Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
File:                     GbLh_EALv53LIGat49v-XJ6rLn0.mft (raw, json)
Hash identifier:          YU6sahRVLvZ69UL9iSIxYwdBaGDV6V0ShoEIM0InoYc=
Subject key identifier:   B3:03:15:D2:12:4F:36:B7:A0:B2:7E:8E:11:73:68:25:A3:4D:4A:DD
Authority key identifier: 19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
Certificate issuer:       /CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Certificate serial:       01A151AD58FF1BEE926668D90D7A1814BB61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
Manifest number:          1386
Signing time:             Mon 19 Oct 2026 01:01:17 +0000
Manifest this update:     Mon 19 Oct 2026 01:01:17 +0000
Manifest next update:     Tue 20 Oct 2026 01:01:17 +0000
Files and hashes:         1: GbLh_EALv53LIGat49v-XJ6rLn0.crl (hash: W88Yl0oxq9z4CDVN+XVwnAWpE6CZj2gTwUiP8E6gXPM=)
                          2: ePI6xD2cfu7fzAdug0Km--LXZXw.roa (hash: A5otAx8dQYDetFTAWi3ze+gQMQ2WC4fRm0x+IwV20E0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:51:ad:58:ff:1b:ee:92:66:68:d9:0d:7a:18:14:bb:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
        Validity
            Not Before: Oct 19 01:01:17 2026 GMT
            Not After : Oct 20 01:01:17 2026 GMT
        Subject: CN=b30315d2124f36b7a0b27e8e11736825a34d4add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:a0:48:f7:df:3e:a0:e7:04:87:62:a7:67:
                    b2:84:78:c2:65:84:c6:eb:9a:33:1c:90:74:7b:f3:
                    81:6e:72:bb:87:44:0b:48:e4:05:dd:8a:30:3d:81:
                    a8:7f:80:6a:cf:af:1c:67:f8:bb:3e:34:e3:74:3a:
                    53:36:db:a7:51:64:82:d8:f1:0f:c9:87:74:7b:f9:
                    a5:4d:1e:5f:62:a2:0e:0a:0e:af:c7:5b:2d:ab:e3:
                    97:ec:c2:8c:eb:45:08:2f:fe:75:80:70:43:6b:8b:
                    91:49:94:63:9f:cf:67:d4:d8:b0:54:0a:be:7e:a2:
                    9b:24:17:37:47:5d:83:d6:8c:8c:1a:89:b6:10:9d:
                    14:63:0a:2b:de:f9:a8:7e:f8:f0:83:d8:be:d2:2c:
                    7c:40:f3:d6:07:e1:b4:9e:55:82:0c:ea:85:97:69:
                    4b:8f:49:7f:eb:44:1f:aa:7d:35:b6:ae:1d:b2:75:
                    28:75:74:c1:d8:16:87:a4:8e:b4:ee:56:f8:6a:ee:
                    76:70:17:38:00:e4:81:eb:b8:3a:2d:89:d9:da:a7:
                    70:3f:78:54:e4:f2:e9:bc:f9:74:d4:58:95:54:0e:
                    bf:0a:6c:01:66:f3:6e:48:c0:0a:d4:0f:e2:ab:df:
                    05:08:9e:0d:d0:b9:12:47:7c:62:c1:0d:17:f6:8b:
                    5d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:03:15:D2:12:4F:36:B7:A0:B2:7E:8E:11:73:68:25:A3:4D:4A:DD
            X509v3 Authority Key Identifier:
