Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
File:                     glNFBYRfoKk_goWm2ovObR1yAN0.mft (raw, json)
Hash identifier:          77Ws9zBlukCNYD7tkIRZDti0v8yIQ1IlXglEvjRWfNY=
Subject key identifier:   2B:BE:17:BC:B9:23:47:F0:FC:65:16:17:38:D5:DF:33:29:68:31:85
Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
Certificate issuer:       /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Certificate serial:       019E9C9783767244FAFF687E795306E60899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
Manifest number:          1029
Signing time:             Sat 06 Jun 2026 11:00:35 +0000
Manifest this update:     Sat 06 Jun 2026 11:00:35 +0000
Manifest next update:     Sun 07 Jun 2026 11:00:35 +0000
Files and hashes:         1: glNFBYRfoKk_goWm2ovObR1yAN0.crl (hash: 0w93D7E4dvIF5IuGXnY2jcNBHJScG7tg9ygdzKKWSPk=)
                          2: t6uJnjT04JxAMbhWunFCrGch9dE.roa (hash: ipX6tbTTZfYSopPgMvzN1VwXoXH9Z4uS/A5CMI0tQEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9c:97:83:76:72:44:fa:ff:68:7e:79:53:06:e6:08:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
        Validity
            Not Before: Jun  6 11:00:35 2026 GMT
            Not After : Jun  7 11:00:35 2026 GMT
        Subject: CN=2bbe17bcb92347f0fc65161738d5df3329683185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ec:13:16:e9:53:e2:b0:70:7c:16:af:b2:26:
                    46:ee:1d:47:3a:4a:66:60:1a:ce:3b:14:65:64:1c:
                    02:4f:c6:94:2c:aa:ce:8e:a7:89:b7:3a:7a:a0:92:
                    82:6d:0e:75:98:4f:d5:42:ab:88:e3:19:bd:7f:22:
                    d2:1d:ad:6f:c9:1b:c7:7e:6b:40:13:ab:9e:50:5a:
                    03:2f:62:18:8b:4c:4f:03:af:e2:0b:2e:b3:cd:24:
                    44:ed:8a:21:46:84:bd:be:e6:0f:67:f8:56:bb:6b:
                    7f:80:6b:c9:8c:78:78:8b:0e:15:1f:7f:2e:10:db:
                    82:e8:5c:c9:28:b0:07:f3:57:85:0d:61:6d:92:ca:
                    c2:81:28:5d:65:9c:2c:6d:de:51:0d:83:4b:e5:b5:
                    56:22:0c:9e:1d:28:c8:28:48:c7:f2:c5:8a:bc:1a:
                    71:b9:ce:04:3c:48:73:d7:b9:c8:38:50:b0:8d:6d:
                    d5:87:b3:48:72:9a:3d:ac:2e:4f:9b:44:11:ba:94:
                    61:a0:aa:13:14:b7:48:19:59:10:83:82:74:cf:73:
                    cb:cf:6e:bf:e1:be:7b:89:58:04:0d:75:55:88:36:
                    4e:3a:53:f8:da:40:1f:c4:9d:47:dd:11:14:65:68:
                    38:96:d5:74:cf:59:37:12:74:82:08:c9:f8:44:eb:
                    21:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BE:17:BC:B9:23:47:F0:FC:65:16:17:38:D5:DF:33:29:68:31:85
            X509v3 Authority Key Identifier:
                keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:4e:ec:91:e2:c2:2e:d7:fa:30:3b:73:45:7c:96:0b:4c:40:
         9c:60:d6:32:fb:a7:7a:88:c5:5b:fd:d9:63:fb:3e:b0:25:f4:
         f8:91:3b:bc:40:3f:d1:b5:73:93:2b:61:42:d2:b2:b3:42:1a:
         90:45:73:9f:f4:0b:1a:9f:70:75:16:7c:24:06:d8:12:cd:c5:
         52:46:65:c1:78:ca:79:1a:2d:98:26:db:64:cf:dc:1b:8a:ec:
         50:40:d4:cb:a4:e3:9e:6d:7a:9b:2d:39:db:ba:02:aa:d5:9c:
         21:1c:a9:92:78:32:0c:50:a1:94:d7:1e:6b:2b:5b:69:63:52:
         37:80:ee:2b:0b:23:74:15:6e:85:d2:d9:46:23:71:57:b1:cf:
         c9:d9:bd:05:77:23:00:63:f0:b7:25:07:cd:b3:01:18:36:c6:
         0a:97:53:16:ea:8c:32:45:53:24:e4:5f:02:2b:48:bf:f6:ba:
         ab:30:04:da:94:db:15:1f:e5:a1:5b:93:05:de:23:a2:88:07:
         58:c8:12:1b:12:f4:cb:c0:ba:35:4f:9c:ea:a1:78:40:bd:8f:
         ad:77:45:3a:cb:d5:aa:41:2c:3c:c0:ff:4c:32:dd:8d:bd:b0:
         2e:85:48:89:d6:16:b6:7d:d5:a6:46:d5:de:24:28:e8:7a:f3:
         69:ad:37:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6cl4N2ckT6/2h+eVMG5giZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNTM0NTA1ODQ1ZmEwYTkzZjgyODVhNmRhOGJjZTZkMWQ3
MjAwZGQwHhcNMjYwNjA2MTEwMDM1WhcNMjYwNjA3MTEwMDM1WjAzMTEwLwYDVQQD
EygyYmJlMTdiY2I5MjM0N2YwZmM2NTE2MTczOGQ1ZGYzMzI5NjgzMTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uwTFulT4rBwfBavsiZG7h1HOkpm
YBrOOxRlZBwCT8aULKrOjqeJtzp6oJKCbQ51mE/VQquI4xm9fyLSHa1vyRvHfmtA
E6ueUFoDL2IYi0xPA6/iCy6zzSRE7YohRoS9vuYPZ/hWu2t/gGvJjHh4iw4VH38u
ENuC6FzJKLAH81eFDWFtksrCgShdZZwsbd5RDYNL5bVWIgyeHSjIKEjH8sWKvBpx
uc4EPEhz17nIOFCwjW3Vh7NIcpo9rC5Pm0QRupRhoKoTFLdIGVkQg4J0z3PLz26/
4b57iVgEDXVViDZOOlP42kAfxJ1H3REUZWg4ltV0z1k3EnSCCMn4ROshQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCu+F7y5I0fw/GUWFzjV3zMpaDGFMB8GA1UdIwQY
MBaAFIJTRQWEX6CpP4KFptqLzm0dcgDdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2xORkJZUmZvS2tfZ29XbTJvdk9iUjF5QU4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZGYyNDgtZWM1Yi00N2Q3LWJkZDAt
NDdjYzdkMWFiYzZiLzEvZ2xORkJZUmZvS2tfZ29XbTJvdk9iUjF5QU4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS82ZGYyNDgtZWM1Yi00N2Q3LWJkZDAtNDdjYzdkMWFiYzZi
LzEvZ2xORkJZUmZvS2tfZ29XbTJvdk9iUjF5QU4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy07skeLC
Ltf6MDtzRXyWC0xAnGDWMvuneojFW/3ZY/s+sCX0+JE7vEA/0bVzkythQtKys0Ia
kEVzn/QLGp9wdRZ8JAbYEs3FUkZlwXjKeRotmCbbZM/cG4rsUEDUy6Tjnm16my05
27oCqtWcIRypkngyDFChlNceaytbaWNSN4DuKwsjdBVuhdLZRiNxV7HPydm9BXcj
AGPwtyUHzbMBGDbGCpdTFuqMMkVTJORfAitIv/a6qzAE2pTbFR/loVuTBd4joogH
WMgSGxL0y8C6NU+c6qF4QL2PrXdFOsvVqkEsPMD/TDLdjb2wLoVIidYWtn3VpkbV
3iQo6Hrzaa03uw==
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:44:32 2026 by rpki-client