Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.mft
File:                     Glnpo_w_tbDVggVqOyRVPFa9J_A.mft (raw, json)
Hash identifier:          GllW3pHXO5/5HSP+oyxUAQt+VRLejD3gdmT/5IJ4+eQ=
Subject key identifier:   D3:27:6F:83:24:80:33:C9:C6:29:C3:61:D0:CC:32:1B:0D:34:04:5C
Authority key identifier: 1A:59:E9:A3:FC:3F:B5:B0:D5:82:05:6A:3B:24:55:3C:56:BD:27:F0
Certificate issuer:       /CN=1a59e9a3fc3fb5b0d582056a3b24553c56bd27f0
Certificate serial:       019D254C57F3882FA76E6047566C3DC59510
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Glnpo_w_tbDVggVqOyRVPFa9J_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.mft
Manifest number:          0817
Signing time:             Wed 25 Mar 2026 14:00:53 +0000
Manifest this update:     Wed 25 Mar 2026 14:00:53 +0000
Manifest next update:     Thu 26 Mar 2026 14:00:53 +0000
Files and hashes:         1: Glnpo_w_tbDVggVqOyRVPFa9J_A.crl (hash: o1supTKdiaEvo7hSj5fL78lVzTBDrI+9yVCdIBQ1U3k=)
                          2: IPRJvTT5abzwXEgwtUATo_Cruio.roa (hash: nJcyG7boelvA22L3V0LARmjaagoz8Y3rCUmqrcO3Btw=)
                          3: Rw2WB5rXZCgpkSlsT60GJ_Uubzs.roa (hash: yuF4HukrTFZ72XZMCbxutNeFUS+TivxiXIqbgMaC5Nc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Glnpo_w_tbDVggVqOyRVPFa9J_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:4c:57:f3:88:2f:a7:6e:60:47:56:6c:3d:c5:95:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a59e9a3fc3fb5b0d582056a3b24553c56bd27f0
        Validity
            Not Before: Mar 25 14:00:53 2026 GMT
            Not After : Mar 26 14:00:53 2026 GMT
        Subject: CN=d3276f83248033c9c629c361d0cc321b0d34045c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b6:e1:fb:3f:23:dd:b1:66:0e:52:62:4c:8b:
                    a5:f7:f5:c8:26:e3:fa:a6:3c:9c:c1:21:bf:27:64:
                    a7:03:48:07:bb:64:b8:f8:f4:b7:0f:b9:3b:35:52:
                    7f:2e:64:f3:5a:c9:d8:5e:cc:78:62:79:c9:68:71:
                    18:25:d0:78:38:8f:aa:eb:ad:19:14:4f:08:fe:33:
                    6f:c7:c1:ab:98:00:b3:2a:40:82:06:3e:3a:96:f4:
                    bb:14:4b:a9:04:d7:6a:1c:fa:dc:e2:f9:dd:69:f5:
                    35:e2:50:91:22:b7:4f:70:ee:92:7e:5c:98:20:c0:
                    83:38:54:c4:7a:01:cd:e1:26:6c:1a:3f:e2:79:5f:
                    9f:c1:ce:2d:71:2e:7d:9e:44:0e:d0:b4:bf:d2:61:
                    e0:b1:be:4e:bb:e8:3c:b3:9c:65:29:44:2d:73:bc:
                    44:ad:b2:9e:35:88:20:91:7a:28:77:23:9f:1e:59:
                    0c:7b:7d:12:4b:32:e1:8b:af:4e:59:5d:59:1b:4e:
                    3c:09:8f:b3:cc:c2:99:f4:c2:58:7d:f9:27:a8:8e:
                    9a:98:7b:84:b9:51:b6:4c:79:d0:f7:b3:83:15:fb:
                    ff:bd:07:4a:c8:77:56:fc:d9:c1:11:f9:f9:84:4c:
                    1d:ad:e9:72:b5:ca:a3:a2:de:4f:37:95:26:9a:41:
                    4d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:27:6F:83:24:80:33:C9:C6:29:C3:61:D0:CC:32:1B:0D:34:04:5C
            X509v3 Authority Key Identifier:
                keyid:1A:59:E9:A3:FC:3F:B5:B0:D5:82:05:6A:3B:24:55:3C:56:BD:27:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glnpo_w_tbDVggVqOyRVPFa9J_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c766fa-515e-4bb7-a6a5-e1ef14274630/1/Glnpo_w_tbDVggVqOyRVPFa9J_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ad:0b:e7:2e:85:15:83:a5:ff:38:0d:cc:54:f8:c5:6b:33:
         95:86:f5:02:c1:fa:e8:a3:1c:36:be:2f:ac:d6:7d:89:23:2b:
         23:3f:13:f7:d7:be:ea:a5:18:91:de:37:fa:73:e5:97:60:4b:
         fe:9f:ee:95:5e:54:14:e8:a9:34:af:3a:ac:38:37:8c:1a:51:
         53:51:9c:23:16:9b:21:c5:2a:9f:f4:ef:67:e2:6f:79:d8:c1:
         18:85:38:39:61:64:58:32:09:8e:cf:5e:e9:94:e7:74:ae:c5:
         20:b4:31:39:03:56:5d:6d:dc:cc:73:ba:9d:64:25:a2:7d:1f:
         8e:30:d6:2a:6c:53:c5:1e:41:13:49:18:06:9a:98:10:a1:a7:
         f8:3d:77:2d:c5:7e:fb:50:58:9a:18:9a:00:d6:0f:35:4c:18:
         83:24:f8:97:46:3d:46:12:a0:83:27:5f:65:34:db:50:79:55:
         4a:d3:67:2b:9c:b1:63:96:e3:37:3e:e5:9a:65:eb:ee:4d:7c:
         7d:ce:6d:c3:6c:f3:0d:b8:53:e8:a2:f4:f0:50:c7:ec:aa:c1:
         25:19:77:ab:51:63:43:19:7c:87:89:53:8b:e7:98:52:48:a2:
         a9:29:10:c6:6a:28:b6:2d:7b:f1:d1:9c:29:d4:fe:2d:1d:1a:
         15:0f:2b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:06 2026 by rpki-client