7:98:5f:4f:16:23:b1:6a:66:3a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
        Validity
            Not Before: Mar 29 01:00:40 2026 GMT
            Not After : Mar 30 01:00:40 2026 GMT
        Subject: CN=721f8693368764da830d002a329eb5d8353851a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ce:1a:59:9a:aa:5d:11:a9:49:bf:60:60:c9:
                    24:be:11:35:fb:7b:a8:2c:a1:b9:b6:af:db:6b:70:
                    a4:72:1f:6c:3a:34:c8:ba:10:25:b4:1f:2f:54:39:
                    14:de:ee:d3:f1:ba:cb:dc:46:c4:23:c3:a8:e7:da:
                    17:a8:64:cb:0b:c8:c3:04:c1:46:97:6a:f1:d3:89:
                    a2:10:54:67:c6:20:73:4c:b5:ee:28:d9:fb:48:40:
                    3c:ef:9f:d5:01:dd:eb:4f:8d:37:ed:40:f9:c7:29:
                    57:f0:74:60:bb:8e:06:73:f6:b4:17:4e:41:6b:9d:
                    51:75:9e:2b:c3:31:2d:b2:a9:12:f4:aa:f0:28:e3:
                    fb:30:f1:91:fb:86:ca:2f:43:be:8d:f8:f9:45:05:
                    6e:31:22:5c:2e:07:a3:e1:09:5f:52:13:e6:4d:2a:
                    43:fc:0c:2a:13:d6:b5:30:2b:2b:30:0b:e5:a2:a7:
                    97:a0:ce:55:a9:1a:c1:f6:eb:bc:ac:d8:93:93:ca:
                    2f:fb:db:61:46:5b:95:f0:a8:5d:ed:bf:ac:51:f0:
                    93:0d:1e:ac:41:e6:24:97:66:96:fa:81:9e:f8:e0:
                    f2:cf:06:dd:5f:a6:6f:4f:c2:2e:51:4f:2c:a1:39:
                    4c:70:ac:22:e8:ca:f0:6c:95:5f:09:b2:68:03:83:
                    67:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1F:86:93:36:87:64:DA:83:0D:00:2A:32:9E:B5:D8:35:38:51:A8
            X509v3 Authority Key Identifier:
                keyid:19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:94:54:ff:ab:7e:07:17:05:93:d6:4b:bb:4e:b6:22:bb:82:
         90:89:0f:fd:87:61:51:6e:c7:98:7b:00:44:db:95:b9:50:6b:
         20:02:60:c3:c4:19:3e:94:5c:29:d8:7b:75:a2:50:e5:27:e2:
         fc:92:d9:aa:81:fb:54:33:3f:f6:08:5e:b7:fe:4b:4a:57:82:
         7e:1d:66:8b:79:41:50:3f:37:d6:af:f5:b8:69:ef:61:e3:d5:
         c0:08:0b:24:f7:33:f4:c0:4a:1f:ed:e3:43:1f:62:ba:d8:9d:
         65:02:41:9a:9c:48:91:a2:ef:ed:0c:7e:6c:9c:50:00:bd:23:
         ec:27:19:bb:45:18:a3:30:2d:32:ec:d3:39:d2:d7:c3:d6:02:
         5d:d1:77:65:03:f2:7b:7f:d9:b6:01:0d:c3:c8:5a:57:bf:08:
         11:f9:cd:2c:3a:c4:aa:42:24:65:92:c6:5c:eb:59:02:d3:6d:
         dc:cc:2e:d3:fc:c4:18:30:8c:ba:a9:a5:be:30:3f:5b:f3:11:
         90:4c:f0:cb:29:bb:b4:44:54:99:83:5d:f3:f0:19:b3:df:82:
         2f:79:a1:8c:d8:9e:2a:ad:a5:73:4e:f0:4d:e4:3e:7f:00:4a:
         28:a9:97:46:9c:d3:48:86:05:f9:53:bb:53:82:59:d5:39:55:
         93:b7:d9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:39 2026 by rpki-client