Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
File:                     Gloi28jb0tckjer_R-M5D3f7Sws.mft (raw, json)
Hash identifier:          ueaS69tBuBa5yaHaioQCMy+A4coGdlFF8cSwBm2sU+I=
Subject key identifier:   10:CB:29:8E:71:D8:0C:E9:1C:BA:D2:98:FC:A9:EE:39:5B:82:33:F2
Authority key identifier: 1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
Certificate issuer:       /CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Certificate serial:       01A0EC2EFB207F10C60DC4FD33BEB0747FC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
Manifest number:          1A81
Signing time:             Tue 29 Sep 2026 08:01:36 +0000
Manifest this update:     Tue 29 Sep 2026 08:01:36 +0000
Manifest next update:     Wed 30 Sep 2026 08:01:36 +0000
Files and hashes:         1: Gloi28jb0tckjer_R-M5D3f7Sws.crl (hash: ZVngf/FMAk79rcG1DDZAwtzJr2JxFm0rgo86sDqim1Q=)
                          2: Suhh8wT3AT5mNSncT2o5IDBX68I.asa (hash: tisB4erk3EB45R0ami9NUuqag4XnzvX758+PaZr7EPg=)
                          3: nyYsyw_puc-6G9sAkIDHBW-qklo.roa (hash: r1YY5k2s3y2JyRlqz7YZwgJSL6r2URPlvPPK7VlHG6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ec:2e:fb:20:7f:10:c6:0d:c4:fd:33:be:b0:74:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
        Validity
            Not Before: Sep 29 08:01:36 2026 GMT
            Not After : Sep 30 08:01:36 2026 GMT
        Subject: CN=10cb298e71d80ce91cbad298fca9ee395b8233f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1e:a6:8b:b6:6d:29:29:89:4a:73:00:7d:31:
                    87:fc:8e:bf:23:93:5c:15:c5:bd:f9:ba:d7:c0:ce:
                    7e:8e:03:cb:57:2d:d1:87:bd:c3:cc:ec:4c:b2:2d:
                    f1:09:18:84:3d:91:9d:c4:0d:d2:6b:8b:f8:18:53:
                    9a:e3:ef:20:b5:f2:86:06:3f:11:86:d3:0d:2a:86:
                    a3:64:98:dd:12:05:27:ff:82:ae:2e:26:5b:f5:9c:
                    32:b9:7c:4d:e7:7a:15:00:bd:51:54:bf:14:cc:ba:
                    d6:90:e5:c6:07:f4:d5:80:8c:71:78:b2:76:74:19:
                    77:06:e6:52:fc:06:26:b4:01:78:08:33:d7:1f:a4:
                    ec:a3:00:8c:ff:e7:ab:3c:44:da:e3:f2:08:90:89:
                    d3:6b:77:20:fe:cb:2f:9b:ed:aa:cc:69:47:7a:01:
                    5d:00:5e:fc:d3:c0:29:b4:80:ab:af:e3:b7:ae:93:
                    97:4a:a6:94:a3:d5:46:e7:2f:73:16:b4:9e:e1:fe:
                    68:6d:d7:23:ae:29:36:35:18:2d:68:f4:0b:55:be:
                    ed:21:2d:46:12:0d:cb:16:98:9e:9c:c4:9a:75:43:
                    55:0b:9e:69:1f:fd:a5:ed:cf:e2:fb:3f:ca:a0:60:
                    50:53:e1:1c:ca:b9:45:c0:ce:dd:8e:df:3a:70:54:
                    19:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CB:29:8E:71:D8:0C:E9:1C:BA:D2:98:FC:A9:EE:39:5B:82:33:F2
