Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
File:                     glLEw3Iyf9wsF7SVuFiRp23kJRA.mft (raw, json)
Hash identifier:          4zrGkLGwGvx3fNrJTVvG1EMaFHC+DLQSibk0Wo9+wL4=
Subject key identifier:   CA:C3:58:12:A2:7A:25:A1:AD:04:A2:3A:C5:66:84:D9:0D:C1:8D:2D
Authority key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
Certificate issuer:       /CN=8252c4c372327fdc2c17b495b85891a76de42510
Certificate serial:       019E1F7F6210C47286331D936A941652CD79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
Manifest number:          07CD
Signing time:             Wed 13 May 2026 04:01:42 +0000
Manifest this update:     Wed 13 May 2026 04:01:42 +0000
Manifest next update:     Thu 14 May 2026 04:01:42 +0000
Files and hashes:         1: glLEw3Iyf9wsF7SVuFiRp23kJRA.crl (hash: tPhGuqNlX1G/0vS5mlFfYgUGKZZYWpiEx5wLuIpzh1k=)
                          2: z8hJl8rGyd_56TuV5GLYx9xFhho.roa (hash: XAMtoMHmL3C5zB92ZcL52Exd5SlTcXF5KJm8ioosamE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:62:10:c4:72:86:33:1d:93:6a:94:16:52:cd:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8252c4c372327fdc2c17b495b85891a76de42510
        Validity
            Not Before: May 13 04:01:42 2026 GMT
            Not After : May 14 04:01:42 2026 GMT
        Subject: CN=cac35812a27a25a1ad04a23ac56684d90dc18d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9d:77:5d:4d:ab:ee:89:7b:f4:f9:84:e6:e9:
                    de:ab:9a:8e:a9:3c:1f:1d:13:d2:f6:2a:01:25:f2:
                    8b:59:5f:6e:30:15:27:b2:5b:3a:28:38:60:d2:82:
                    9f:b8:9f:d3:98:2f:d7:e0:fa:23:96:0e:6e:26:ff:
                    0e:40:23:b0:9a:ca:5e:15:7b:98:4c:8e:12:32:56:
                    6f:18:28:ce:b4:c1:a7:8b:eb:2a:3b:86:e9:b7:2c:
                    26:96:ad:79:60:3d:89:ef:bc:25:60:b3:b0:08:6b:
                    71:f6:a9:aa:37:41:38:a7:70:53:1f:d1:53:42:1f:
                    3a:50:2c:aa:41:10:5a:bc:08:0b:0e:fb:3c:7a:7d:
                    98:60:a5:36:7d:b1:26:70:fd:db:24:71:44:5a:58:
                    d4:e6:a2:a2:44:17:ba:65:94:64:38:5b:79:3c:07:
                    00:9c:22:da:8a:69:45:75:f4:65:65:b9:55:29:54:
                    8e:38:e3:f4:cf:5e:7f:78:48:7c:cc:88:89:27:c1:
                    1c:18:04:32:32:fd:8b:98:c4:11:3c:6b:2f:0f:c7:
                    84:d8:7b:eb:58:df:c6:36:19:7a:bd:1d:9b:28:1e:
                    eb:0f:86:c7:a6:45:4c:dd:d4:f7:23:b1:54:8f:76:
                    5b:af:de:09:64:2b:da:1f:02:56:94:4f:6f:61:a1:
                    6e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C3:58:12:A2:7A:25:A1:AD:04:A2:3A:C5:66:84:D9:0D:C1:8D:2D
            X509v3 Authority Key Identifier:
                keyid:82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a0:7b:1c:d2:c5:78:82:0d:28:cb:ca:7a:7b:ee:17:93:13:
         1c:d4:31:5f:59:71:57:9f:ff:40:b2:4c:39:ed:fc:f3:af:69:
         79:67:5b:40:cf:85:23:9c:9a:9c:b3:cc:d8:db:d7:71:3c:2a:
         78:b6:ed:86:5c:09:9d:d0:fd:33:7a:0c:ef:14:c4:ba:15:31:
         f7:52:5c:51:42:ec:a4:59:70:f8:fb:b7:01:0d:7c:4c:f3:33:
         f1:3c:b1:2c:02:d4:d2:f3:5f:6d:55:cc:73:e1:55:3d:1e:bb:
         31:fe:35:7b:5b:72:6f:8c:7f:62:71:2a:8f:9d:0c:87:a0:50:
         1e:3c:2f:d1:ae:fc:f1:6c:e2:d2:bc:3e:62:48:49:98:cb:5e:
         4e:5a:82:42:08:df:6a:42:e1:e6:13:66:e7:ce:a5:48:bf:da:
         a2:fe:04:0d:0e:bf:5a:b5:8a:a6:fc:5f:a8:1f:7e:67:71:d0:
         37:5a:ae:19:d0:18:78:d5:f5:02:82:36:5c:9f:21:f0:02:e9:
         6a:e2:a4:b1:f1:0a:ef:4c:d2:d8:6d:22:65:69:e8:ad:53:16:
         22:b3:c8:a3:44:42:98:c3:62:18:23:1d:af:0f:ff:10:7e:2c:
         a3:60:fc:39:c4:ce:73:48:46:8c:29:f2:a7:2e:40:13:16:12:
         ea:d8:2a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:24 2026 by rpki-client