Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
File:                     GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft (raw, json)
Hash identifier:          u/PJYfqwwn16cu5GPTLGGPjmBQcaD4YvcuJmmzJJDF0=
Subject key identifier:   92:68:F7:8D:F1:04:E2:82:A7:DB:69:BE:B6:7D:CE:97:4A:75:9A:90
Authority key identifier: 18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01
Certificate issuer:       /CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01
Certificate serial:       019D28F3383AD9A65E8F4C49FDD06FFB023B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
Manifest number:          1282
Signing time:             Thu 26 Mar 2026 07:02:01 +0000
Manifest this update:     Thu 26 Mar 2026 07:02:01 +0000
Manifest next update:     Fri 27 Mar 2026 07:02:01 +0000
Files and hashes:         1: GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl (hash: bznDVSues2RdaIV2oQkRuavVL77nZ4crmAcR8HQYx38=)
                          2: WwK0wQVJ37gM0FPBexlboGpvdWY.roa (hash: 8GMUVCoh7go5d/bcS0qlu+v+yNBlwVof7wqc0z0ILNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f3:38:3a:d9:a6:5e:8f:4c:49:fd:d0:6f:fb:02:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01
        Validity
            Not Before: Mar 26 07:02:01 2026 GMT
            Not After : Mar 27 07:02:01 2026 GMT
        Subject: CN=9268f78df104e282a7db69beb67dce974a759a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:74:12:27:c1:0f:23:80:ba:51:1b:34:a1:10:
                    4d:8c:46:81:0e:1f:91:6c:ea:5b:6e:6b:90:a4:02:
                    47:db:16:df:ad:71:86:7f:d8:63:13:be:ec:da:3f:
                    60:c8:8c:6c:e6:af:a1:11:50:6f:13:2f:6e:6c:0f:
                    44:0a:6f:3f:0d:37:40:77:2f:5b:1b:11:bb:0a:7a:
                    05:8c:93:9b:f5:07:fa:a8:80:64:13:f6:a2:b6:77:
                    b3:07:cd:86:f8:8e:e0:e8:7a:03:b1:8e:f3:54:39:
                    2f:ac:03:a4:60:e9:59:9a:df:16:cd:ff:2d:bb:3a:
                    58:09:b1:3f:bd:34:d7:6c:dd:8a:ed:ce:66:b2:1d:
                    1c:76:49:f7:0b:36:e9:1f:b4:94:36:df:4c:79:0e:
                    70:15:05:32:12:e2:b1:a5:46:87:18:73:d4:48:65:
                    44:80:18:ae:bf:0a:aa:5e:43:3d:a1:aa:d7:47:02:
                    6e:08:0f:42:c3:bf:61:d5:8f:a0:ab:6e:a0:54:2f:
                    dd:d7:8f:f2:5f:93:e7:dd:4c:3d:53:63:a5:ae:28:
                    20:cf:e2:3a:2d:1c:88:9e:d8:5f:c4:69:8d:9f:87:
                    67:cf:26:09:b1:6a:a4:c4:ca:cc:a2:ae:37:ea:2e:
                    cc:20:28:d1:4a:8d:ec:57:db:69:3e:c4:d7:e4:54:
                    61:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:68:F7:8D:F1:04:E2:82:A7:DB:69:BE:B6:7D:CE:97:4A:75:9A:90
