Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
File:                     GLIwW_twBOUp1iOkd3G45uzQUdY.mft (raw, json)
Hash identifier:          Vq3LCBazqXZLwR4PQB24KF1Qbxhqm4iw9+Tn/sG9dRw=
Subject key identifier:   61:D0:F2:68:B7:6D:E7:11:BD:48:C1:B0:15:9B:90:09:B5:92:10:3B
Authority key identifier: 18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6
Certificate issuer:       /CN=18b2305bfb7004e529d623a47771b8e6ecd051d6
Certificate serial:       01A1A970EA296641F141E484C94A472CEBC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
Manifest number:          04A9
Signing time:             Thu 05 Nov 2026 02:01:51 +0000
Manifest this update:     Thu 05 Nov 2026 02:01:51 +0000
Manifest next update:     Fri 06 Nov 2026 02:01:51 +0000
Files and hashes:         1: BsB1weTRtbb_w5a2aWqr7c8Cgpg.asa (hash: HwOzHFJxF3HhEQ9N7dXbh3+iApRhiXxh7m6fcvockMY=)
                          2: GLIwW_twBOUp1iOkd3G45uzQUdY.crl (hash: 8Uct+/1ZCb1isS6LH452d338d0vmeu9EVvjLARfEqxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 02:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a9:70:ea:29:66:41:f1:41:e4:84:c9:4a:47:2c:eb:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18b2305bfb7004e529d623a47771b8e6ecd051d6
        Validity
            Not Before: Nov  5 02:01:51 2026 GMT
            Not After : Nov  6 02:01:51 2026 GMT
        Subject: CN=61d0f268b76de711bd48c1b0159b9009b592103b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b4:69:6c:47:47:5c:92:3d:61:06:82:b4:8a:
                    de:31:67:fe:5d:1a:ac:b6:1c:21:47:fe:f2:8b:8b:
                    b6:b5:e9:42:3e:0a:7a:c3:04:4f:13:64:84:75:fb:
                    f2:cd:65:9b:8a:58:d7:a9:f7:5f:96:88:31:ef:49:
                    48:7c:fb:0c:71:e8:0d:6d:06:4d:a3:7b:43:e2:b7:
                    23:58:a3:bd:e6:5a:d2:f4:51:1a:78:a1:9e:b4:29:
                    4f:c0:b2:46:50:d5:a7:17:e8:aa:db:86:3d:69:cc:
                    7d:ad:f7:41:56:44:f1:70:fd:ad:a5:77:7c:ff:de:
                    14:55:b7:9a:71:1a:f9:67:a6:23:74:d9:68:62:c7:
                    e3:a1:14:1e:7a:39:ea:cd:86:ce:98:24:a0:e7:65:
                    1d:85:55:d7:11:42:4d:b7:30:b1:4a:0c:cd:ef:0c:
                    06:f3:0c:dd:f2:0d:70:28:f9:5f:6b:ac:a4:da:a4:
                    51:b8:ca:9e:c4:5a:a8:07:36:f0:e2:41:f0:38:cb:
                    14:7b:4a:1c:e6:7d:13:de:9a:c0:d6:d0:bb:6e:7b:
                    11:e5:08:3f:61:86:43:1e:a1:21:8b:50:1c:99:0f:
                    c2:16:91:f0:b0:45:6b:1e:d9:e8:e8:05:f8:f1:74:
                    fa:a0:e7:14:6d:fe:2f:6f:71:99:21:5b:db:1e:7f:
                    1c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D0:F2:68:B7:6D:E7:11:BD:48:C1:B0:15:9B:90:09:B5:92:10:3B
