Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft
File:                     GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft (raw, json)
Hash identifier:          Q9RGcTvrKUBPPpzslcS7cc0G6no+FrFm3166PK4P6rI=
Subject key identifier:   B3:32:2A:54:EF:D5:15:66:71:B9:F0:40:A4:86:F5:98:24:D5:C8:C8
Authority key identifier: 1A:5B:E1:55:03:7E:B7:E6:5C:12:AC:9A:A2:A2:C3:25:03:8C:3A:9B
Certificate issuer:       /CN=1a5be155037eb7e65c12ac9aa2a2c325038c3a9b
Certificate serial:       019D28F31AF1C9BC3D4B28142D0FB6CA6708
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GlvhVQN-t-ZcEqyaoqLDJQOMOps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft
Manifest number:          0C5E
Signing time:             Thu 26 Mar 2026 07:01:53 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:53 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:53 +0000
Files and hashes:         1: 2m0EGmPYAk8UEyoPFCdGZfUXZ58.roa (hash: xM4PqrOFPyrlAEK5Rat9kM0I00fA9ams94dU6W0ME2Q=)
                          2: GlvhVQN-t-ZcEqyaoqLDJQOMOps.crl (hash: SAZtwATJ4Ht5FxnPHiwmvBVjiQeHX2llN91XqBaZx8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GlvhVQN-t-ZcEqyaoqLDJQOMOps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f3:1a:f1:c9:bc:3d:4b:28:14:2d:0f:b6:ca:67:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5be155037eb7e65c12ac9aa2a2c325038c3a9b
        Validity
            Not Before: Mar 26 07:01:53 2026 GMT
            Not After : Mar 27 07:01:53 2026 GMT
        Subject: CN=b3322a54efd5156671b9f040a486f59824d5c8c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:16:e2:64:61:14:b0:61:69:22:21:22:ed:e7:
                    ed:54:96:c5:39:03:dd:f3:52:d4:f8:03:6e:cd:6a:
                    ac:0b:c7:60:09:55:8d:7a:64:e8:18:c5:89:9d:e4:
                    82:06:2d:d9:75:08:a3:cd:51:28:20:63:f7:19:fa:
                    46:97:76:43:4f:97:80:32:67:f1:6e:0f:e7:12:e5:
                    52:07:5c:a4:d8:02:90:ef:eb:8e:18:b1:e7:97:82:
                    93:94:38:81:05:1b:5d:e1:e9:f9:70:43:b4:14:bf:
                    66:85:7c:da:9c:4a:35:18:60:02:df:9f:00:46:2c:
                    62:9d:51:3b:7f:c9:a3:5a:03:51:fc:10:f3:c0:6f:
                    5f:a6:05:27:5b:2d:35:18:57:8e:f6:2f:f3:e2:f2:
                    75:b0:54:3d:d4:df:72:41:0e:25:1a:5f:41:28:ab:
                    78:76:9c:f7:20:7d:5d:78:a9:77:fe:1c:67:b9:98:
                    08:ff:5a:52:81:a4:d7:50:0c:77:b7:4b:86:0e:78:
                    b9:c8:11:8e:37:c3:ee:5f:f0:d8:7b:d5:2e:51:89:
                    f2:ca:e1:c7:45:76:49:69:11:8e:84:f6:fc:de:25:
                    73:41:db:57:0b:01:ee:c1:55:bf:14:29:f5:d7:7f:
                    8a:91:0f:e2:8d:ad:e9:6a:29:ae:3a:71:04:67:cc:
                    07:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:32:2A:54:EF:D5:15:66:71:B9:F0:40:A4:86:F5:98:24:D5:C8:C8
            X509v3 Authority Key Identifier:
                keyid:1A:5B:E1:55:03:7E:B7:E6:5C:12:AC:9A:A2:A2:C3:25:03:8C:3A:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlvhVQN-t-ZcEqyaoqLDJQOMOps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d0:65:ad:9b:04:97:21:00:c5:59:ab:a8:9e:97:6d:c4:0a:
         32:c7:74:9c:35:c3:5e:26:58:3f:30:97:ff:8f:e0:be:42:dc:
         94:38:fd:4b:3e:b7:77:3f:71:ed:2c:11:eb:ab:a6:5a:f7:ec:
         51:79:3c:fb:5a:9a:81:f9:c8:c3:06:23:c1:16:fb:71:2a:a2:
         9a:8a:8e:26:cd:e2:b2:29:96:bc:a9:f9:22:a1:48:0e:37:f1:
         d8:ee:b6:5a:c6:e5:e4:37:9c:3d:20:90:aa:4a:ae:48:dd:e9:
         8a:05:a4:23:63:0f:00:44:97:c4:cc:40:78:c1:32:f3:0c:47:
         86:89:c3:ce:bb:b7:e5:de:de:69:01:11:a2:42:22:21:78:66:
         20:cd:16:54:0b:15:a0:26:d7:ae:f5:63:ec:ae:5f:96:59:a2:
         ae:d0:77:7d:e0:1e:e8:ba:b9:02:4f:7a:10:9b:fb:3a:05:52:
         68:6e:0c:80:a3:2b:1c:a6:1b:fc:56:24:f4:e5:ab:85:a3:d0:
         32:1c:35:de:32:6e:b5:54:9d:a2:9c:9a:7b:fc:fc:f9:ab:b0:
         4c:39:c2:69:45:97:87:0e:e4:a2:6f:0d:51:0d:ae:7b:e1:70:
         a0:6e:37:6c:39:f0:d8:03:8c:8d:18:69:cc:30:33:5d:10:34:
         4a:5d:66:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:08:39 2026 by rpki-client