Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft
File:                     GLbl-LQJfB26dKICIGFFk5_x4do.mft (raw, json)
Hash identifier:          y6ecAXQT6AKFvNrdPplUB8LyzkCcWgQBNbWwgDPzbW8=
Subject key identifier:   C0:FD:A6:A8:0E:0A:35:A2:1D:50:31:6C:C7:F4:6A:EA:2C:E0:5F:5E
Authority key identifier: 18:B6:E5:F8:B4:09:7C:1D:BA:74:A2:02:20:61:45:93:9F:F1:E1:DA
Certificate issuer:       /CN=18b6e5f8b4097c1dba74a202206145939ff1e1da
Certificate serial:       019D390A38AD6DCD02CE07ADEF639015C9B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft
Manifest number:          128B
Signing time:             Sun 29 Mar 2026 10:01:04 +0000
Manifest this update:     Sun 29 Mar 2026 10:01:04 +0000
Manifest next update:     Mon 30 Mar 2026 10:01:04 +0000
Files and hashes:         1: GLbl-LQJfB26dKICIGFFk5_x4do.crl (hash: i/NhXIOh3XVOhiA3N/DqKhcc71yuQyPv/99KFxdmlAg=)
                          2: ieC1NLLyKx5tco-VwoKH2BnT_8Q.roa (hash: vvvqHH2JLJwMKnye94FrwZVCbXdl2s8tUEPcH0TbOBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:38:ad:6d:cd:02:ce:07:ad:ef:63:90:15:c9:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18b6e5f8b4097c1dba74a202206145939ff1e1da
        Validity
            Not Before: Mar 29 10:01:04 2026 GMT
            Not After : Mar 30 10:01:04 2026 GMT
        Subject: CN=c0fda6a80e0a35a21d50316cc7f46aea2ce05f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c1:f9:b4:e1:1a:fd:52:7f:91:f3:14:cd:25:
                    6a:9b:60:f0:7d:7e:e6:7c:54:e8:19:7c:dd:cb:94:
                    5b:6b:73:9b:a5:6f:0e:a2:5e:b1:fe:de:33:a2:e3:
                    1d:b8:66:ab:7f:b9:fc:ca:9d:e5:64:e6:dd:05:0f:
                    99:59:fc:8e:20:54:d4:05:db:1b:bc:38:d1:de:52:
                    5b:0f:bb:0e:bc:7b:85:04:e8:20:20:19:9e:a0:fc:
                    95:78:ca:ae:2a:af:19:e1:7b:c6:d1:88:fe:45:5a:
                    36:c5:9d:ba:8f:5c:65:3d:f5:1f:cc:c6:8e:a5:9f:
                    27:2b:1f:95:f6:f7:d9:dc:a2:24:88:7b:4d:cf:e7:
                    db:25:66:2e:d5:b1:43:94:b9:d8:2f:69:e9:a3:4f:
                    35:67:bf:09:bd:65:f4:3f:b2:66:94:db:41:5a:66:
                    7e:88:c6:50:5d:f8:92:6b:ad:38:7a:d3:fc:b3:20:
                    4e:e5:83:6d:3e:44:8b:57:ef:95:00:6e:e4:67:ce:
                    77:b0:b9:e5:c5:f5:13:b2:20:df:66:ce:7c:79:cb:
                    ee:c6:c2:46:26:71:fa:44:c5:5d:6e:2e:65:2d:02:
                    41:7b:71:36:5a:f3:f8:23:47:a6:ce:a7:46:1e:82:
                    aa:1d:cc:42:62:f2:3a:93:c0:ec:c5:d1:52:95:9f:
                    a6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FD:A6:A8:0E:0A:35:A2:1D:50:31:6C:C7:F4:6A:EA:2C:E0:5F:5E
            X509v3 Authority Key Identifier:
