Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
File:                     Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft (raw, json)
Hash identifier:          NlvsOe8pnwk9kBfo0JdasIt+ep4EJ28YwQKnZiN4k78=
Subject key identifier:   A5:50:33:33:37:45:3C:87:A4:0A:78:FF:41:0A:02:62:B7:88:A7:07
Authority key identifier: 1A:5B:7D:43:BB:4C:83:E7:C7:D9:7C:E0:75:43:A9:6D:74:C6:9F:DA
Certificate issuer:       /CN=1a5b7d43bb4c83e7c7d97ce07543a96d74c69fda
Certificate serial:       0198D4E0BC447B24261A54EF95BF880059DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
Manifest number:          1087
Signing time:             Sat 23 Aug 2025 03:02:34 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:34 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:34 +0000
Files and hashes:         1: Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl (hash: ETsI5CAsvsA6bXuD6xy5ctu64Bl+maadyRLd+KU6qHE=)
                          2: H0COiaXg1EPyNKPDom-EUSSKISY.roa (hash: MIq94Fsgw9khyXovQNvHuap+wuDPe/60Pb4JAxZUi4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:bc:44:7b:24:26:1a:54:ef:95:bf:88:00:59:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5b7d43bb4c83e7c7d97ce07543a96d74c69fda
        Validity
            Not Before: Aug 23 03:02:34 2025 GMT
            Not After : Aug 24 03:02:34 2025 GMT
        Subject: CN=a550333337453c87a40a78ff410a0262b788a707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:21:4c:8b:b7:49:26:bf:7d:e5:98:e8:f3:d5:
                    6c:81:18:af:b1:72:b0:09:83:8e:26:d9:4a:08:9d:
                    8d:9c:4a:d0:17:f2:11:61:ba:5c:2c:e6:f2:f9:a1:
                    d5:e0:82:0b:a0:5e:c6:cf:74:9c:b2:05:d5:69:03:
                    a9:d8:8b:4e:d9:ab:39:95:82:54:b4:fe:82:18:9f:
                    bb:15:7d:11:6c:73:04:39:11:3c:b7:e7:ac:fb:b6:
                    de:5e:e0:97:28:2e:cd:b4:23:77:61:74:ac:06:8f:
                    63:dd:db:67:6b:66:2a:78:0d:d5:a0:1a:ae:b1:5e:
                    36:a8:15:9e:b2:9b:13:01:e8:5b:12:5a:33:41:32:
                    2c:bb:5a:4c:95:ba:1e:db:24:ad:37:a6:62:a9:10:
                    05:a4:0d:ba:a5:0d:74:ae:1e:d3:6a:37:81:1c:18:
                    18:b4:d0:fa:80:37:eb:87:8d:b1:e7:ab:83:ac:4f:
                    1a:9d:00:92:54:ed:a6:b8:82:38:4b:c9:69:c9:a7:
                    7f:78:99:67:8e:9c:c9:2b:15:b4:6d:17:ad:03:94:
                    6f:f0:64:25:92:1d:6f:b8:d3:32:e2:c5:bf:76:75:
                    85:99:fd:c4:44:5a:8d:1d:96:80:ec:1f:92:11:81:
                    b2:2d:e0:bf:d9:ff:12:73:f0:7b:d2:74:28:99:e6:
                    56:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:50:33:33:37:45:3C:87:A4:0A:78:FF:41:0A:02:62:B7:88:A7:07
            X509v3 Authority Key Identifier:
                keyid:1A:5B:7D:43:BB:4C:83:E7:C7:D9:7C:E0:75:43:A9:6D:74:C6:9F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:4b:30:e1:75:a6:b5:bd:8d:b4:14:14:b8:27:a7:58:f2:2a:
         55:7e:d1:ac:b8:f1:e5:37:6a:fa:cf:de:d9:32:3f:68:95:10:
         e1:cc:3b:81:87:2f:28:b2:13:69:6b:d1:f8:16:d0:83:0a:d2:
         78:b4:ff:57:54:66:88:13:1b:b3:33:f9:cf:db:ae:2c:47:c6:
         b5:d2:5a:fa:a8:db:29:57:78:87:e9:6a:01:d9:e4:51:a9:02:
         89:3a:7e:a0:e6:e7:e2:54:87:8b:bf:cd:be:0d:87:bd:e2:13:
         e5:3b:2f:e7:63:15:19:8c:e2:93:f5:6c:06:1b:5f:34:35:78:
         bd:be:26:ad:06:7c:92:2c:78:46:dd:18:1b:b5:5b:87:b5:37:
         0f:36:c5:b3:3d:d1:38:7a:f9:af:97:fd:d8:95:99:94:ac:de:
         3d:81:36:67:c7:6c:15:48:51:4c:6b:be:8b:9e:b1:0c:4b:bb:
         33:67:c8:6b:5b:5b:0c:02:70:1a:e3:2d:61:6e:c7:64:37:13:
         dc:42:8c:f1:13:fe:91:0c:89:12:38:b5:6f:ff:86:47:42:1d:
         88:c2:cd:57:fa:9e:89:08:9e:58:2c:bf:9f:50:1b:85:2a:80:
         52:7b:69:f6:f1:16:0b:95:8e:48:ad:ab:63:a3:25:e7:c4:78:
         d0:f3:f8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:44 2025 by rpki-client