Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
File:                     GLIwW_twBOUp1iOkd3G45uzQUdY.mft (raw, json)
Hash identifier:          d4xRgn1JH0DY7w0P7KN4vhW/X1FyaIDyn6j4HmjAl1g=
Subject key identifier:   FA:DD:75:25:C9:23:EF:C7:17:5B:A9:15:01:B5:FF:76:1A:67:7A:D2
Authority key identifier: 18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6
Certificate issuer:       /CN=18b2305bfb7004e529d623a47771b8e6ecd051d6
Certificate serial:       019E1DFECF7FDE7B39B4569B189FED93EFD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
Manifest number:          02D3
Signing time:             Tue 12 May 2026 21:01:38 +0000
Manifest this update:     Tue 12 May 2026 21:01:38 +0000
Manifest next update:     Wed 13 May 2026 21:01:38 +0000
Files and hashes:         1: BsB1weTRtbb_w5a2aWqr7c8Cgpg.asa (hash: HwOzHFJxF3HhEQ9N7dXbh3+iApRhiXxh7m6fcvockMY=)
                          2: GLIwW_twBOUp1iOkd3G45uzQUdY.crl (hash: pj/1iD634bf5DIYAVgftUqrW+FfxZRScqD82jsZLfyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:cf:7f:de:7b:39:b4:56:9b:18:9f:ed:93:ef:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18b2305bfb7004e529d623a47771b8e6ecd051d6
        Validity
            Not Before: May 12 21:01:38 2026 GMT
            Not After : May 13 21:01:38 2026 GMT
        Subject: CN=fadd7525c923efc7175ba91501b5ff761a677ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cc:2c:fe:79:07:f2:15:f0:31:f8:3b:b8:96:
                    b6:6b:af:f1:cc:92:5e:75:4c:16:9d:20:57:94:d0:
                    00:0c:16:07:e0:52:ee:86:53:3d:bf:22:86:53:5d:
                    94:ac:51:13:ab:20:a6:b9:31:1c:ab:db:f7:9d:c7:
                    a4:d3:eb:02:09:56:47:2d:7d:40:08:ab:95:b3:6a:
                    6a:c7:89:07:70:8f:d6:d2:75:43:78:ec:59:85:da:
                    0f:06:2e:ac:08:21:19:4e:90:63:a4:9c:9c:57:ce:
                    d5:3e:b0:15:42:02:04:dd:9e:f7:b5:ec:8e:65:de:
                    6f:c1:7e:1e:6b:ac:62:6c:92:3d:13:e4:f4:85:e5:
                    8c:7e:96:fe:4e:9f:e3:5a:3a:37:5b:24:93:88:c1:
                    28:0a:25:5f:a7:aa:1d:7e:0a:8f:2a:66:c4:73:1b:
                    01:78:5b:6c:cd:74:5b:94:57:60:45:ec:5c:05:fe:
                    0a:bb:4d:0e:7e:cf:c2:f4:15:14:99:00:6f:9a:9d:
                    df:1f:58:d4:64:b0:05:13:d2:60:8c:56:f6:ae:06:
                    62:38:ba:a9:d7:b7:9c:72:d2:3b:f2:22:4c:c1:59:
                    c0:5f:d8:ee:99:dd:28:f3:bb:ad:77:4c:80:60:e7:
                    1b:73:d3:92:a9:ea:cb:e5:29:ba:5d:f7:42:c4:73:
                    00:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DD:75:25:C9:23:EF:C7:17:5B:A9:15:01:B5:FF:76:1A:67:7A:D2
            X509v3 Authority Key Identifier:
                keyid:18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:26:ab:73:29:e5:72:ab:b3:a0:81:cb:89:ba:99:ec:e0:9b:
         79:e0:0c:b0:3d:1d:f1:e0:3d:6d:1c:9c:68:ae:15:1f:a7:95:
         9b:2d:3e:3a:82:ee:af:88:13:98:c5:4c:63:80:e0:28:9e:98:
         b6:fc:08:8d:21:4e:7d:8d:29:97:2a:81:8d:1f:38:2f:71:4c:
         52:cd:09:ef:50:96:b8:17:51:9d:e6:22:fd:32:b8:e6:fb:aa:
         06:9b:d3:d3:35:25:25:57:b2:09:61:ec:e6:25:dc:7a:00:c4:
         64:06:ec:91:a9:0b:cb:a3:23:6e:e8:79:f3:93:2f:04:1f:c6:
         ee:25:15:50:8a:62:56:36:df:05:a6:a9:26:0f:6c:b3:03:b6:
         e5:82:a9:0a:ef:1c:73:05:f6:59:6b:b1:a9:1e:37:e5:4e:47:
         5e:30:9d:0e:a4:5b:05:01:09:45:51:2d:d5:4a:43:bc:e7:26:
         bd:7e:cb:ba:77:a6:9d:41:00:fd:52:23:07:cb:94:97:3a:74:
         47:59:d5:fd:33:cf:3e:25:b0:16:75:92:61:38:ea:07:26:b9:
         11:8a:56:c4:40:fd:8e:87:b7:af:1e:ca:c7:b1:fd:ef:ce:92:
         05:83:a0:ff:2a:ee:ff:53:4b:e8:6c:a1:2a:28:2c:df:85:83:
         fb:09:04:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:22:58 2026 by rpki-client