Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
File:                     glLEw3Iyf9wsF7SVuFiRp23kJRA.mft (raw, json)
Hash identifier:          V1oWrDU8k0aUO4b6bKiEdR6HadBEkZHNEtXcMeA8vFg=
Subject key identifier:   C1:B7:90:51:91:6E:A9:11:C0:57:DA:D4:F6:86:05:76:88:14:75:04
Authority key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
Certificate issuer:       /CN=8252c4c372327fdc2c17b495b85891a76de42510
Certificate serial:       019F9436F07DB71ADAC481D51466ACFDFA65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
Manifest number:          088E
Signing time:             Fri 24 Jul 2026 13:00:56 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:56 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:56 +0000
Files and hashes:         1: glLEw3Iyf9wsF7SVuFiRp23kJRA.crl (hash: da0hVSOo1V/85TU5kLtOzLuxpCweH1Oiclvf0w1WOvE=)
                          2: z8hJl8rGyd_56TuV5GLYx9xFhho.roa (hash: XAMtoMHmL3C5zB92ZcL52Exd5SlTcXF5KJm8ioosamE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:f0:7d:b7:1a:da:c4:81:d5:14:66:ac:fd:fa:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8252c4c372327fdc2c17b495b85891a76de42510
        Validity
            Not Before: Jul 24 13:00:56 2026 GMT
            Not After : Jul 25 13:00:56 2026 GMT
        Subject: CN=c1b79051916ea911c057dad4f686057688147504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:1d:a0:d1:21:07:38:28:0c:ea:8d:52:5f:
                    68:ea:d1:39:fc:70:dc:cc:11:e8:98:35:ef:69:4a:
                    eb:5d:fd:ca:c6:64:19:d7:e2:b5:53:4c:bc:ec:3e:
                    5a:9b:ac:2e:ef:73:54:d4:8f:ba:fa:fa:37:06:fb:
                    87:93:a2:31:73:22:48:5a:6f:b0:68:bd:8d:cc:cd:
                    d1:72:b0:01:72:0c:ca:7d:42:74:f2:96:6c:96:b1:
                    51:f5:55:ed:72:b1:76:c6:63:9a:36:ad:b1:7f:f1:
                    a2:e1:07:e1:20:b1:0b:c6:e1:52:cb:c3:ee:4a:b0:
                    89:78:0a:d9:7c:ab:26:6a:cf:45:d2:f0:8c:f3:7b:
                    ab:eb:29:cc:63:61:87:d1:5e:dd:c8:d5:24:d2:63:
                    0d:d6:7c:66:23:23:8b:37:67:22:78:af:e4:7e:48:
                    25:14:50:27:58:0e:20:e5:16:7d:eb:1a:f9:e0:93:
                    3e:4e:f7:ad:dd:e0:79:3c:f8:51:dc:f4:fc:46:7e:
                    7b:97:6f:ce:8d:23:b5:d0:fa:6c:98:6b:f0:4a:28:
                    39:b3:7c:3b:f9:4a:c1:43:99:b2:94:32:7d:e2:da:
                    66:12:c1:ec:93:d7:7b:88:23:a9:87:5c:83:a9:b0:
                    fb:78:e6:b3:f2:66:86:f5:bf:61:5e:68:97:3b:06:
                    46:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B7:90:51:91:6E:A9:11:C0:57:DA:D4:F6:86:05:76:88:14:75:04
            X509v3 Authority Key Identifier:
                keyid:82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:9a:f2:1b:76:1b:1e:6c:ba:3f:14:9d:73:f5:f7:b2:1a:cf:
         32:eb:c7:c3:a1:ba:cd:01:fc:0b:77:7c:fe:c5:20:3b:83:ee:
         bb:61:a9:8a:cc:16:ff:67:bb:96:a8:f6:94:bd:7e:6c:f5:25:
         e1:3d:60:d9:4e:89:76:75:49:72:d3:28:6a:0f:8d:f8:bb:ba:
         96:aa:c0:2a:69:7e:57:1e:50:27:d9:69:62:d1:51:af:35:d0:
         92:de:fb:48:54:2f:17:be:f0:04:c9:02:62:54:0e:84:81:e4:
         fb:5c:f8:49:a8:1b:3e:e9:d7:92:5d:55:fa:fb:8b:e3:4c:bf:
         d7:95:81:5e:0f:68:52:6c:3b:e5:5e:69:0b:66:b5:9f:63:ab:
         00:fd:31:d1:91:50:14:7d:eb:60:61:7d:38:0b:5e:cd:2e:c3:
         2e:29:bb:4e:47:41:25:03:22:97:1b:6a:a7:6d:bf:59:c4:bc:
         d2:9a:13:3b:2b:b1:e0:ed:ec:73:47:d3:e3:93:29:0b:d3:2b:
         a4:ae:d7:a4:50:39:fa:d8:1d:96:c9:0e:62:87:bd:27:74:a2:
         89:a5:49:6c:b2:c7:6e:75:da:db:6e:b6:61:e0:2c:eb:0b:63:
         1d:39:01:22:0a:b7:18:c4:d7:1b:49:9e:17:f9:c2:13:67:fa:
         2f:63:65:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:44 2026 by rpki-client