Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
File:                     GbLh_EALv53LIGat49v-XJ6rLn0.mft (raw, json)
Hash identifier:          4dpVUsFrQOUdcXYij3Iay4Po8eE/nNc65cWlGy4IlM4=
Subject key identifier:   C9:50:D4:B3:02:D9:A7:D6:4A:8B:02:F9:99:6C:15:9B:8F:4C:A1:8D
Authority key identifier: 19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
Certificate issuer:       /CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Certificate serial:       019F19E7D8607783E9291C2DB91064356241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
Manifest number:          1260
Signing time:             Tue 30 Jun 2026 19:00:52 +0000
Manifest this update:     Tue 30 Jun 2026 19:00:52 +0000
Manifest next update:     Wed 01 Jul 2026 19:00:52 +0000
Files and hashes:         1: GbLh_EALv53LIGat49v-XJ6rLn0.crl (hash: SVOwFJXctUKCZY1ta6+v6jVGJUHTeh8ENmafK/vyKgM=)
                          2: ePI6xD2cfu7fzAdug0Km--LXZXw.roa (hash: A5otAx8dQYDetFTAWi3ze+gQMQ2WC4fRm0x+IwV20E0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:e7:d8:60:77:83:e9:29:1c:2d:b9:10:64:35:62:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
        Validity
            Not Before: Jun 30 19:00:52 2026 GMT
            Not After : Jul  1 19:00:52 2026 GMT
        Subject: CN=c950d4b302d9a7d64a8b02f9996c159b8f4ca18d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d5:51:94:01:a0:42:63:46:6b:04:bc:3a:4c:
                    a9:50:f5:f6:35:7f:7a:b5:a9:d4:8c:83:ce:fe:61:
                    7e:8b:94:b2:ea:68:ef:b0:9c:05:b9:40:9a:42:34:
                    00:97:03:f8:d1:75:9e:53:ec:b4:5b:71:7d:7b:c1:
                    10:71:70:38:e8:8f:af:99:d5:b5:b2:0d:81:12:cf:
                    d5:39:7a:f3:b3:b4:a7:71:32:0c:04:9d:6f:fa:26:
                    c3:ca:ec:0e:2a:18:8b:96:a6:36:17:a0:30:24:01:
                    7f:8f:1e:8b:21:16:84:89:6b:54:aa:34:2a:49:0e:
                    25:e7:15:86:40:11:bf:9a:13:2e:f9:f2:87:3f:da:
                    e0:27:15:41:d3:10:fe:cf:46:64:a0:6f:a8:cd:10:
                    df:ab:e4:9a:3f:c7:a2:e4:fc:ef:4f:98:38:c3:a9:
                    c0:7e:a8:9f:00:0f:31:39:37:9a:4b:4d:05:a5:45:
                    a5:3b:0f:8c:f9:26:52:fb:db:4f:67:25:18:11:a0:
                    20:48:93:0f:ae:fd:21:39:7a:ed:2f:5b:90:0d:a7:
                    4f:67:21:d6:24:af:ba:66:39:93:6c:05:91:dd:88:
                    ae:d3:c0:e9:fb:2f:27:d9:a1:09:55:9f:b6:40:0a:
                    16:42:8a:f3:de:6c:0b:51:66:15:00:d5:9f:3f:ae:
                    c5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:50:D4:B3:02:D9:A7:D6:4A:8B:02:F9:99:6C:15:9B:8F:4C:A1:8D
            X509v3 Authority Key Identifier:
                keyid:19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:83:a6:ab:16:76:db:97:94:a0:e7:71:a0:71:63:08:56:63:
         f2:ec:ad:f5:85:43:02:a8:58:a5:1a:e0:9b:9e:1d:17:d3:42:
         ef:c0:ad:9f:fe:65:2a:67:3c:26:4b:df:96:e0:bd:6f:53:eb:
         a0:35:f1:4a:35:1e:d1:c3:38:3f:10:c1:a7:15:4b:2b:08:95:
         3f:1c:67:e6:2e:32:41:78:76:38:e9:89:81:c5:2d:01:72:87:
         24:42:05:ef:51:1f:9a:6a:ca:5a:3c:63:fc:09:36:97:df:8b:
         20:04:5e:6c:3a:08:2d:d2:83:01:05:a7:69:42:1f:bd:9e:e0:
         69:5e:d0:69:0f:69:ca:9d:ce:e3:85:f8:0e:7b:50:ef:09:98:
         c5:1f:71:b9:a5:1b:c9:cd:b3:10:e2:8d:9b:13:6b:ec:1d:b4:
         fb:ce:b4:f4:9e:36:42:c2:24:c4:44:7e:a5:f3:a7:a7:69:41:
         46:f1:0f:33:0f:09:a9:1c:fe:8f:91:c6:ca:24:f8:f5:6d:11:
         e9:cb:65:b9:dc:2e:ac:7a:35:c7:d1:fa:9f:b0:2d:9c:b0:e8:
         be:a6:62:74:a0:a2:fa:e3:68:47:60:d6:0e:47:ec:12:c8:4b:
         1f:ca:74:3b:86:b3:e2:39:60:2b:38:44:b9:5b:cf:99:ce:e0:
         71:b7:38:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:33 2026 by rpki-client