Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
File:                     Glyq86CZO3auE-EZE22_AGlpiRE.mft (raw, json)
Hash identifier:          W4ew18cnqORnVIgpHZkkjugeGE/pZW0QLdcCBUSyKgc=
Subject key identifier:   66:41:DF:89:BF:E6:D4:52:93:B0:71:DC:06:AB:B6:46:46:A1:7E:CE
Authority key identifier: 1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
Certificate issuer:       /CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Certificate serial:       0198D4E027A678BF7BB8E8876A55A7CF540D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
Manifest number:          078B
Signing time:             Sat 23 Aug 2025 03:01:56 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:56 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:56 +0000
Files and hashes:         1: 01hxjCh_nvh6suIkW5jDT7FQ5wY.roa (hash: 4bkvBLwedWb76MBEvCC/C6c3YY5NjD8WJrDif149Vao=)
                          2: Glyq86CZO3auE-EZE22_AGlpiRE.crl (hash: SDfyxGr1G//C0/7Ib8GTPMadqLABiAd77j0H/wD7MTI=)
                          3: Qy-saNY8_sMM2Rt7ltQaOCM03mI.roa (hash: DmhtR0W/L8xjpyQ+jiNUqtRwA+94a2kvp+LpXXuTce4=)
                          4: vAu0TRUZ6oCOaUrWzBzbupAQywk.roa (hash: eqD14NcTM0qEFrT33cP0ZL7pYdg/PAWVbM43E+i0ncU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:27:a6:78:bf:7b:b8:e8:87:6a:55:a7:cf:54:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5caaf3a0993b76ae13e119136dbf0069698911
        Validity
            Not Before: Aug 23 03:01:56 2025 GMT
            Not After : Aug 24 03:01:56 2025 GMT
        Subject: CN=6641df89bfe6d45293b071dc06abb64646a17ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:29:a8:3c:ec:68:a1:ad:88:84:2f:e8:95:2f:
                    30:0e:a2:b2:4c:92:3a:d1:b0:2f:45:b2:84:b5:1e:
                    96:d0:33:00:5f:6a:6d:7a:30:30:4f:57:dd:24:00:
                    11:78:61:ef:a6:ba:57:07:b8:00:cf:76:55:5d:25:
                    82:bf:16:60:05:c8:04:4e:00:8c:4a:eb:2e:77:11:
                    4b:59:cc:a7:f5:71:c6:52:0d:2e:8f:91:07:6a:bc:
                    42:56:63:40:5b:26:ef:65:41:e3:6c:0c:1b:d8:f7:
                    98:b4:58:f1:bc:0b:ff:63:0d:eb:75:a4:22:57:96:
                    3c:5c:96:24:43:15:2b:1a:45:59:c6:ae:cc:dd:a2:
                    ac:51:5b:b6:a1:7c:fb:2d:1b:fe:f2:08:a1:14:4e:
                    62:75:a9:49:7c:ed:28:3c:07:73:cb:bb:77:4f:56:
                    64:28:0e:ad:75:b1:e2:51:64:cf:57:2f:d1:21:8e:
                    e3:9a:6c:32:dc:78:fe:30:f4:0a:3d:86:f8:38:6c:
                    63:1f:ca:56:d2:55:be:da:28:86:33:e3:ab:1d:31:
                    8e:ba:ff:e1:06:99:af:87:f2:76:08:61:79:d3:79:
                    f1:7c:fd:25:2c:00:bc:6d:8c:85:fd:70:36:aa:e6:
                    39:75:14:07:35:15:71:91:4c:7f:77:be:60:8c:f9:
                    ca:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:41:DF:89:BF:E6:D4:52:93:B0:71:DC:06:AB:B6:46:46:A1:7E:CE
            X509v3 Authority Key Identifier:
                keyid:1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:03:9d:31:0e:79:c5:67:40:3f:7d:99:4c:33:3c:bd:29:7d:
         49:56:35:2b:6b:be:dd:54:ff:1a:20:9e:43:d8:b7:0e:fd:f7:
         f5:34:94:02:b7:6d:14:40:3e:92:01:7d:d9:6d:f5:6c:e4:5a:
         2e:f7:0f:c7:5a:d0:f0:74:4e:ab:13:31:66:9c:f4:de:37:61:
         7a:20:57:20:02:30:2f:44:73:9d:9d:18:ca:c9:f2:aa:fe:53:
         64:db:02:d8:0f:ce:28:7d:71:10:11:8f:32:8a:60:2e:3d:3c:
         3a:1f:72:37:6d:e0:9c:d3:2c:62:bc:8e:63:fe:b2:ed:ce:13:
         54:e4:94:a5:b5:f3:6f:e2:e4:9c:a8:6d:2f:bf:df:53:f8:21:
         e3:6f:3c:8c:99:b1:e8:e1:72:e5:ed:5e:a3:97:f6:dc:eb:65:
         36:6e:59:8f:18:22:7c:6c:00:b2:10:c7:38:1b:eb:9f:c3:90:
         bc:8d:8f:ed:93:14:cd:12:b9:08:9d:98:38:68:ef:26:73:3c:
         fa:b3:b4:e3:4b:47:c8:a2:aa:9b:9c:50:63:ea:10:6e:9f:7a:
         ed:4b:ed:86:43:74:70:3c:60:a7:9c:74:14:eb:b4:23:a9:47:
         f1:b6:55:e0:f0:0d:08:d0:f4:71:64:89:ff:09:26:6f:b8:cd:
         30:24:1e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:44 2025 by rpki-client