Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
File:                     glHn-2uWDUBrIjbSXk4g4kU1nbI.mft (raw, json)
Hash identifier:          wVM90riYN79qywFs1Z7MMFydLveYMdQnIbFpwMxztOk=
Subject key identifier:   C7:E8:41:F2:31:59:C9:F5:81:70:F1:BB:14:81:38:FF:F0:5B:95:8C
Authority key identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
Certificate issuer:       /CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Certificate serial:       019E87FE3782666D279CE875FE6072E135A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
Manifest number:          193F
Signing time:             Tue 02 Jun 2026 11:00:44 +0000
Manifest this update:     Tue 02 Jun 2026 11:00:44 +0000
Manifest next update:     Wed 03 Jun 2026 11:00:44 +0000
Files and hashes:         1: 4FDNWntT8HGm47C46owaTOgYZFY.roa (hash: MNnKoAQqNIz7h2yGseXPJCLeJOP5/UFE0Y/s3x5Ddio=)
                          2: INjnRxc1KDjJdK0P3v0NKp9zXSA.roa (hash: U1Y8u0AecjgXDJowXa0cOGElTwu53RvRkwL+O2WLn8c=)
                          3: LfgI9rpN293BrrnzaHSQkYw-4Vo.roa (hash: 17vv8CHDmx8Pt5VIpPIqTVbzDuzHnEYkz/7k/nREMI0=)
                          4: MxTmbVkJmB_lTh2o1kTnP_BFeDY.roa (hash: ttGF8f4pFYCjKqu0HAUvABDoHst3U1ecGF8sI6MFc/8=)
                          5: SSZXBlYC8HRLyEBgcVeFIXi-Zbg.roa (hash: 7JMK2h+HH0ge6JJyog9isIH7U/WCw5GQsuyNPYb8o94=)
                          6: glHn-2uWDUBrIjbSXk4g4kU1nbI.crl (hash: AD6x1TO2OnBu/fB06kGvxNqrj9Fu1+WHPycZO+YwXWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jun 2026 11:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:87:fe:37:82:66:6d:27:9c:e8:75:fe:60:72:e1:35:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8251e7fb6b960d406b2236d25e4e20e245359db2
        Validity
            Not Before: Jun  2 11:00:44 2026 GMT
            Not After : Jun  3 11:00:44 2026 GMT
        Subject: CN=c7e841f23159c9f58170f1bb148138fff05b958c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:87:94:3b:11:84:01:66:46:56:55:00:bf:78:
                    69:a7:ce:e1:49:ab:65:36:c5:87:ea:f5:de:2a:1b:
                    61:40:97:76:e0:a5:3d:4f:01:cd:d2:6a:e1:76:b5:
                    d1:de:ee:6f:b9:ac:5c:8a:89:3f:db:7b:9a:d7:9c:
                    bc:69:c4:3e:d3:fd:32:a7:91:3f:f9:f8:9e:db:0d:
                    38:72:b3:2e:da:f5:fa:76:3d:b4:4a:21:c6:93:52:
                    a1:47:a3:f5:8a:56:41:ce:21:f9:4a:d3:66:1f:c3:
                    de:e1:70:0e:99:20:76:1e:b7:cf:1e:b4:65:19:5e:
                    dd:08:d0:c4:f9:0f:e2:ec:f0:96:1e:d7:4c:5d:0e:
                    12:d2:5d:e6:0c:3f:02:bf:66:a3:9f:ef:6d:d5:cf:
                    74:eb:68:6f:b0:61:82:0a:f8:eb:6f:f7:5f:57:60:
                    7a:a7:bb:f0:1b:b2:39:bf:08:b2:f3:0c:50:06:28:
                    8f:5f:ac:ba:39:47:ed:c4:9c:bc:66:74:c5:49:d0:
                    93:cd:00:6e:09:30:2d:cb:28:92:6e:a2:31:5b:b5:
                    1b:2b:22:62:eb:be:35:fb:c9:2a:d7:37:db:8c:a2:
                    b5:0e:cb:16:7c:d8:f1:03:3b:f2:2a:a3:37:2a:ae:
                    10:4e:e2:10:83:95:69:3d:c0:09:eb:00:0f:61:a7:
                    e6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E8:41:F2:31:59:C9:F5:81:70:F1:BB:14:81:38:FF:F0:5B:95:8C
            X509v3 Authority Key Identifier:
                keyid:82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:93:c5:6f:86:8b:f5:71:4f:0b:ff:03:97:f0:71:c3:02:8b:
         e4:0f:cb:09:f0:26:4a:5a:02:b4:34:06:90:67:41:be:16:3e:
         14:93:5a:5b:c4:42:6e:37:38:fb:c2:f7:53:79:f1:e6:52:52:
         2c:70:d3:3e:1f:53:b5:93:cc:1d:c2:d3:2b:45:c9:a5:75:a9:
         bd:81:b5:8c:21:20:28:57:71:b7:df:de:0c:e8:ca:d3:d4:0b:
         9a:76:f2:9c:e5:a5:f3:a2:ba:d0:37:3c:24:83:6e:81:ad:c9:
         41:13:bf:58:c7:c7:57:71:d2:40:2d:9f:8e:1f:13:0e:9c:20:
         1f:b5:90:7b:a1:d7:4e:eb:74:4f:bf:01:34:01:5f:a8:1d:7b:
         48:e3:bd:a5:39:7a:fb:ed:75:8f:1f:4e:c1:03:73:0d:80:44:
         34:31:5c:3f:b0:17:7c:fd:af:75:82:cf:6d:71:cc:ef:35:24:
         ed:69:f6:b2:d9:d8:f8:02:26:a4:01:f4:db:e0:c1:03:5e:a3:
         93:58:38:db:4d:44:10:1c:62:c4:a9:f0:fa:19:d2:af:81:a4:
         04:90:63:eb:85:27:6e:2a:42:dd:e4:14:51:4b:1c:cd:e1:8c:
         53:96:f6:68:24:a2:27:53:4a:14:75:6b:fd:a9:c4:f8:b6:c9:
         9c:a2:a4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:34:11 2026 by rpki-client