Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
File:                     glHn-2uWDUBrIjbSXk4g4kU1nbI.mft (raw, json)
Hash identifier:          F7uXLsPMP3WNQnBrYUkWfYwzAfbgBm0iQ/Dp4aGDP9U=
Subject key identifier:   C5:DB:23:4A:0F:70:D7:CC:7B:2A:E2:A7:4F:EC:FE:76:68:2E:E8:00
Authority key identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
Certificate issuer:       /CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Certificate serial:       019A2D0DBA73B4EECE112C64247CFEA7935C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
Manifest number:          16FD
Signing time:             Tue 28 Oct 2025 23:01:05 +0000
Manifest this update:     Tue 28 Oct 2025 23:01:05 +0000
Manifest next update:     Wed 29 Oct 2025 23:01:05 +0000
Files and hashes:         1: BiweuLnHoWiHw0dJtOKVLYe5VXw.roa (hash: v5I7lbo3yrRW4OdIb5Z9T1Oajdn5oMeqluzGbBuYfMA=)
                          2: KyxetZabMrCwSGQGlQiCSSpLezw.roa (hash: lB6fVKgf9Cm2eRE3kdPJEkhSEzxtd0NAC6g5PlzMoxw=)
                          3: SkHxUs-FrIQyM07xjoxzMJo0A-0.roa (hash: pe66sdl4nqsnLQs5V6pFP+Jxy3p0QpIUCzbid73OCcA=)
                          4: _muTs8Yrozyvhukvws4l05B7mTo.roa (hash: LD706s8S0q0ox0+6TKcyKrOGDjOk87XG1dzJqAoo9NE=)
                          5: dvbWlIR_nyOoTtNcYB_wCKbM8x8.roa (hash: vqMhD9X26YxNwUr/WhYc7U9uIGwJ0S9qj2YKPJvFuT0=)
                          6: glHn-2uWDUBrIjbSXk4g4kU1nbI.crl (hash: HKJybZnIxld2BuvcFigK16g6yueOV/ts4GReJfJAQd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:2d:0d:ba:73:b4:ee:ce:11:2c:64:24:7c:fe:a7:93:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8251e7fb6b960d406b2236d25e4e20e245359db2
        Validity
            Not Before: Oct 28 23:01:05 2025 GMT
            Not After : Oct 29 23:01:05 2025 GMT
        Subject: CN=c5db234a0f70d7cc7b2ae2a74fecfe76682ee800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:63:c2:20:0c:11:3e:b9:e0:2e:6d:c6:9a:85:
                    88:dc:3c:c9:e9:aa:c2:bd:35:04:8e:5e:62:ac:a1:
                    de:e6:a4:eb:93:08:86:4b:99:90:38:5f:40:98:ad:
                    13:42:96:f9:d3:b1:95:2d:27:19:88:67:6c:28:00:
                    64:c0:f1:f1:be:df:ab:51:0d:71:96:a5:d1:0d:f7:
                    cf:ca:07:7a:8a:b9:2d:c4:32:77:05:46:e7:68:e7:
                    af:f9:bb:b2:23:ed:2b:78:28:ee:e6:7d:42:de:b3:
                    69:a5:31:80:9e:03:b2:80:a4:e3:51:0b:f1:c4:d5:
                    c3:13:c3:6e:b3:12:4f:51:2b:26:59:9c:c3:4c:26:
                    ef:88:c1:69:64:c9:0a:5d:7d:3a:c2:7d:d8:4b:f3:
                    10:dd:48:8d:ab:60:d5:08:65:cf:ec:e1:8a:51:6e:
                    56:bf:a3:e2:22:79:8e:c9:fe:85:02:dc:0c:ea:10:
                    4a:44:59:d5:1a:d4:c0:95:67:84:99:5e:fa:09:c4:
                    8b:d1:4e:20:de:23:eb:e0:67:dd:f8:de:8a:0c:85:
                    c4:72:51:14:59:5c:13:f4:05:ba:69:8a:85:b6:ca:
                    df:a3:cd:4e:91:89:8b:70:19:02:fc:ac:64:99:74:
                    ec:e1:6c:cd:85:f9:b4:ec:dd:db:c2:ab:e6:d0:03:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DB:23:4A:0F:70:D7:CC:7B:2A:E2:A7:4F:EC:FE:76:68:2E:E8:00
            X509v3 Authority Key Identifier:
                keyid:82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:18:0f:1c:90:df:f8:de:e6:65:82:ec:ff:66:68:f9:b0:89:
         54:e6:ec:8d:36:04:2a:f6:e3:a9:2c:12:31:83:94:f5:71:81:
         5b:39:4a:c6:33:bf:f5:96:ea:c5:0d:54:d9:f1:bb:c0:bd:0c:
         3c:1f:0f:3a:19:a2:5c:30:f3:3c:48:59:4c:27:15:5d:e0:e8:
         9c:10:e3:e2:e0:98:72:f7:de:5b:b5:60:b4:f5:96:d6:92:28:
         4f:72:1c:3f:b7:bb:00:e3:d5:9a:da:ba:cf:b9:b9:26:52:6f:
         0a:a7:22:9c:63:cb:b7:78:ec:d5:b4:4d:a8:18:b5:f0:40:ac:
         68:d0:b8:dd:dc:92:4b:5f:ec:c2:93:78:40:2e:32:45:0d:73:
         78:19:d4:19:d6:72:8d:98:d8:be:66:cb:57:51:48:50:78:be:
         67:d3:ed:89:ae:4d:71:74:b3:f8:1b:ab:cb:9a:78:08:54:ad:
         58:1b:85:69:0f:10:0c:c5:9d:bd:b5:93:9e:12:24:a4:a4:d6:
         4e:33:f9:0f:a4:6f:41:a3:88:44:3a:d6:84:d1:24:b7:11:5f:
         88:52:3c:6f:99:5e:66:dd:10:77:db:8e:98:ea:64:d2:c0:e1:
         aa:9a:77:84:a4:df:69:83:26:08:13:36:0d:27:8a:41:76:85:
         6d:07:3d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:56:22 2025 by rpki-client