Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft
File:                     GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft (raw, json)
Hash identifier:          Zz+SZhSqvoUr0CgbW3r+Fhl/e26XoxjMv8GccKJPOcQ=
Subject key identifier:   7F:34:72:B9:6A:78:A1:D0:59:C8:C1:9C:70:FF:F0:3B:1A:C2:AC:02
Authority key identifier: 1A:5B:E1:55:03:7E:B7:E6:5C:12:AC:9A:A2:A2:C3:25:03:8C:3A:9B
Certificate issuer:       /CN=1a5be155037eb7e65c12ac9aa2a2c325038c3a9b
Certificate serial:       019D3865A98B3C95BEC7576CA0F9E1D2E57E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GlvhVQN-t-ZcEqyaoqLDJQOMOps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft
Manifest number:          0C66
Signing time:             Sun 29 Mar 2026 07:01:19 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:19 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:19 +0000
Files and hashes:         1: 2m0EGmPYAk8UEyoPFCdGZfUXZ58.roa (hash: xM4PqrOFPyrlAEK5Rat9kM0I00fA9ams94dU6W0ME2Q=)
                          2: GlvhVQN-t-ZcEqyaoqLDJQOMOps.crl (hash: wlNWOzwRw/A9qXaF8kh4li5a/UUx+mwmBwwsNTZcfLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GlvhVQN-t-ZcEqyaoqLDJQOMOps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:a9:8b:3c:95:be:c7:57:6c:a0:f9:e1:d2:e5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5be155037eb7e65c12ac9aa2a2c325038c3a9b
        Validity
            Not Before: Mar 29 07:01:19 2026 GMT
            Not After : Mar 30 07:01:19 2026 GMT
        Subject: CN=7f3472b96a78a1d059c8c19c70fff03b1ac2ac02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:a5:d9:ca:ac:d4:47:ed:7b:45:7e:6e:e7:
                    1b:70:3f:eb:9d:4c:f8:08:75:6c:fc:1d:6c:8b:46:
                    4d:e2:c6:3a:02:61:c6:1d:66:fa:ff:be:71:55:cd:
                    1f:6b:86:a9:b3:64:05:dd:1f:5e:d9:e8:40:49:4c:
                    9f:66:2b:c4:dd:95:23:4d:a8:95:9e:b7:57:4a:88:
                    06:71:6d:16:f7:7f:96:1d:b0:64:6c:81:70:fd:70:
                    8a:ed:ba:12:2b:9f:1e:71:d2:d5:77:a4:1a:5a:67:
                    5a:4f:ee:ff:19:72:03:5a:e1:dd:00:08:90:8b:a0:
                    42:75:0a:54:c7:53:93:30:a1:eb:99:69:1e:00:9b:
                    9a:01:a1:31:57:c8:40:5f:e1:27:1d:3f:4a:ea:b8:
                    b7:6f:82:f3:3a:1d:10:67:5a:99:1f:a9:13:9b:74:
                    a9:fb:e4:ce:f9:c3:08:53:f0:28:0c:06:06:11:db:
                    77:1f:12:f5:ba:ff:8b:71:f2:78:22:e8:15:a7:59:
                    b8:9b:47:27:35:5c:37:d3:2a:79:04:14:0f:71:2b:
                    cd:99:5a:9d:f1:15:02:bd:fc:9d:f1:48:ee:18:f6:
                    b9:dd:13:5e:87:75:17:98:c9:97:fd:f1:66:10:f9:
                    16:8c:f3:18:bf:e3:52:49:56:12:b7:e3:6e:3d:b7:
                    c4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:34:72:B9:6A:78:A1:D0:59:C8:C1:9C:70:FF:F0:3B:1A:C2:AC:02
            X509v3 Authority Key Identifier:
                keyid:1A:5B:E1:55:03:7E:B7:E6:5C:12:AC:9A:A2:A2:C3:25:03:8C:3A:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlvhVQN-t-ZcEqyaoqLDJQOMOps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:32:7e:57:3a:cc:a3:39:57:dc:c3:99:68:94:82:e5:51:a1:
         d0:80:6a:2c:29:85:8e:cc:24:d3:89:f7:2c:a6:c9:46:bd:4f:
         fb:29:56:6f:80:ba:05:47:7f:ca:36:8f:af:b2:90:9f:bf:a7:
         df:2b:15:59:6f:2b:55:55:58:36:da:c8:ec:0f:1d:62:d7:eb:
         14:f8:89:ae:79:6b:4f:d2:d9:a8:38:ed:48:8b:77:2e:9d:b3:
         1e:1e:e4:78:3e:89:ba:61:45:25:a9:9c:2e:31:ce:2a:c0:16:
         48:80:98:93:4a:76:f6:11:5b:ad:70:53:d8:fa:65:4e:70:4e:
         94:ac:e2:7f:e7:cc:dc:ce:3e:36:5d:f1:c8:ce:20:ec:1a:6b:
         4a:7c:e6:dd:f5:0d:c0:24:b4:b1:25:a4:2b:f8:87:cb:1f:7f:
         2d:7d:82:0e:37:9e:f7:59:ef:88:1b:e4:b7:0c:e6:cb:81:f3:
         84:42:f9:1d:23:b5:4a:0b:7e:7b:2c:93:a1:59:12:41:6c:11:
         d0:46:9f:fa:97:24:fb:ef:31:5c:29:cc:7d:e5:4f:7c:ac:b5:
         72:93:06:be:e4:6c:16:b2:74:be:4b:0e:17:8f:f0:37:9a:65:
         fa:f8:54:d1:3a:d2:8b:59:b4:8c:27:9a:26:28:52:4c:56:91:
         9d:28:d2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:11 2026 by rpki-client