Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft
File:                     GL7k74fvph6QWaCm44LeNxsnqkw.mft (raw, json)
Hash identifier:          JbVJCZQHMbodgLO1WjLel2kaMsYgE5PHr20EH+Czuhc=
Subject key identifier:   7E:18:2D:73:1A:FB:16:2D:BB:57:F2:8F:A6:3F:C0:90:8F:EF:51:6C
Authority key identifier: 18:BE:E4:EF:87:EF:A6:1E:90:59:A0:A6:E3:82:DE:37:1B:27:AA:4C
Certificate issuer:       /CN=18bee4ef87efa61e9059a0a6e382de371b27aa4c
Certificate serial:       019D9C2C74A600F85E2F124EA893E89898B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft
Manifest number:          0180
Signing time:             Fri 17 Apr 2026 16:00:52 +0000
Manifest this update:     Fri 17 Apr 2026 16:00:52 +0000
Manifest next update:     Sat 18 Apr 2026 16:00:52 +0000
Files and hashes:         1: Fw6TrrKprUhHQ7LmRg72gkKzYfo.roa (hash: wOkfUq9QEg8uZcY5m7qfEesrjfuWcfYpWI1YJK2QRhs=)
                          2: GL7k74fvph6QWaCm44LeNxsnqkw.crl (hash: ZKqrsdYS7OWPtCpANLClRuJsQtJ9xNTkU/nM6N1DGC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2c:74:a6:00:f8:5e:2f:12:4e:a8:93:e8:98:98:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18bee4ef87efa61e9059a0a6e382de371b27aa4c
        Validity
            Not Before: Apr 17 16:00:52 2026 GMT
            Not After : Apr 18 16:00:52 2026 GMT
        Subject: CN=7e182d731afb162dbb57f28fa63fc0908fef516c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:69:d3:ed:26:3e:04:1b:43:63:41:38:fa:3b:
                    4f:17:d0:8e:5c:da:d7:d3:9f:a6:35:b2:4a:28:fb:
                    f3:1f:84:c2:af:b6:06:28:b7:03:aa:af:25:f0:bd:
                    8a:a3:d1:74:ed:f8:4c:2f:9c:ef:66:7e:68:8e:78:
                    ac:a5:c5:72:f9:e8:56:72:44:1c:86:70:f4:20:9c:
                    e8:14:82:5f:2b:24:19:9e:c2:6d:29:81:5c:7c:ee:
                    cc:d3:e0:61:98:84:0a:f5:b2:60:6e:3a:f4:52:e2:
                    39:aa:99:61:31:6e:13:0f:69:f4:3a:e8:e0:72:34:
                    21:bc:c5:ce:61:c2:d0:fc:4e:92:9d:7e:7a:d2:a2:
                    b6:fb:28:b4:f2:bf:11:fa:58:e7:d5:62:46:1a:8b:
                    5d:c6:a9:2f:60:c2:2e:11:a1:9a:70:77:b7:a7:52:
                    28:88:ac:5c:70:75:77:3d:d3:9f:bf:ef:50:54:39:
                    f2:fd:6b:3d:5a:e5:49:1a:2d:f4:e5:26:42:43:0d:
                    3a:c0:54:30:be:33:ed:5b:7a:89:05:c1:ad:1c:57:
                    71:dc:3d:62:18:50:e1:b7:6f:5c:27:d9:b6:d9:80:
                    ab:e0:11:a4:5e:70:d7:10:79:ee:63:4c:95:90:93:
                    4b:a3:1c:db:99:0c:73:3f:f4:f5:31:b7:d1:fd:a3:
                    58:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:18:2D:73:1A:FB:16:2D:BB:57:F2:8F:A6:3F:C0:90:8F:EF:51:6C
            X509v3 Authority Key Identifier:
                keyid:18:BE:E4:EF:87:EF:A6:1E:90:59:A0:A6:E3:82:DE:37:1B:27:AA:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f0:5a:4b:1c:9a:62:f6:d1:07:8a:5d:a8:66:42:df:49:fe:
         b1:22:cf:56:50:7d:70:e6:5d:b3:a2:a1:f2:0b:06:48:3a:89:
         3e:2a:f3:f9:eb:7b:9e:e3:43:69:5d:fe:75:28:4d:5d:c5:15:
         c8:bd:dc:65:0f:32:ec:eb:4a:0d:77:e9:e4:ff:c8:4a:71:cf:
         a5:55:94:20:54:97:27:f0:a8:f6:37:e8:18:a4:d1:18:6a:fb:
         60:71:1b:76:75:73:70:4b:78:35:dd:a0:01:21:7e:95:28:98:
         35:67:5b:7e:a1:b4:5f:8f:37:b8:df:32:6a:1c:90:4b:35:d4:
         19:eb:1a:79:22:3d:e6:77:ea:94:44:9b:6c:26:8e:6d:5f:31:
         50:68:6e:6b:cc:c2:4c:52:d9:67:24:a8:3a:5e:26:45:71:07:
         5c:fd:1a:e2:63:e8:f7:3c:55:16:36:49:77:0c:a6:4d:ab:f3:
         f2:ba:55:68:7f:0e:18:46:86:c4:29:0f:58:a9:ca:d1:b8:83:
         2d:a8:06:42:67:08:b2:23:c7:ec:da:57:6c:11:90:70:ba:75:
         ec:49:c6:c5:c7:2d:9e:3c:5d:cc:86:94:8d:db:84:2a:c9:57:
         f4:db:37:00:02:c8:fb:66:07:7c:79:59:99:81:55:9f:e5:ca:
         c0:32:70:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:40:44 2026 by rpki-client