                keyid:19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:a0:b6:2e:7a:43:51:b5:bd:73:9c:27:2e:a9:72:40:bc:ba:
         0e:0f:2d:b9:81:13:e4:9e:bd:3d:ad:a4:c6:8f:2e:20:67:bf:
         e0:87:e5:9a:13:93:4b:cf:d8:7a:92:98:be:69:61:7e:12:ef:
         54:f6:75:19:6f:51:03:4b:8a:e0:a8:24:dc:ea:a3:a5:9e:55:
         bd:80:34:1e:a3:e5:8e:db:16:27:b9:12:69:59:b1:f9:4c:16:
         14:50:e9:60:2b:a4:8a:47:bb:5c:cd:b7:e3:a9:b3:95:4d:75:
         c3:91:a8:30:06:6f:2d:a6:21:34:93:27:4f:56:05:5c:f3:d6:
         d2:88:71:c3:e2:62:1d:1c:26:39:cf:fe:d0:3f:7c:d0:08:3f:
         30:00:de:d2:aa:48:e4:58:fe:79:ca:a5:5e:25:d8:1f:75:db:
         5f:50:30:ee:14:e2:89:6e:43:bd:31:47:cd:b8:f2:7d:4d:91:
         6a:29:89:cd:d1:21:18:bb:0f:12:99:39:b0:01:15:2e:2b:5c:
         56:ae:42:bb:b3:f3:9e:af:d8:24:a2:9b:5f:6a:2f:4e:f6:84:
         cf:c9:44:39:3c:4d:68:ad:dc:a9:8b:b1:91:64:46:da:78:a4:
         34:35:05:65:06:58:2a:59:7f:b8:1e:2f:04:ff:bc:99:ff:6a:
         25:04:49:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFRrVj/G+6SZmjZDXoYFLthMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YjJlMWZjNDAwYmJmOWRjYjIwNjZhZGUzZGJmZTVjOWVh
YjJlN2QwHhcNMjYxMDE5MDEwMTE3WhcNMjYxMDIwMDEwMTE3WjAzMTEwLwYDVQQD
EyhiMzAzMTVkMjEyNGYzNmI3YTBiMjdlOGUxMTczNjgyNWEzNGQ0YWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqumgSPffPqDnBIdip2eyhHjCZYTG
65ozHJB0e/OBbnK7h0QLSOQF3YowPYGof4Bqz68cZ/i7PjTjdDpTNtunUWSC2PEP
yYd0e/mlTR5fYqIOCg6vx1stq+OX7MKM60UIL/51gHBDa4uRSZRjn89n1NiwVAq+
fqKbJBc3R12D1oyMGom2EJ0UYwor3vmofvjwg9i+0ix8QPPWB+G0nlWCDOqFl2lL
j0l/60Qfqn01tq4dsnUodXTB2BaHpI607lb4au52cBc4AOSB67g6LYnZ2qdwP3hU
5PLpvPl01FiVVA6/CmwBZvNuSMAK1A/iq98FCJ4N0LkSR3xiwQ0X9otd5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMDFdISTza3oLJ+jhFzaCWjTUrdMB8GA1UdIwQY
MBaAFBmy4fxAC7+dyyBmrePb/lyeqy59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2JMaF9FQUx2NTNMSUdhdDQ5di1YSjZyTG4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iMmU1ODUtZjU4ZC00MjIwLThiZWYt
MGRhOWFlODQ1OGRiLzEvR2JMaF9FQUx2NTNMSUdhdDQ5di1YSjZyTG4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9iMmU1ODUtZjU4ZC00MjIwLThiZWYtMGRhOWFlODQ1OGRi
LzEvR2JMaF9FQUx2NTNMSUdhdDQ5di1YSjZyTG4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmaC2LnpD
UbW9c5wnLqlyQLy6Dg8tuYET5J69Pa2kxo8uIGe/4IflmhOTS8/YepKYvmlhfhLv
VPZ1GW9RA0uK4Kgk3OqjpZ5VvYA0HqPljtsWJ7kSaVmx+UwWFFDpYCukike7XM23
46mzlU11w5GoMAZvLaYhNJMnT1YFXPPW0ohxw+JiHRwmOc/+0D980Ag/MADe0qpI
5Fj+ecqlXiXYH3XbX1Aw7hTiiW5DvTFHzbjyfU2RaimJzdEhGLsPEpk5sAEVLitc
Vq5Cu7Pznq/YJKKbX2ovTvaEz8lEOTxNaK3cqYuxkWRG2nikNDUFZQZYKll/uB4v
BP+8mf9qJQRJWg==
-----END CERTIFICATE-----
Generated at Mon Oct 19 04:13:56 2026 by rpki-client