            X509v3 Authority Key Identifier:
                keyid:18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:de:c7:2b:8d:3e:73:a5:c0:8b:6d:bf:1e:dd:bf:67:f3:a4:
         23:d2:e0:aa:b8:14:d3:7c:81:73:ae:9b:40:f8:36:f7:97:8d:
         e9:cf:05:29:1c:a8:2c:13:94:b8:32:26:d9:8f:0f:d3:99:87:
         e6:31:06:9a:1d:3f:17:b0:70:b7:88:c9:57:8a:96:14:ee:10:
         01:36:ec:f1:21:ca:39:05:f7:a7:f1:83:d4:b3:eb:33:7d:d9:
         4c:cc:ea:d1:f6:ff:29:ff:bb:ac:f8:1f:81:f2:68:6d:66:e6:
         68:9a:54:39:03:9f:ba:cd:8c:78:18:e3:17:ae:75:bf:0b:97:
         10:eb:58:94:3d:d6:db:5d:b5:ce:0d:5b:f6:97:20:bd:bc:2e:
         ed:43:0b:1b:f4:5f:eb:23:bf:58:5e:52:28:ec:90:90:ea:08:
         2b:64:6a:b7:8f:4b:0a:e3:4e:80:ac:60:0f:6f:3c:0b:f1:a6:
         1c:71:2b:33:7c:43:d1:be:7e:80:3e:36:26:a2:cf:b7:1e:57:
         2f:32:3e:e8:95:7c:f7:f1:9d:14:b2:15:27:14:9e:23:7f:5d:
         5e:67:82:a1:e5:e2:8d:0f:e5:93:5b:09:26:d5:06:83:74:79:
         e1:29:bd:88:47:bf:25:d6:92:a5:9a:be:ca:f9:68:d7:40:c4:
         05:c7:fe:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8zg62aZej0xJ/dBv+wI7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YjczNzdjZTVlZmEzY2EwMzBlYmI0ZGQ3NzU2N2ZjMDMy
ZmNkMDEwHhcNMjYwMzI2MDcwMjAxWhcNMjYwMzI3MDcwMjAxWjAzMTEwLwYDVQQD
Eyg5MjY4Zjc4ZGYxMDRlMjgyYTdkYjY5YmViNjdkY2U5NzRhNzU5YTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHQSJ8EPI4C6URs0oRBNjEaBDh+R
bOpbbmuQpAJH2xbfrXGGf9hjE77s2j9gyIxs5q+hEVBvEy9ubA9ECm8/DTdAdy9b
GxG7CnoFjJOb9Qf6qIBkE/aitnezB82G+I7g6HoDsY7zVDkvrAOkYOlZmt8Wzf8t
uzpYCbE/vTTXbN2K7c5msh0cdkn3CzbpH7SUNt9MeQ5wFQUyEuKxpUaHGHPUSGVE
gBiuvwqqXkM9oarXRwJuCA9Cw79h1Y+gq26gVC/d14/yX5Pn3Uw9U2Olriggz+I6
LRyInthfxGmNn4dnzyYJsWqkxMrMoq436i7MICjRSo3sV9tpPsTX5FRhWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJo943xBOKCp9tpvrZ9zpdKdZqQMB8GA1UdIwQY
MBaAFBi3N3zl76PKAw67Tdd1Z/wDL80BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0xjM2ZPWHZvOG9ERHJ0TjEzVm5fQU12elFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hMGJhODgtNGQ4OC00NjkxLWFhNmMt
YjViOGY1Nzg0ZGZlLzEvR0xjM2ZPWHZvOG9ERHJ0TjEzVm5fQU12elFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9hMGJhODgtNGQ4OC00NjkxLWFhNmMtYjViOGY1Nzg0ZGZl
LzEvR0xjM2ZPWHZvOG9ERHJ0TjEzVm5fQU12elFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwd7HK40+
c6XAi22/Ht2/Z/OkI9LgqrgU03yBc66bQPg295eN6c8FKRyoLBOUuDIm2Y8P05mH
5jEGmh0/F7Bwt4jJV4qWFO4QATbs8SHKOQX3p/GD1LPrM33ZTMzq0fb/Kf+7rPgf
gfJobWbmaJpUOQOfus2MeBjjF651vwuXEOtYlD3W2121zg1b9pcgvbwu7UMLG/Rf
6yO/WF5SKOyQkOoIK2Rqt49LCuNOgKxgD288C/GmHHErM3xD0b5+gD42JqLPtx5X
LzI+6JV89/GdFLIVJxSeI39dXmeCoeXijQ/lk1sJJtUGg3R54Sm9iEe/JdaSpZq+
yvlo10DEBcf+Lg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:37:47 2026 by rpki-client