Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
File:                     GlN6DAozEJGzByU8bwfo-ChU5rA.mft (raw, json)
Hash identifier:          biUD4snSWeqtlJjoOhyX8dHWi9+26QwRWHQlJtu+s/M=
Subject key identifier:   71:82:34:7A:C7:7C:09:97:9F:95:83:EB:BF:A2:D7:99:4C:DD:10:58
Authority key identifier: 1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0
Certificate issuer:       /CN=1a537a0c0a331091b307253c6f07e8f82854e6b0
Certificate serial:       01A08B67F65B0AD0462F1783BB42007E915A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
Manifest number:          1A49
Signing time:             Thu 10 Sep 2026 13:00:41 +0000
Manifest this update:     Thu 10 Sep 2026 13:00:41 +0000
Manifest next update:     Fri 11 Sep 2026 13:00:41 +0000
Files and hashes:         1: 3o9USRveK81MSe2kQ4zc3sxEt9w.roa (hash: IFKuL1PDKwNZHcGFxJk8ylaICmG+MyPGR58awe6xsGU=)
                          2: GlN6DAozEJGzByU8bwfo-ChU5rA.crl (hash: 4sxqE6tcoPsUZY6S59G69+TDBuOtyM2C3H8hCWDvR1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 13:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:67:f6:5b:0a:d0:46:2f:17:83:bb:42:00:7e:91:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a537a0c0a331091b307253c6f07e8f82854e6b0
        Validity
            Not Before: Sep 10 13:00:41 2026 GMT
            Not After : Sep 11 13:00:41 2026 GMT
        Subject: CN=7182347ac77c09979f9583ebbfa2d7994cdd1058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:4a:5f:8b:56:3e:17:f2:3d:35:0b:a9:9f:
                    23:1e:71:9c:0b:51:55:97:65:4b:a7:48:1b:1c:6a:
                    20:e1:06:17:e8:d2:cb:a9:98:0f:84:12:0d:ff:c0:
                    1c:c3:e4:29:2e:d7:3a:85:9b:c9:a4:56:b6:30:46:
                    10:94:3d:9c:a5:32:6b:79:84:53:35:a5:07:55:2e:
                    7f:d9:0a:4f:57:85:3a:29:fa:5c:40:ef:b5:a9:fb:
                    22:5f:cf:bf:e5:4c:aa:b2:27:ca:d2:b5:cb:ff:a8:
                    7c:b5:28:dc:22:f8:4f:a4:88:3b:8c:f1:70:2c:b9:
                    63:05:ee:19:1f:72:5e:08:62:a8:37:05:75:14:58:
                    40:bf:77:cf:14:6f:a8:a2:f0:4c:bd:e1:ad:a4:35:
                    cf:07:fa:46:fa:ae:60:eb:c3:3f:03:5f:ba:35:9e:
                    b8:39:c2:37:b8:a4:db:99:dd:90:a6:c1:56:47:9d:
                    8f:de:b7:f4:16:46:04:fe:99:22:73:8e:88:46:24:
                    9f:23:21:17:f3:fd:eb:b2:6e:ba:3e:27:cc:66:55:
                    c8:f3:df:74:c3:dd:8a:46:36:3d:17:ab:69:bd:6a:
                    52:41:62:4e:1c:10:67:87:33:7b:39:35:15:d6:f4:
                    f9:57:11:53:98:9d:e4:30:a4:0d:bb:5e:54:61:80:
                    58:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:82:34:7A:C7:7C:09:97:9F:95:83:EB:BF:A2:D7:99:4C:DD:10:58
            X509v3 Authority Key Identifier:
                keyid:1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:39:a2:5f:4f:e7:8a:2f:53:eb:29:84:a2:73:02:6c:07:29:
         e2:57:11:89:b8:d6:0d:99:ce:1d:b9:29:7a:6c:bc:c6:b2:b2:
         0e:6b:b4:27:38:0f:21:2c:90:eb:e1:8a:d5:dd:a0:de:1f:8b:
         55:82:32:df:d2:28:d9:c5:69:f3:a6:98:43:07:3f:17:97:4a:
         26:62:7d:c0:41:53:01:f1:04:c8:a1:4c:32:14:29:0b:70:65:
         e0:d1:a5:88:05:f7:b0:c0:95:33:12:ed:7d:b2:2d:0f:99:03:
         b3:f6:f1:96:32:16:e1:80:ea:90:33:00:72:12:6c:ee:ad:09:
         41:0b:f5:6d:0d:15:ca:f4:b8:eb:3d:5d:a3:8e:2a:ce:41:49:
         b5:c6:e3:9f:48:59:d3:c5:aa:c8:42:4c:5a:bd:3b:14:a5:92:
         ee:0d:f1:d2:c3:d2:f1:2a:02:98:4f:09:fe:1a:44:00:53:af:
         5e:37:e9:2f:85:23:9f:71:97:16:d6:90:f5:66:50:13:6e:8c:
         a9:5c:27:c4:35:30:46:34:5b:60:c9:68:a4:2d:9b:1b:d0:93:
         9d:6c:9d:f0:4b:aa:77:fe:97:d8:65:11:42:f4:96:7a:e7:99:
         2b:97:6e:79:d4:21:f9:73:81:db:e2:6e:57:3c:de:01:26:1f:
         48:36:5f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:07:04 2026 by rpki-client