Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
File:                     GbLh_EALv53LIGat49v-XJ6rLn0.mft (raw, json)
Hash identifier:          aV0sX2WfQy3skygAtK544zbV69OdmQw3PYP2ydJdKfo=
Subject key identifier:   70:66:C1:36:2E:24:86:71:0B:1C:E1:B1:D9:78:01:FE:38:6D:59:63
Authority key identifier: 19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
Certificate issuer:       /CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Certificate serial:       019EBF23711BA94AFCFA6181B7A283655F75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
Manifest number:          1231
Signing time:             Sat 13 Jun 2026 04:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:31 +0000
Files and hashes:         1: GbLh_EALv53LIGat49v-XJ6rLn0.crl (hash: b0llNfcX9OXpK6bt52xZMrSNaF4rN0L1pfQKnz7EIHg=)
                          2: ePI6xD2cfu7fzAdug0Km--LXZXw.roa (hash: A5otAx8dQYDetFTAWi3ze+gQMQ2WC4fRm0x+IwV20E0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:71:1b:a9:4a:fc:fa:61:81:b7:a2:83:65:5f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
        Validity
            Not Before: Jun 13 04:00:31 2026 GMT
            Not After : Jun 14 04:00:31 2026 GMT
        Subject: CN=7066c1362e2486710b1ce1b1d97801fe386d5963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cd:0d:03:63:79:1b:8e:4c:17:9c:a6:13:b6:
                    2b:2a:40:91:9c:57:87:46:a9:64:20:2f:92:3e:b1:
                    e2:95:f4:0b:aa:05:7b:88:56:31:49:36:92:8c:24:
                    b3:e0:53:6e:63:e4:d8:1b:b2:13:90:b9:71:e1:54:
                    53:43:a7:87:b8:41:c9:15:00:22:5c:35:2f:3d:39:
                    e5:dc:48:3b:3b:9c:b8:9e:b7:2b:a4:64:76:05:5b:
                    62:51:44:7d:82:e4:1c:c2:59:f4:67:ea:bc:41:1f:
                    0a:03:ad:59:78:d5:ca:96:3b:fc:8f:62:d8:c0:d8:
                    65:b9:38:1c:73:d2:3a:43:9a:57:3e:05:73:fc:f5:
                    f0:a9:b5:ad:ce:a2:be:cf:da:ee:c0:4f:da:b6:7e:
                    f4:26:66:75:5e:30:9d:85:ee:02:9c:5e:ff:2b:44:
                    2e:03:a5:c6:b2:5e:55:31:51:f8:d2:2a:99:47:d7:
                    03:fc:fd:7a:d8:3f:c2:02:77:f7:e0:f6:cb:2b:da:
                    1a:88:b8:4f:1a:e6:48:25:56:b9:fe:11:6e:e4:14:
                    e9:d3:65:72:c2:f5:b5:3c:37:bc:7a:76:3e:14:55:
                    e7:6c:1e:45:89:09:5a:bb:ee:bb:78:d6:7b:2d:ce:
                    48:39:35:21:12:31:c1:f6:b3:2c:0e:45:b8:d7:f9:
                    be:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:66:C1:36:2E:24:86:71:0B:1C:E1:B1:D9:78:01:FE:38:6D:59:63
            X509v3 Authority Key Identifier:
                keyid:19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:73:15:5e:c0:f2:9c:93:b1:02:7c:50:38:83:08:4e:86:0a:
         49:dc:91:2d:3e:79:94:0f:a3:cf:8a:54:a8:41:41:1e:9e:96:
         11:6a:29:44:dc:3e:a3:d6:fa:bd:7e:5d:38:1a:38:80:01:c8:
         aa:c4:da:29:9a:8d:16:23:72:b4:56:1c:f3:fe:e7:89:df:24:
         63:7b:7b:af:cf:0a:f5:e8:0e:ba:ea:71:ad:56:40:d0:8e:85:
         d5:3a:07:84:d3:e8:c3:a7:aa:90:1b:2a:db:c1:67:91:bb:50:
         bc:8c:f2:f5:a5:b1:c0:f1:2d:85:e6:c2:a0:d8:9d:db:a9:49:
         cc:61:97:8a:5d:b3:21:a1:1a:a8:03:61:86:91:6e:63:3f:9e:
         c2:b7:8a:cf:89:34:82:54:9c:29:3d:71:76:c9:4d:5a:2a:79:
         d2:22:29:92:03:02:ad:5b:a4:85:59:02:7f:ba:58:06:7b:8e:
         e5:7a:81:c6:bf:fc:5f:1c:15:b0:f5:8a:ef:7d:1e:ef:c3:c4:
         af:5d:3a:f5:f1:8e:fb:5e:9a:1d:95:c2:32:b7:d9:5f:36:6e:
         7e:e5:a5:a9:a7:b1:42:3b:a0:87:15:af:7e:d4:19:c3:67:ed:
         30:35:a9:de:80:31:cb:fe:d8:1f:c7:82:76:f0:ef:21:c8:a8:
         d8:af:cf:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:56:18 2026 by rpki-client