Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
File:                     glHn-2uWDUBrIjbSXk4g4kU1nbI.mft (raw, json)
Hash identifier:          q15VkosPbH9fYhFdizTLd4/CsthY/dWe19Ori70yHQM=
Subject key identifier:   56:7C:08:C3:A4:54:D3:0C:27:0E:AB:0F:32:E2:9A:89:1A:C5:EB:5C
Authority key identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
Certificate issuer:       /CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Certificate serial:       019A4DE164B3904B29BF7A70783E465A5D58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
Manifest number:          170E
Signing time:             Tue 04 Nov 2025 08:00:08 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:08 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:08 +0000
Files and hashes:         1: BiweuLnHoWiHw0dJtOKVLYe5VXw.roa (hash: v5I7lbo3yrRW4OdIb5Z9T1Oajdn5oMeqluzGbBuYfMA=)
                          2: KyxetZabMrCwSGQGlQiCSSpLezw.roa (hash: lB6fVKgf9Cm2eRE3kdPJEkhSEzxtd0NAC6g5PlzMoxw=)
                          3: SkHxUs-FrIQyM07xjoxzMJo0A-0.roa (hash: pe66sdl4nqsnLQs5V6pFP+Jxy3p0QpIUCzbid73OCcA=)
                          4: _muTs8Yrozyvhukvws4l05B7mTo.roa (hash: LD706s8S0q0ox0+6TKcyKrOGDjOk87XG1dzJqAoo9NE=)
                          5: dvbWlIR_nyOoTtNcYB_wCKbM8x8.roa (hash: vqMhD9X26YxNwUr/WhYc7U9uIGwJ0S9qj2YKPJvFuT0=)
                          6: glHn-2uWDUBrIjbSXk4g4kU1nbI.crl (hash: djNWsxCJRJAstsroO5gvKCqKpDL7+sba85r3laafleo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e1:64:b3:90:4b:29:bf:7a:70:78:3e:46:5a:5d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8251e7fb6b960d406b2236d25e4e20e245359db2
        Validity
            Not Before: Nov  4 08:00:08 2025 GMT
            Not After : Nov  5 08:00:08 2025 GMT
        Subject: CN=567c08c3a454d30c270eab0f32e29a891ac5eb5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:62:76:6e:ec:22:7a:a9:24:a4:5f:50:c4:5f:
                    a1:cd:5e:d1:fa:d9:f0:5a:a8:ee:e9:c6:2a:a0:78:
                    ca:71:a3:88:75:59:74:11:a0:b4:e1:54:0a:ca:2a:
                    2b:c2:82:3e:8f:7d:d1:7b:c6:ba:ce:e0:fe:c8:e0:
                    40:49:0b:6c:3d:e8:a5:30:c7:2e:3c:c2:a7:d8:64:
                    26:6b:ce:ba:2c:49:ed:a5:db:2a:ad:a5:50:e2:b7:
                    c8:cc:41:31:8a:4d:f4:9a:cb:85:77:6d:56:73:97:
                    92:fb:e5:f4:2f:49:3d:13:6b:69:c9:9d:96:0c:ec:
                    65:d2:0a:59:c8:b6:81:a3:81:b6:66:3a:1a:22:4b:
                    4d:f8:a6:27:05:93:3b:04:51:0f:14:d1:10:65:e0:
                    ae:b0:f0:94:68:8a:f2:e5:bd:b4:e3:bc:e8:a0:74:
                    40:57:86:ad:81:51:4e:e8:f1:5d:12:7d:fa:95:42:
                    bb:dd:df:95:d4:f9:5a:c7:9f:e4:95:d6:44:36:00:
                    5e:08:0c:54:92:fd:39:cf:b4:67:0a:97:6f:ec:bc:
                    1c:90:75:78:0e:04:d0:df:93:9f:64:a4:d0:ef:8e:
                    e3:c1:f3:a7:d5:a6:da:59:2a:b5:4c:3c:bb:fb:d7:
                    cb:88:17:67:67:e2:b5:a8:fd:ee:f2:31:22:dd:93:
                    d4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7C:08:C3:A4:54:D3:0C:27:0E:AB:0F:32:E2:9A:89:1A:C5:EB:5C
            X509v3 Authority Key Identifier:
                keyid:82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:88:1d:e8:9b:d9:45:57:17:90:54:93:72:27:4c:de:25:34:
         28:a7:9f:6e:82:89:2f:0a:61:66:88:b5:ac:da:c7:02:3b:52:
         c2:63:36:62:2f:6e:3c:7c:42:3e:d9:e7:87:8b:7a:d4:40:aa:
         c7:ff:ba:0a:48:73:78:2c:dd:3c:d8:e6:ef:8d:e4:2b:e4:ff:
         85:5d:61:b6:08:d2:7a:3f:0f:d7:70:77:4c:f4:45:fe:7c:69:
         15:6c:56:76:45:a9:cd:97:61:eb:94:57:d1:40:e6:1f:42:0b:
         e3:d0:01:82:9d:4b:cc:39:77:0b:56:12:e3:15:3f:89:35:8a:
         7f:01:83:40:67:30:50:82:77:45:9c:96:00:1d:35:23:b8:1e:
         58:3c:82:86:0c:6a:a6:80:df:80:69:c1:6b:32:49:11:3d:f1:
         63:ab:bc:4e:f8:52:c2:95:f8:94:e1:51:2b:cd:29:b4:3b:d5:
         d1:82:71:bd:89:d5:bc:f6:85:45:12:d5:a5:2b:1c:74:52:57:
         4f:2a:7a:2c:61:3b:3a:44:2e:58:15:0f:0a:d1:a6:3e:ab:30:
         80:2f:e1:fd:79:93:d9:98:02:94:d3:de:7f:d0:3a:6c:a4:ec:
         b1:76:50:63:bf:16:a4:54:46:2f:7f:6a:8d:36:24:e0:94:18:
         6a:24:68:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:38 2025 by rpki-client