Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
File:                     glNFBYRfoKk_goWm2ovObR1yAN0.mft (raw, json)
Hash identifier:          LKlfCzO6ABcXCDmPrEfZ0gOc8GK+pCMUUNIUWRCpFYI=
Subject key identifier:   A4:B6:75:B5:E5:2E:EB:FE:6F:C9:5B:5D:A5:43:ED:8D:96:06:17:79
Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
Certificate issuer:       /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Certificate serial:       019E1D22BCBC8963E96BF8E8BF2D8C77F392
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
Manifest number:          0FE7
Signing time:             Tue 12 May 2026 17:01:16 +0000
Manifest this update:     Tue 12 May 2026 17:01:16 +0000
Manifest next update:     Wed 13 May 2026 17:01:16 +0000
Files and hashes:         1: glNFBYRfoKk_goWm2ovObR1yAN0.crl (hash: bDLphjZsmIkbgrR1nIyZtVvd9xivkNkQlEUm/e/9z2Y=)
                          2: t6uJnjT04JxAMbhWunFCrGch9dE.roa (hash: ipX6tbTTZfYSopPgMvzN1VwXoXH9Z4uS/A5CMI0tQEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:bc:bc:89:63:e9:6b:f8:e8:bf:2d:8c:77:f3:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
        Validity
            Not Before: May 12 17:01:16 2026 GMT
            Not After : May 13 17:01:16 2026 GMT
        Subject: CN=a4b675b5e52eebfe6fc95b5da543ed8d96061779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:76:d6:76:5c:34:82:76:78:87:6a:0b:37:c0:
                    f8:cf:15:e3:6b:fb:84:e6:1f:96:54:f7:94:0d:41:
                    df:54:47:ec:d1:9c:82:db:b5:b4:0b:3b:2a:c7:79:
                    af:31:9c:c1:1d:71:c3:5f:14:7a:e4:1e:48:95:98:
                    f6:37:38:e4:d6:58:31:e0:f5:5e:0d:3c:4d:1b:a6:
                    df:71:97:1b:b4:1e:44:2e:5f:b0:83:9d:e4:f3:78:
                    50:86:9a:9e:db:51:7b:8a:5f:60:39:af:f9:c0:7c:
                    a7:72:d9:75:21:e0:5d:58:47:ae:88:1a:b0:67:cc:
                    a8:ac:80:ec:4e:ee:a9:b4:a0:e7:8a:ca:4b:f3:62:
                    62:7a:6e:42:a8:a5:f6:88:e7:da:8c:d0:3c:89:3a:
                    cb:7d:d4:ee:70:ea:b5:ec:3e:78:23:b5:62:83:52:
                    18:10:eb:84:d0:e8:f5:62:48:12:f0:bb:46:36:7c:
                    6f:79:e9:37:db:96:69:df:f1:c9:94:eb:d6:ec:fc:
                    ad:5d:cc:e6:22:3e:78:a6:4a:55:c2:2a:17:3a:c3:
                    8d:46:25:99:28:9b:82:07:2f:fa:16:a3:15:19:11:
                    35:2b:6a:f4:b7:9a:08:f6:bb:a7:6e:7c:23:a3:ff:
                    1a:b3:1f:38:8f:8d:5f:e9:40:55:1d:ef:cc:eb:06:
                    16:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B6:75:B5:E5:2E:EB:FE:6F:C9:5B:5D:A5:43:ED:8D:96:06:17:79
            X509v3 Authority Key Identifier:
                keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:1e:10:a8:36:1c:87:be:5d:60:37:af:cf:5f:b6:e9:4b:e7:
         52:d9:16:fa:a3:5f:55:33:a2:7e:c1:a9:2f:c1:30:79:ec:a7:
         a2:0a:fb:2b:a6:32:9d:e4:b9:af:97:d2:37:21:18:e3:e9:6e:
         14:26:18:56:c1:72:a3:9d:f6:bc:f3:56:a2:ba:ae:e3:ff:e6:
         b1:24:fe:f4:d0:38:0a:34:67:5f:f7:bb:dc:f5:78:6c:cd:84:
         c7:e6:32:45:aa:b8:eb:3b:89:b3:f7:1e:47:3b:16:db:11:88:
         26:96:f1:9f:a9:24:3b:3b:6b:e0:5a:d1:60:93:2f:cb:99:ba:
         de:e1:fa:65:1a:20:e2:62:c2:c2:3a:74:b8:7d:e0:34:38:bf:
         c2:e4:47:51:b1:5b:2e:da:74:5d:c2:31:c3:88:e2:70:b2:01:
         c7:db:9b:24:e0:66:4a:c6:48:5f:8a:a5:d6:3f:e1:54:52:f7:
         8e:1d:60:b9:ba:27:cc:6c:48:f4:98:86:1a:50:6a:ae:4b:b4:
         af:fc:de:1c:b5:1b:10:6e:6c:e8:1f:f1:68:21:91:e5:c0:3f:
         49:19:a0:e7:64:80:c6:9c:b5:a5:9a:a5:43:b5:a0:91:97:5e:
         ce:f5:90:9f:4e:02:6d:25:bd:ba:14:d6:8f:cc:8c:a4:4f:e7:
         f8:e0:51:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:15 2026 by rpki-client