            X509v3 Authority Key Identifier:
                keyid:1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c1:dc:31:d3:fe:49:26:8e:67:71:90:e0:10:79:f0:f9:18:
         56:30:0f:03:77:82:19:56:dc:d2:2f:21:bb:2c:e8:47:ff:3e:
         1e:02:e3:b3:70:0d:39:d3:1e:99:eb:c3:4a:7b:3f:bf:7e:85:
         69:76:4a:cf:0d:ca:01:aa:65:ed:c6:10:30:45:88:a3:5a:b3:
         0f:71:95:3b:08:8d:40:8c:52:12:1c:93:d8:31:d7:44:ba:ec:
         20:db:4e:77:30:21:fe:26:02:63:b9:bd:d0:34:66:20:03:13:
         42:ac:0f:53:60:ed:4a:67:6f:21:32:bd:e3:b4:5e:0f:fd:33:
         3b:02:4d:47:af:ab:30:d2:bd:48:aa:2a:b4:7c:f9:0f:cb:f0:
         3f:60:be:02:e2:d6:ae:1b:b4:b8:a3:60:cf:53:c5:f3:44:db:
         b9:c3:84:49:b8:6a:e3:e4:cb:4b:a8:fe:86:56:53:2d:90:f3:
         0c:b4:87:66:19:7f:7d:90:31:53:31:3b:3e:a2:57:93:37:41:
         0e:ff:61:0d:6e:7c:f7:0a:7c:d6:c8:29:61:45:20:a5:8b:b2:
         1c:92:4d:42:f1:07:37:f4:2d:c0:a1:42:85:d1:88:57:cc:3e:
         b3:7f:1a:e0:97:54:e8:69:71:c6:61:e9:30:07:bc:01:c6:d1:
         67:a7:c6:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDsLvsgfxDGDcT9M76wdH/AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNWEyMmRiYzhkYmQyZDcyNDhkZWFmZjQ3ZTMzOTBmNzdm
YjRiMGIwHhcNMjYwOTI5MDgwMTM2WhcNMjYwOTMwMDgwMTM2WjAzMTEwLwYDVQQD
EygxMGNiMjk4ZTcxZDgwY2U5MWNiYWQyOThmY2E5ZWUzOTViODIzM2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7R6mi7ZtKSmJSnMAfTGH/I6/I5Nc
FcW9+brXwM5+jgPLVy3Rh73DzOxMsi3xCRiEPZGdxA3Sa4v4GFOa4+8gtfKGBj8R
htMNKoajZJjdEgUn/4KuLiZb9ZwyuXxN53oVAL1RVL8UzLrWkOXGB/TVgIxxeLJ2
dBl3BuZS/AYmtAF4CDPXH6TsowCM/+erPETa4/IIkInTa3cg/ssvm+2qzGlHegFd
AF7808AptICrr+O3rpOXSqaUo9VG5y9zFrSe4f5obdcjrik2NRgtaPQLVb7tIS1G
Eg3LFpienMSadUNVC55pH/2l7c/i+z/KoGBQU+EcyrlFwM7djt86cFQZNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDLKY5x2AzpHLrSmPyp7jlbgjPyMB8GA1UdIwQY
MBaAFBpaItvI29LXJI3q/0fjOQ93+0sLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2xvaTI4amIwdGNramVyX1ItTTVEM2Y3U3dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xOTIyYzktNDk0OS00MDU1LWE2NmUt
MTVkMzI3MDliZDBmLzEvR2xvaTI4amIwdGNramVyX1ItTTVEM2Y3U3dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8xOTIyYzktNDk0OS00MDU1LWE2NmUtMTVkMzI3MDliZDBm
LzEvR2xvaTI4amIwdGNramVyX1ItTTVEM2Y3U3dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsHcMdP+
SSaOZ3GQ4BB58PkYVjAPA3eCGVbc0i8huyzoR/8+HgLjs3ANOdMemevDSns/v36F
aXZKzw3KAapl7cYQMEWIo1qzD3GVOwiNQIxSEhyT2DHXRLrsINtOdzAh/iYCY7m9
0DRmIAMTQqwPU2DtSmdvITK947ReD/0zOwJNR6+rMNK9SKoqtHz5D8vwP2C+AuLW
rhu0uKNgz1PF80TbucOESbhq4+TLS6j+hlZTLZDzDLSHZhl/fZAxUzE7PqJXkzdB
Dv9hDW589wp81sgpYUUgpYuyHJJNQvEHN/QtwKFChdGIV8w+s38a4JdU6GlxxmHp
MAe8AcbRZ6fGJA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 10:55:05 2026 by rpki-client