Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
File:                     glHn-2uWDUBrIjbSXk4g4kU1nbI.mft (raw, json)
Hash identifier:          TcURRFO+djQtc8SQW1Ld/IGdblxVG2v6QhC8jrIxEbM=
Subject key identifier:   C9:64:58:6E:6C:D1:A6:6B:50:F6:B8:BB:D4:EA:1A:36:5F:DC:B6:15
Authority key identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
Certificate issuer:       /CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Certificate serial:       019EC1EE2374D6A5015CC1F7EE6F66336252
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 17:01:09 +0000
Manifest this update:     Sat 13 Jun 2026 17:01:09 +0000
Manifest next update:     Sun 14 Jun 2026 17:01:09 +0000
Files and hashes:         1: 4FDNWntT8HGm47C46owaTOgYZFY.roa (hash: MNnKoAQqNIz7h2yGseXPJCLeJOP5/UFE0Y/s3x5Ddio=)
                          2: INjnRxc1KDjJdK0P3v0NKp9zXSA.roa (hash: U1Y8u0AecjgXDJowXa0cOGElTwu53RvRkwL+O2WLn8c=)
                          3: LfgI9rpN293BrrnzaHSQkYw-4Vo.roa (hash: 17vv8CHDmx8Pt5VIpPIqTVbzDuzHnEYkz/7k/nREMI0=)
                          4: MxTmbVkJmB_lTh2o1kTnP_BFeDY.roa (hash: ttGF8f4pFYCjKqu0HAUvABDoHst3U1ecGF8sI6MFc/8=)
                          5: SSZXBlYC8HRLyEBgcVeFIXi-Zbg.roa (hash: 7JMK2h+HH0ge6JJyog9isIH7U/WCw5GQsuyNPYb8o94=)
                          6: glHn-2uWDUBrIjbSXk4g4kU1nbI.crl (hash: xtMgWGyT5/OECX18wd8bTHPL2/AfiwP/TYYdtUY/z48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ee:23:74:d6:a5:01:5c:c1:f7:ee:6f:66:33:62:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8251e7fb6b960d406b2236d25e4e20e245359db2
        Validity
            Not Before: Jun 13 17:01:09 2026 GMT
            Not After : Jun 14 17:01:09 2026 GMT
        Subject: CN=c964586e6cd1a66b50f6b8bbd4ea1a365fdcb615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d4:e2:9d:47:56:bc:3f:90:d0:ca:06:ed:dc:
                    75:46:b1:a2:f6:8d:ca:69:5d:79:9b:4f:c6:28:4f:
                    d6:9b:17:82:f1:fb:2c:b9:de:06:4e:c9:4a:73:a7:
                    5e:d3:cc:54:e9:c3:f8:10:19:02:5f:b7:b4:cf:6e:
                    c3:85:8f:59:4e:39:e9:b9:bf:91:1b:c4:f6:6a:7b:
                    7e:28:f6:0e:ff:a9:08:ba:59:1d:82:d8:bd:92:a1:
                    11:4b:59:4a:34:f2:46:30:58:89:55:10:47:17:92:
                    c4:9f:11:6a:d7:af:4f:53:d2:9b:38:cf:2b:11:17:
                    c1:1c:72:5c:50:87:27:e1:3f:ec:d7:d8:c0:67:41:
                    0c:03:63:82:ce:78:37:99:5e:03:0a:97:41:48:6f:
                    a3:8d:1e:4b:4b:34:ff:c2:f1:6e:e2:97:6d:c1:97:
                    8b:c9:91:13:c0:02:2c:46:4d:f1:28:b6:eb:40:d5:
                    28:f3:2e:9a:b5:f5:2d:28:eb:51:a6:2c:09:6a:ec:
                    54:53:2c:02:ff:ac:e3:52:5d:dd:0c:ba:14:a2:75:
                    8e:f0:88:ca:cc:1b:6c:4e:b6:2e:86:af:5c:09:89:
                    90:c3:e4:6e:50:ba:ad:0f:0a:32:3e:d2:a4:74:31:
                    ef:21:94:e0:98:73:ec:f4:c3:85:e2:b1:66:8e:a6:
                    cd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:64:58:6E:6C:D1:A6:6B:50:F6:B8:BB:D4:EA:1A:36:5F:DC:B6:15
            X509v3 Authority Key Identifier:
                keyid:82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:34:ac:6f:71:8a:ed:2d:86:bd:5a:17:5e:74:cb:e6:58:e6:
         fa:6b:5e:b9:dd:46:9c:1e:20:16:28:24:32:a2:f6:04:66:6d:
         57:31:70:fa:d8:2b:6f:e1:66:3e:6e:2e:44:98:c5:39:76:05:
         e0:af:19:37:77:41:d0:dd:21:41:a9:b5:a8:8f:cb:41:a5:5d:
         e1:79:35:99:c7:fb:99:b3:dc:11:38:14:4b:67:e3:6f:a3:3f:
         34:7f:87:89:a1:41:92:85:46:99:ce:b1:6e:5e:46:67:09:aa:
         27:63:0f:1f:19:af:f8:06:8e:ca:91:95:eb:86:00:33:37:43:
         43:59:9b:b3:2e:06:59:79:4a:d0:3c:2e:17:25:89:a6:37:86:
         07:29:a9:45:79:3b:73:86:58:33:f6:d8:7d:24:30:7f:a6:3d:
         41:97:16:54:06:ea:cc:c8:52:df:d0:06:58:8a:0b:08:a6:3d:
         48:8b:c5:99:b6:d9:10:28:51:82:18:96:41:c4:0d:4c:e9:a2:
         cd:e6:54:b2:48:d8:a6:d2:cb:ba:c7:24:b5:fb:b8:1d:6d:8c:
         4b:fa:d8:5b:0c:90:b5:d6:aa:1e:55:2f:a8:12:2f:8c:32:cd:
         55:9a:95:65:4e:1d:f0:f4:57:44:a5:e3:21:37:9b:59:ff:52:
         4f:3f:a7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:23:57 2026 by rpki-client