Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
File:                     glHn-2uWDUBrIjbSXk4g4kU1nbI.mft (raw, json)
Hash identifier:          8PjGX+6z4DaySD4occBnwIObAP7IDON0xfmwUqA702g=
Subject key identifier:   F7:DE:F4:CB:79:F3:AD:5F:3A:03:9C:7A:4C:AE:DB:32:EF:02:C5:AD
Authority key identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
Certificate issuer:       /CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Certificate serial:       019D269613A7998DD1D0CEA8812F45AF68BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
Manifest number:          1888
Signing time:             Wed 25 Mar 2026 20:01:02 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:02 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:02 +0000
Files and hashes:         1: 4FDNWntT8HGm47C46owaTOgYZFY.roa (hash: MNnKoAQqNIz7h2yGseXPJCLeJOP5/UFE0Y/s3x5Ddio=)
                          2: INjnRxc1KDjJdK0P3v0NKp9zXSA.roa (hash: U1Y8u0AecjgXDJowXa0cOGElTwu53RvRkwL+O2WLn8c=)
                          3: LfgI9rpN293BrrnzaHSQkYw-4Vo.roa (hash: 17vv8CHDmx8Pt5VIpPIqTVbzDuzHnEYkz/7k/nREMI0=)
                          4: MxTmbVkJmB_lTh2o1kTnP_BFeDY.roa (hash: ttGF8f4pFYCjKqu0HAUvABDoHst3U1ecGF8sI6MFc/8=)
                          5: SSZXBlYC8HRLyEBgcVeFIXi-Zbg.roa (hash: 7JMK2h+HH0ge6JJyog9isIH7U/WCw5GQsuyNPYb8o94=)
                          6: glHn-2uWDUBrIjbSXk4g4kU1nbI.crl (hash: pAVO/QoTnCCTc6TzrhsYvfRzGdWp9HLq78BOZ3Tpiz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:13:a7:99:8d:d1:d0:ce:a8:81:2f:45:af:68:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8251e7fb6b960d406b2236d25e4e20e245359db2
        Validity
            Not Before: Mar 25 20:01:02 2026 GMT
            Not After : Mar 26 20:01:02 2026 GMT
        Subject: CN=f7def4cb79f3ad5f3a039c7a4caedb32ef02c5ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2b:1e:a6:b0:38:82:6a:85:14:8c:e9:0f:1d:
                    f9:ea:5d:6c:47:d6:99:c9:90:58:36:c3:57:b8:14:
                    55:bf:dc:a2:ca:ea:26:cb:9e:bb:17:1e:5a:60:0d:
                    58:78:da:bd:7b:f3:f7:57:35:0c:31:62:b4:ce:d7:
                    b8:f8:f2:a1:bb:1c:05:af:0f:77:f2:30:be:8c:31:
                    d4:9d:ce:fa:24:89:8c:5e:34:94:91:fd:46:33:61:
                    03:9a:23:6a:1e:44:45:5a:f1:01:da:b4:15:f0:5e:
                    91:4d:6a:37:d2:e6:43:a4:e1:15:55:98:77:f1:1b:
                    a8:69:f7:87:97:c9:98:d2:82:f0:85:c8:65:f5:b2:
                    4a:cd:94:ee:98:0a:79:d9:e6:81:3b:f3:2a:dc:34:
                    b4:2a:ad:61:cd:2c:f1:e6:17:8e:dc:94:10:84:a2:
                    d2:f8:fd:66:28:b2:cc:b9:2e:bc:a2:a7:a9:33:46:
                    57:d7:1c:c7:f5:d6:e6:c0:81:79:a9:ba:57:74:e7:
                    47:0e:a9:71:7d:bb:0b:2e:a1:45:fe:9b:cc:fa:f7:
                    f8:bb:7c:8f:56:33:94:61:e9:d3:1d:da:79:d9:bf:
                    da:3b:39:69:68:03:16:94:0a:94:77:22:5e:51:a0:
                    e5:fb:64:7b:a6:aa:ac:2c:53:bb:87:d8:2c:bd:e5:
                    ce:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DE:F4:CB:79:F3:AD:5F:3A:03:9C:7A:4C:AE:DB:32:EF:02:C5:AD
            X509v3 Authority Key Identifier:
                keyid:82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:fb:ff:e9:49:c9:80:ac:84:b8:ad:2d:b5:ea:2c:38:cf:77:
         a5:c0:f6:c1:fc:c7:34:e2:05:ef:ea:75:94:ee:aa:a1:81:a4:
         1c:1c:c1:cb:2c:d3:f2:b1:82:3f:7a:99:e2:a3:bf:c9:c9:72:
         82:0e:30:9a:e9:04:b3:2f:4a:c9:fe:a7:b7:55:27:e9:af:b2:
         18:8e:d8:1c:a3:bc:1e:fe:28:ab:9a:e7:51:30:2f:43:75:48:
         22:c1:f5:d7:95:3e:5e:4b:f5:dd:5f:7b:05:e6:2c:21:33:fe:
         01:e9:cb:ad:07:00:d9:cc:6c:b7:51:59:ff:71:5c:38:5c:15:
         23:20:d3:6b:94:f7:2b:f6:a6:a0:92:f8:ed:e9:3b:27:d5:f7:
         8b:38:42:55:54:ca:82:06:90:10:7e:65:55:da:6b:f3:db:0b:
         ab:5f:ca:a8:7d:d0:23:a7:02:f4:2a:e3:3d:62:9a:a8:dc:12:
         d4:15:c1:cc:6e:4e:a9:11:cd:11:42:86:35:12:5e:a0:53:e8:
         85:13:cd:0e:cc:23:00:47:7d:b2:d3:ab:f5:00:30:a4:4a:4b:
         b8:98:00:7f:76:ed:19:92:93:73:5e:ac:d9:9f:25:80:58:59:
         b2:54:7e:02:09:d0:0b:db:76:e8:3f:a3:34:d3:f4:97:af:8e:
         63:cb:47:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:21:59 2026 by rpki-client