Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
File:                     glHn-2uWDUBrIjbSXk4g4kU1nbI.mft (raw, json)
Hash identifier:          nvB6Sj2FG8PYO/jHb7/QSh9ZGKXia90jGBzskNv6WPw=
Subject key identifier:   06:A1:06:B2:E6:29:92:F5:AC:26:0F:8E:BC:9D:7A:7E:AB:77:0F:EC
Authority key identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
Certificate issuer:       /CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Certificate serial:       01A12BE906373D561D11CDD95510A8FC6C9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
Manifest number:          1A9D
Signing time:             Sun 11 Oct 2026 17:00:54 +0000
Manifest this update:     Sun 11 Oct 2026 17:00:54 +0000
Manifest next update:     Mon 12 Oct 2026 17:00:54 +0000
Files and hashes:         1: 4FDNWntT8HGm47C46owaTOgYZFY.roa (hash: MNnKoAQqNIz7h2yGseXPJCLeJOP5/UFE0Y/s3x5Ddio=)
                          2: INjnRxc1KDjJdK0P3v0NKp9zXSA.roa (hash: U1Y8u0AecjgXDJowXa0cOGElTwu53RvRkwL+O2WLn8c=)
                          3: LfgI9rpN293BrrnzaHSQkYw-4Vo.roa (hash: 17vv8CHDmx8Pt5VIpPIqTVbzDuzHnEYkz/7k/nREMI0=)
                          4: MxTmbVkJmB_lTh2o1kTnP_BFeDY.roa (hash: ttGF8f4pFYCjKqu0HAUvABDoHst3U1ecGF8sI6MFc/8=)
                          5: SSZXBlYC8HRLyEBgcVeFIXi-Zbg.roa (hash: 7JMK2h+HH0ge6JJyog9isIH7U/WCw5GQsuyNPYb8o94=)
                          6: glHn-2uWDUBrIjbSXk4g4kU1nbI.crl (hash: Br/QsglAVEIPi3AUTBjS7jNfX9f9j/mmyxxxcKmFTeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:e9:06:37:3d:56:1d:11:cd:d9:55:10:a8:fc:6c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8251e7fb6b960d406b2236d25e4e20e245359db2
        Validity
            Not Before: Oct 11 17:00:54 2026 GMT
            Not After : Oct 12 17:00:54 2026 GMT
        Subject: CN=06a106b2e62992f5ac260f8ebc9d7a7eab770fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:88:34:5c:a6:3b:03:8b:ff:8e:9e:56:96:fc:
                    f6:7a:b2:46:2b:f9:fa:d8:e6:24:20:c7:15:39:50:
                    55:cd:ac:b6:ac:50:18:4a:01:90:ad:9d:a8:ed:71:
                    a8:be:0c:a0:64:4c:7a:64:bc:cb:45:4a:5a:ba:f0:
                    3f:ad:23:68:b6:93:1a:08:c2:c2:e7:e9:ad:a4:84:
                    1e:75:f3:1e:c7:43:8c:02:06:a4:cc:a7:92:39:90:
                    07:27:1a:cd:4a:68:41:51:f3:a1:df:c7:0c:8e:9c:
                    e2:74:1b:b9:40:2f:4e:0b:d3:e2:cb:ac:e9:47:db:
                    91:9b:13:e9:07:99:4c:ff:d5:df:6a:cd:cb:c5:37:
                    b0:1d:ed:b2:9a:0e:b7:1d:91:5b:6c:98:3b:c9:90:
                    fa:b8:e3:6f:bb:3b:c2:f0:67:5d:77:73:12:e2:cc:
                    31:3c:3a:bd:f2:88:7e:8e:18:95:48:09:e1:41:45:
                    5d:19:81:e8:da:4e:24:e1:6a:eb:c3:ed:3a:27:ed:
                    f0:dd:4b:f1:9b:80:e2:df:23:8d:d2:4f:7e:71:48:
                    a0:78:02:d8:37:0b:25:e0:84:61:2d:0e:8a:89:03:
                    70:c7:aa:67:48:3c:ec:49:90:11:ab:37:7c:55:5d:
                    50:e5:66:64:0f:fa:b3:a2:bf:ad:ec:50:ce:bf:ef:
                    d0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A1:06:B2:E6:29:92:F5:AC:26:0F:8E:BC:9D:7A:7E:AB:77:0F:EC
            X509v3 Authority Key Identifier:
                keyid:82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:05:62:2e:79:d5:9a:c3:29:f1:77:b6:2a:02:e0:01:b0:a2:
         fc:22:ca:ef:f7:46:ec:f0:b2:89:b5:56:37:05:09:de:e9:05:
         61:ba:38:cd:02:fe:fa:15:51:ba:4f:12:27:77:1c:41:a7:45:
         1c:bc:da:d2:d1:ce:4f:bc:0b:ec:51:b8:c7:d3:97:2b:a0:e3:
         cd:69:41:c4:21:24:86:78:9c:1f:3d:26:4e:c9:a4:e3:2c:46:
         b8:6a:d2:89:01:62:a0:3a:c3:c5:30:ed:cc:c6:18:41:7c:00:
         54:88:de:ff:69:b5:d1:6d:d4:d7:40:be:25:31:1b:67:17:37:
         31:28:bd:c7:aa:f5:75:62:95:da:32:6c:9d:02:3c:ba:6a:99:
         b9:29:00:bb:dc:af:58:a7:cf:c9:ca:b5:97:f3:bb:9e:67:fd:
         02:19:de:90:3c:77:01:9f:8d:c3:d6:0b:eb:5c:6e:8f:0f:ec:
         d6:99:e6:45:06:67:ca:a6:57:1d:ff:61:52:9c:db:9a:8a:4c:
         1e:4c:f4:38:f4:31:66:0e:ac:5c:e1:53:15:ce:52:86:13:69:
         61:46:60:ee:69:73:0a:a5:1b:43:87:fc:c7:f5:e0:ab:02:32:
         48:92:54:1f:59:32:82:2e:21:72:bb:bf:61:3b:ea:ea:c1:98:
         e2:1d:30:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:57:33 2026 by rpki-client