                keyid:18:B6:E5:F8:B4:09:7C:1D:BA:74:A2:02:20:61:45:93:9F:F1:E1:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b9:be:fe:fb:88:34:df:ad:86:64:50:95:db:a9:ac:c5:f2:
         92:ea:b8:06:eb:66:cc:fd:7f:3f:b8:0e:87:35:72:62:bc:55:
         3a:c3:da:a1:2b:11:06:97:c3:51:cc:1b:ad:36:9c:e3:14:ba:
         94:ce:ed:e8:39:38:fb:da:07:2b:1a:51:4f:98:35:d7:48:c1:
         d7:bd:9e:d6:41:f6:44:b8:92:38:d9:d2:30:d2:e2:d5:f4:45:
         b9:8e:23:f5:fc:d3:46:6d:f7:19:6a:e2:e2:2b:a4:5c:ee:8e:
         3c:c3:0f:4a:54:5e:5e:bd:6d:b3:91:ea:ba:8d:a8:5f:f7:a5:
         3c:d4:e1:ff:54:b5:41:25:91:5e:cd:29:5b:62:c9:43:db:9d:
         8b:08:e0:a9:a3:0f:2b:e0:d6:df:e0:75:a9:62:39:e9:f9:04:
         52:fa:8a:46:9e:b9:ba:63:ad:2d:8a:b3:c4:fe:bb:67:2e:97:
         13:57:ff:39:66:03:11:0d:4e:95:26:ff:02:43:ce:67:de:2d:
         25:c0:ab:fc:54:66:c2:71:7d:5a:26:6f:70:bd:40:56:2b:e0:
         23:dc:56:3f:dc:bb:2f:99:89:1b:2f:c6:cd:52:1e:9f:03:0d:
         f7:e5:ef:b1:fa:54:d5:4a:05:cd:7e:48:67:3f:d4:ab:1b:c5:
         54:6a:d4:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Cjitbc0Czget72OQFcmyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YjZlNWY4YjQwOTdjMWRiYTc0YTIwMjIwNjE0NTkzOWZm
MWUxZGEwHhcNMjYwMzI5MTAwMTA0WhcNMjYwMzMwMTAwMTA0WjAzMTEwLwYDVQQD
EyhjMGZkYTZhODBlMGEzNWEyMWQ1MDMxNmNjN2Y0NmFlYTJjZTA1ZjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38H5tOEa/VJ/kfMUzSVqm2DwfX7m
fFToGXzdy5Rba3ObpW8Ool6x/t4zouMduGarf7n8yp3lZObdBQ+ZWfyOIFTUBdsb
vDjR3lJbD7sOvHuFBOggIBmeoPyVeMquKq8Z4XvG0Yj+RVo2xZ26j1xlPfUfzMaO
pZ8nKx+V9vfZ3KIkiHtNz+fbJWYu1bFDlLnYL2npo081Z78JvWX0P7JmlNtBWmZ+
iMZQXfiSa604etP8syBO5YNtPkSLV++VAG7kZ853sLnlxfUTsiDfZs58ecvuxsJG
JnH6RMVdbi5lLQJBe3E2WvP4I0emzqdGHoKqHcxCYvI6k8DsxdFSlZ+muwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMD9pqgOCjWiHVAxbMf0auos4F9eMB8GA1UdIwQY
MBaAFBi25fi0CXwdunSiAiBhRZOf8eHaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0xibC1MUUpmQjI2ZEtJQ0lHRkZrNV94NGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83MzE2MGQtMTcxNC00NGYyLTliZTQt
YTdkNDI1M2IyNzFmLzEvR0xibC1MUUpmQjI2ZEtJQ0lHRkZrNV94NGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83MzE2MGQtMTcxNC00NGYyLTliZTQtYTdkNDI1M2IyNzFm
LzEvR0xibC1MUUpmQjI2ZEtJQ0lHRkZrNV94NGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrm+/vuI
NN+thmRQlduprMXykuq4ButmzP1/P7gOhzVyYrxVOsPaoSsRBpfDUcwbrTac4xS6
lM7t6Dk4+9oHKxpRT5g110jB172e1kH2RLiSONnSMNLi1fRFuY4j9fzTRm33GWri
4iukXO6OPMMPSlReXr1ts5Hquo2oX/elPNTh/1S1QSWRXs0pW2LJQ9udiwjgqaMP
K+DW3+B1qWI56fkEUvqKRp65umOtLYqzxP67Zy6XE1f/OWYDEQ1OlSb/AkPOZ94t
JcCr/FRmwnF9WiZvcL1AVivgI9xWP9y7L5mJGy/GzVIenwMN9+XvsfpU1UoFzX5I
Zz/UqxvFVGrURw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:29 2026 by rpki-client