Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
File:                     Gloi28jb0tckjer_R-M5D3f7Sws.mft (raw, json)
Hash identifier:          Cwx/823bcPrT/juLoxpZ9Nm2coEUTF2UIW+KdVbd0y0=
Subject key identifier:   A7:19:F6:FE:54:47:0E:67:16:30:C5:96:2B:4F:15:BC:F0:65:6B:5A
Authority key identifier: 1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
Certificate issuer:       /CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Certificate serial:       019D25F1B33FC753ED74C5B87795FEFA8AB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
Manifest number:          188C
Signing time:             Wed 25 Mar 2026 17:01:30 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:30 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:30 +0000
Files and hashes:         1: 5MAPK6EjPFvP--_1_whI7tG2qbo.asa (hash: FwLbZWiuPVr7vbVsggf9jzbAmnmCltkY5rFT85LSnkQ=)
                          2: Gloi28jb0tckjer_R-M5D3f7Sws.crl (hash: q6S1R9IwUvzSMNDBfvQDHC2N2MSYJ5Gqupr1ruJanRM=)
                          3: nyYsyw_puc-6G9sAkIDHBW-qklo.roa (hash: r1YY5k2s3y2JyRlqz7YZwgJSL6r2URPlvPPK7VlHG6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 17:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:b3:3f:c7:53:ed:74:c5:b8:77:95:fe:fa:8a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
        Validity
            Not Before: Mar 25 17:01:30 2026 GMT
            Not After : Mar 26 17:01:30 2026 GMT
        Subject: CN=a719f6fe54470e671630c5962b4f15bcf0656b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:18:a9:fa:5f:02:e5:bd:75:87:6e:da:be:bd:
                    a7:2d:fb:42:77:06:c7:19:28:b8:d8:7e:ce:4b:80:
                    44:e2:df:26:e8:22:5a:b2:4d:b5:77:f7:56:8a:bd:
                    df:6a:0b:d0:46:08:63:64:4d:ea:76:36:d5:60:75:
                    11:51:42:ac:ea:12:4b:bf:87:c0:74:e3:5b:c2:50:
                    92:0a:69:c2:d1:4e:d2:07:c1:d8:49:f8:26:f4:d5:
                    ac:f3:8f:58:83:66:93:a0:6a:ee:24:c4:6c:e5:ec:
                    fe:a2:97:ef:bd:dd:36:20:24:75:33:19:62:38:37:
                    25:1e:81:be:4e:f4:30:64:d4:40:5c:c9:45:04:0e:
                    42:ee:24:ef:17:e9:7d:f1:54:56:25:90:9d:a0:59:
                    38:35:2f:f0:0f:ce:06:51:e7:e2:fb:1d:17:2a:3b:
                    f9:3b:aa:1c:61:9a:b3:1b:4a:71:2d:08:95:a3:40:
                    2f:ab:7e:e7:1f:0c:b7:d1:b8:42:04:03:48:e5:2d:
                    23:97:01:e2:76:fb:47:4f:d7:a2:bc:4e:08:87:35:
                    b3:5d:e6:6d:ed:7b:66:b2:b6:73:b9:f5:a5:ab:29:
                    1a:2a:e1:64:63:48:95:b8:bc:d8:39:37:da:1a:c9:
                    81:40:a7:fa:6b:dd:0c:67:1e:df:b6:d8:9d:f9:2b:
                    23:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:19:F6:FE:54:47:0E:67:16:30:C5:96:2B:4F:15:BC:F0:65:6B:5A
            X509v3 Authority Key Identifier:
                keyid:1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:89:02:2c:f7:10:06:32:f9:70:c5:11:de:40:00:e5:8d:79:
         d8:10:cf:00:96:27:c0:9e:f8:7b:02:93:f6:b0:78:03:8b:15:
         9f:c9:a7:0d:96:fa:21:43:cd:32:cd:1d:04:89:01:62:02:a0:
         36:14:26:12:66:4c:5e:d4:f0:33:ae:04:b2:aa:1f:96:59:14:
         e3:d6:ec:5a:bc:3c:71:99:ac:92:6f:fb:51:4f:5e:6d:df:14:
         57:08:07:48:55:c1:39:d2:2a:f3:12:57:d0:68:34:02:8a:d0:
         5a:64:44:ca:9a:8b:1c:db:7f:03:fd:15:75:a2:6f:a9:ee:cb:
         48:a9:ef:bd:8f:c1:c0:28:36:f8:02:a4:92:07:60:0e:e1:06:
         0e:49:26:77:80:d6:4f:36:88:e6:45:f8:03:9b:b5:0f:f7:4f:
         62:ef:5e:81:85:ea:66:72:e7:a0:af:fa:8f:b6:2e:f2:f3:13:
         0b:6f:12:5b:a4:f3:5c:48:60:f4:a6:b7:b0:4d:9d:16:12:6d:
         bd:3d:41:a0:4d:80:66:54:61:67:83:f5:3a:24:9c:5a:61:d6:
         9c:50:fc:dd:50:23:c5:57:f0:0f:61:bc:db:85:75:3a:9e:18:
         80:a8:03:57:d0:17:25:64:f8:7b:60:ce:57:85:c5:46:e5:fd:
         20:0a:c7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:18:19 2026 by rpki-client