Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft
File:                     GLbl-LQJfB26dKICIGFFk5_x4do.mft (raw, json)
Hash identifier:          ukdtBs3n318vSbwOBtBPLS0tMfRwPc4DP+5XXXyvFHs=
Subject key identifier:   6E:74:F2:AC:AC:6B:FE:6B:70:9F:50:E2:A2:39:35:F6:65:92:06:10
Authority key identifier: 18:B6:E5:F8:B4:09:7C:1D:BA:74:A2:02:20:61:45:93:9F:F1:E1:DA
Certificate issuer:       /CN=18b6e5f8b4097c1dba74a202206145939ff1e1da
Certificate serial:       019D97AA860F5FCD6F48B518D9BD3806D920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft
Manifest number:          12BC
Signing time:             Thu 16 Apr 2026 19:00:28 +0000
Manifest this update:     Thu 16 Apr 2026 19:00:28 +0000
Manifest next update:     Fri 17 Apr 2026 19:00:28 +0000
Files and hashes:         1: GLbl-LQJfB26dKICIGFFk5_x4do.crl (hash: RKLPRVxMYuAmK40x6Vv5E1NLkLGWgY+2LHbyk2/jRsw=)
                          2: ieC1NLLyKx5tco-VwoKH2BnT_8Q.roa (hash: vvvqHH2JLJwMKnye94FrwZVCbXdl2s8tUEPcH0TbOBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 19:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:aa:86:0f:5f:cd:6f:48:b5:18:d9:bd:38:06:d9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18b6e5f8b4097c1dba74a202206145939ff1e1da
        Validity
            Not Before: Apr 16 19:00:28 2026 GMT
            Not After : Apr 17 19:00:28 2026 GMT
        Subject: CN=6e74f2acac6bfe6b709f50e2a23935f665920610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e8:94:09:24:14:a1:85:e9:53:55:cf:1c:e6:
                    67:18:17:d8:51:d8:ca:e0:86:e9:12:90:5c:a2:f2:
                    c5:3a:b3:7a:80:46:e7:62:f2:ae:3e:f4:1e:ae:d3:
                    64:8e:7b:38:f4:16:36:44:56:45:70:d0:b6:37:43:
                    6d:55:52:70:7a:56:39:e3:da:76:80:ba:df:82:0d:
                    a0:ad:9b:f9:9c:23:32:d8:d3:e0:cd:30:8c:5c:e2:
                    62:b1:40:36:75:78:ad:6d:87:5b:c8:73:05:dc:f2:
                    91:16:ad:87:a2:ee:15:c0:13:27:77:97:59:b9:55:
                    c0:50:fb:a4:d5:f2:39:a8:d3:36:e1:0b:b9:0d:a2:
                    9d:38:b3:a5:ba:bf:c7:cf:dc:27:84:7a:7c:a1:ae:
                    e0:ce:d9:02:2b:b0:d2:8e:00:1f:17:8e:bb:19:f5:
                    e3:cd:46:55:f8:9b:6b:11:10:a2:5e:4d:8a:32:60:
                    92:fe:c6:f9:a3:40:44:74:81:49:87:37:6e:23:d2:
                    cd:7d:e1:50:ff:74:7a:97:01:7b:45:18:62:df:cb:
                    7e:f5:76:8a:65:5b:a0:2b:61:0c:c2:24:23:50:86:
                    e2:e3:67:47:b2:dd:c6:2d:6b:af:5e:7b:5f:de:13:
                    7b:4c:f4:21:25:7d:29:2e:59:c8:bd:82:28:b1:08:
                    ad:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:74:F2:AC:AC:6B:FE:6B:70:9F:50:E2:A2:39:35:F6:65:92:06:10
            X509v3 Authority Key Identifier:
                keyid:18:B6:E5:F8:B4:09:7C:1D:BA:74:A2:02:20:61:45:93:9F:F1:E1:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:84:95:c1:f2:a7:dd:4c:af:de:5f:94:93:f2:96:46:65:19:
         0b:d8:ec:81:1c:14:73:f4:5a:f8:65:b9:c2:28:b6:d9:dd:72:
         39:38:97:15:a3:70:d4:50:82:67:ff:54:33:1a:77:1a:80:5f:
         f5:60:dd:08:07:17:f1:f8:e2:ee:a9:96:90:18:69:90:99:dd:
         44:0a:1d:d2:0d:8a:c7:d4:2a:af:c2:ca:d1:74:cb:8c:5e:a1:
         de:69:0e:12:db:37:1c:2a:00:fc:c4:10:c1:2c:13:5b:5c:60:
         c9:78:94:a8:0a:0d:c0:74:67:dd:30:54:cd:16:b5:45:e9:43:
         4f:54:29:56:18:ef:a2:8a:6b:a3:eb:37:f9:3e:e6:fb:65:d5:
         6b:46:9f:82:bb:ff:2f:0f:fc:23:11:95:7e:f0:59:d9:c9:eb:
         9b:7e:63:b2:13:f9:b8:ac:46:da:52:84:7c:db:8c:37:cb:b0:
         b8:4c:52:07:0a:cc:ca:b7:72:77:5b:73:e9:58:27:69:9c:d2:
         da:6f:b0:d9:b5:cd:dc:e6:66:cc:f6:c3:34:8f:76:24:96:c3:
         21:f1:c4:06:cb:08:a1:a0:1f:b0:51:d3:a1:d7:01:97:86:0f:
         bf:b8:8e:c2:de:11:fc:a1:b0:ae:29:38:1a:a6:8a:bc:19:b7:
         c3:5b:b9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:23:10 2026 by rpki-client