Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
File:                     GLIwW_twBOUp1iOkd3G45uzQUdY.mft (raw, json)
Hash identifier:          kQMc81wt+k0mqaXirRq2uJS4fhCami5FFFc20qcNOLw=
Subject key identifier:   46:55:1D:E2:E4:13:71:CF:B8:33:9D:21:2D:2C:EE:67:DF:5F:8C:99
Authority key identifier: 18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6
Certificate issuer:       /CN=18b2305bfb7004e529d623a47771b8e6ecd051d6
Certificate serial:       019D9C9A23FF0E1C3E29B4D50C22693E746A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
Manifest number:          0290
Signing time:             Fri 17 Apr 2026 18:00:40 +0000
Manifest this update:     Fri 17 Apr 2026 18:00:40 +0000
Manifest next update:     Sat 18 Apr 2026 18:00:40 +0000
Files and hashes:         1: BsB1weTRtbb_w5a2aWqr7c8Cgpg.asa (hash: HwOzHFJxF3HhEQ9N7dXbh3+iApRhiXxh7m6fcvockMY=)
                          2: GLIwW_twBOUp1iOkd3G45uzQUdY.crl (hash: MHvQozkGfbZr9nEi7TU5TSwM1vnqcNV3IpIiJBlAGUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:9a:23:ff:0e:1c:3e:29:b4:d5:0c:22:69:3e:74:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18b2305bfb7004e529d623a47771b8e6ecd051d6
        Validity
            Not Before: Apr 17 18:00:40 2026 GMT
            Not After : Apr 18 18:00:40 2026 GMT
        Subject: CN=46551de2e41371cfb8339d212d2cee67df5f8c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ba:d9:c4:f8:87:c8:c9:fc:42:dc:1e:f6:81:
                    67:76:22:38:e4:b2:5f:b6:9c:c1:e4:3d:4f:db:fc:
                    17:bb:c6:dc:ca:98:55:c4:64:1f:33:fa:b1:cc:f1:
                    42:a5:82:b0:8f:53:6c:a8:1f:11:d0:e5:6b:68:72:
                    51:54:7f:b1:13:fe:ce:31:b1:25:11:bb:ce:62:d1:
                    1f:6f:31:c1:0f:51:ff:b7:27:86:2d:50:5a:f7:fc:
                    8d:bb:97:e2:ba:9a:fb:b7:c0:88:66:ec:fe:c4:73:
                    4f:be:0a:f5:07:51:6e:6c:22:5a:bc:d6:25:b0:bf:
                    48:68:a4:71:4b:b5:14:51:7e:9a:bc:70:e7:97:27:
                    5b:ad:61:90:ff:b7:6b:a8:e8:11:eb:ea:8c:f8:eb:
                    8d:9e:04:a4:df:69:24:0e:1c:58:90:16:72:25:9d:
                    03:51:e3:c8:48:7f:b9:9b:cd:77:8f:dc:a8:ac:6f:
                    21:75:58:4c:d4:a5:9d:61:66:c3:b4:5b:df:42:56:
                    91:ea:bf:b0:32:4c:f8:14:6b:54:72:03:e8:40:29:
                    a0:b5:a3:92:f9:94:5c:d6:31:31:ab:d1:4e:df:cd:
                    d0:7e:de:c3:a0:46:26:57:28:94:99:e4:85:95:12:
                    2d:e6:cc:70:5b:1a:42:1c:de:3c:95:2e:19:79:81:
                    e6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:55:1D:E2:E4:13:71:CF:B8:33:9D:21:2D:2C:EE:67:DF:5F:8C:99
            X509v3 Authority Key Identifier:
                keyid:18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:bb:ab:30:48:ef:09:6a:a8:8d:3f:cb:b8:2b:08:d6:77:79:
         59:e0:59:49:af:e4:f6:5a:6f:9b:eb:ce:4d:03:03:bf:37:68:
         9f:0e:dd:40:21:fd:0b:15:c3:ac:a7:82:54:d9:da:a2:61:ff:
         66:67:68:04:46:6c:15:ab:d1:a9:51:2f:7c:0b:40:f4:a5:d3:
         51:5f:a1:88:47:bb:02:df:25:cd:84:67:aa:cb:01:0b:87:5b:
         7a:34:92:54:46:49:0e:07:b3:5a:5d:03:bf:9c:bc:61:26:6e:
         f7:a0:81:65:77:80:1d:de:08:82:c9:47:94:e3:d9:fd:02:8e:
         d7:6d:8b:75:9e:48:a7:d3:8a:a0:6d:df:f6:c6:42:cc:91:fc:
         50:53:c9:5c:a4:a8:9a:66:66:d6:2c:57:c8:82:71:ad:dd:64:
         84:4d:72:38:5c:2e:ef:10:59:75:ec:62:81:c6:4b:a6:0d:da:
         c8:a1:22:3e:7a:88:c6:60:39:51:b3:a2:c2:3c:92:88:d2:64:
         ad:54:d3:ec:0a:a7:46:74:53:38:cc:b7:c4:ff:65:d7:ae:de:
         e1:79:6d:03:8a:b8:34:f6:a5:83:fb:a7:e1:c5:d8:74:ae:8f:
         7b:50:73:af:65:ec:a3:98:ee:da:d6:76:b6:e8:83:c5:46:5c:
         31:4e:e3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:59:31 2026 by rpki-client