Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
File:                     glLEw3Iyf9wsF7SVuFiRp23kJRA.mft (raw, json)
Hash identifier:          H6yDZQRO+z+J1wsdM4wPJqOyofpO66FxrZM8snsTwII=
Subject key identifier:   30:CE:B8:E3:30:A9:F4:97:94:66:E7:EB:D3:27:E5:66:73:A8:F0:71
Authority key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
Certificate issuer:       /CN=8252c4c372327fdc2c17b495b85891a76de42510
Certificate serial:       019EC1B6C8E017D14FCD72C15F6A1043221D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
Manifest number:          0821
Signing time:             Sat 13 Jun 2026 16:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:42 +0000
Files and hashes:         1: glLEw3Iyf9wsF7SVuFiRp23kJRA.crl (hash: uj/nih+Du5EKwMh3bRSQSaWvWGm7HcT9G/5xEmeOBFU=)
                          2: z8hJl8rGyd_56TuV5GLYx9xFhho.roa (hash: XAMtoMHmL3C5zB92ZcL52Exd5SlTcXF5KJm8ioosamE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:c8:e0:17:d1:4f:cd:72:c1:5f:6a:10:43:22:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8252c4c372327fdc2c17b495b85891a76de42510
        Validity
            Not Before: Jun 13 16:00:42 2026 GMT
            Not After : Jun 14 16:00:42 2026 GMT
        Subject: CN=30ceb8e330a9f4979466e7ebd327e56673a8f071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:61:af:42:e0:5a:44:30:26:d4:fc:73:3e:71:
                    55:19:4f:e0:63:56:25:cb:22:ed:25:66:9d:09:95:
                    77:9e:d1:65:73:8d:e4:f5:e3:04:c5:d3:a8:93:02:
                    55:e2:c3:81:6a:d3:38:8f:b9:05:c8:95:51:05:d0:
                    28:0e:af:a5:f0:86:ad:da:c4:a4:09:79:14:f9:81:
                    04:2f:23:42:53:be:0e:f4:54:04:f4:8c:23:3c:a7:
                    1f:e6:90:11:00:d8:5a:37:be:9a:ba:ab:70:bd:cd:
                    01:a8:17:cb:40:cc:41:60:35:86:9a:da:11:eb:48:
                    e7:c2:91:6f:c3:bf:2a:28:71:ec:ab:cf:4b:af:c3:
                    7f:93:f1:f0:f8:80:c0:e5:09:e4:40:8b:fc:cc:f4:
                    6c:94:75:3b:74:67:c0:cd:86:23:c3:81:53:27:0c:
                    72:5d:1c:60:46:bb:10:94:59:e0:0d:b3:05:50:e7:
                    3b:c3:74:8b:77:df:a1:e4:e1:04:1f:d1:29:9e:6f:
                    b3:86:b6:01:63:97:5d:43:f0:2e:24:f3:4d:27:22:
                    c9:37:76:7e:3d:2d:2e:51:d0:12:ba:17:d5:87:7c:
                    51:aa:12:c5:0b:73:de:82:e1:77:10:d9:e6:52:57:
                    a5:29:6f:52:17:89:00:bc:69:fc:2f:e2:4b:f9:5f:
                    4f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CE:B8:E3:30:A9:F4:97:94:66:E7:EB:D3:27:E5:66:73:A8:F0:71
            X509v3 Authority Key Identifier:
                keyid:82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a4:09:d5:d7:f5:ba:72:98:72:46:4a:51:5b:52:93:27:8e:
         c6:d4:56:44:b2:58:a5:fe:ba:33:05:80:be:e7:6c:a0:53:98:
         0f:8e:b3:b7:34:95:f4:7d:1e:c6:1a:10:1f:d9:52:17:8a:c6:
         76:a8:f3:a6:c9:8e:31:25:2e:46:0f:b5:bd:d9:75:7d:d7:2c:
         c6:e2:ae:c7:50:11:ac:1c:39:a7:b4:ee:2f:04:d9:6e:f9:8e:
         f8:13:32:44:d1:23:c2:cc:3f:cd:77:61:ec:2f:67:af:84:64:
         46:c6:ac:ae:1b:d7:13:2e:6a:92:38:9f:81:ed:b1:4b:b2:6d:
         2e:a3:99:45:75:60:a6:8d:7c:3e:17:1a:58:f3:7c:de:81:d2:
         b2:e4:27:35:0f:60:d8:83:8c:6e:c0:2a:ac:71:78:57:66:cc:
         0c:be:d6:05:6e:11:2f:58:d2:91:76:b9:3a:9b:db:5b:b8:9d:
         29:93:59:3e:09:97:fd:79:5d:8c:2b:56:78:41:aa:b1:60:4c:
         06:e0:4d:be:19:42:27:28:0a:45:a8:fd:fb:29:5a:76:cd:5f:
         e5:ce:eb:94:82:0a:8b:94:44:11:f4:cf:63:f0:3a:a2:f9:b2:
         68:38:79:ec:f8:a0:ac:12:b6:44:90:32:45:bf:28:75:4e:9c:
         1c:7c:ed:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:45:11 2026 by rpki-client