            X509v3 Authority Key Identifier:
                keyid:18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:45:6c:b8:0e:cb:48:41:1e:ca:6d:b0:c2:0f:97:1c:68:0e:
         75:72:1a:71:97:2d:95:b4:ea:f1:0d:ea:1b:86:c8:5b:2b:2b:
         4b:9d:d2:89:6c:4e:24:a6:36:0d:e5:c7:17:14:b7:e8:ed:50:
         00:ae:37:87:e8:93:a6:a8:25:24:68:2b:fd:5b:23:7a:89:63:
         01:d2:07:3b:48:b6:da:d6:54:32:5b:b9:34:a3:8f:b7:6d:38:
         cf:fa:ff:6f:3d:9d:86:40:f5:a3:bf:e1:95:f0:c1:52:7e:7a:
         29:21:5f:43:17:25:05:0f:e7:d9:f9:4a:35:75:9f:19:1a:07:
         27:13:6e:0e:a3:a6:76:ab:39:a5:4c:d8:37:dc:98:2e:1f:c2:
         7c:8a:f0:a2:91:a3:b8:71:cb:94:1b:0b:73:b9:54:b1:6e:48:
         5f:81:18:86:7f:d5:05:f9:5b:81:1a:01:6b:a1:78:dd:4e:62:
         b8:57:6e:f3:4b:f5:54:6d:36:51:16:dd:f3:35:8a:44:7a:00:
         f6:f9:f7:0d:90:67:8d:c8:14:b6:91:a9:2f:7d:35:d6:fb:e6:
         94:cb:8e:0c:25:00:43:aa:51:46:be:17:00:8c:d0:c6:e8:bd:
         40:e6:ad:02:ce:ba:d2:50:e3:fb:a6:dd:af:4d:bf:41:77:2e:
         9d:93:58:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGpcOopZkHxQeSEyUpHLOvCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YjIzMDViZmI3MDA0ZTUyOWQ2MjNhNDc3NzFiOGU2ZWNk
MDUxZDYwHhcNMjYxMTA1MDIwMTUxWhcNMjYxMTA2MDIwMTUxWjAzMTEwLwYDVQQD
Eyg2MWQwZjI2OGI3NmRlNzExYmQ0OGMxYjAxNTliOTAwOWI1OTIxMDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrRpbEdHXJI9YQaCtIreMWf+XRqs
thwhR/7yi4u2telCPgp6wwRPE2SEdfvyzWWbiljXqfdflogx70lIfPsMcegNbQZN
o3tD4rcjWKO95lrS9FEaeKGetClPwLJGUNWnF+iq24Y9acx9rfdBVkTxcP2tpXd8
/94UVbeacRr5Z6YjdNloYsfjoRQeejnqzYbOmCSg52UdhVXXEUJNtzCxSgzN7wwG
8wzd8g1wKPlfa6yk2qRRuMqexFqoBzbw4kHwOMsUe0oc5n0T3prA1tC7bnsR5Qg/
YYZDHqEhi1AcmQ/CFpHwsEVrHtno6AX48XT6oOcUbf4vb3GZIVvbHn8cUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHQ8mi3becRvUjBsBWbkAm1khA7MB8GA1UdIwQY
MBaAFBiyMFv7cATlKdYjpHdxuObs0FHWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0xJd1dfdHdCT1VwMWlPa2QzRzQ1dXpRVWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kM2I5YTEtZWQ5ZC00MmM1LTg2ZTkt
NjhiODZlZWMyZmZjLzEvR0xJd1dfdHdCT1VwMWlPa2QzRzQ1dXpRVWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9kM2I5YTEtZWQ5ZC00MmM1LTg2ZTktNjhiODZlZWMyZmZj
LzEvR0xJd1dfdHdCT1VwMWlPa2QzRzQ1dXpRVWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkVsuA7L
SEEeym2wwg+XHGgOdXIacZctlbTq8Q3qG4bIWysrS53SiWxOJKY2DeXHFxS36O1Q
AK43h+iTpqglJGgr/VsjeoljAdIHO0i22tZUMlu5NKOPt204z/r/bz2dhkD1o7/h
lfDBUn56KSFfQxclBQ/n2flKNXWfGRoHJxNuDqOmdqs5pUzYN9yYLh/CfIrwopGj
uHHLlBsLc7lUsW5IX4EYhn/VBflbgRoBa6F43U5iuFdu80v1VG02URbd8zWKRHoA
9vn3DZBnjcgUtpGpL3011vvmlMuODCUAQ6pRRr4XAIzQxui9QOatAs660lDj+6bd
r02/QXcunZNYCA==
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:01:28 2026 by rpki-client