Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft
File:                     GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft (raw, json)
Hash identifier:          7K364oBHnIAkmw9Mxth0CcIenGSHeGEAiHB2WcvNHdw=
Subject key identifier:   D0:13:3E:68:D2:AF:2F:31:76:F1:3F:BB:71:3A:BF:E8:52:3B:F2:0D
Authority key identifier: 1A:5B:E1:55:03:7E:B7:E6:5C:12:AC:9A:A2:A2:C3:25:03:8C:3A:9B
Certificate issuer:       /CN=1a5be155037eb7e65c12ac9aa2a2c325038c3a9b
Certificate serial:       019D9AE39AF8F18B338E96268383F724F106
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GlvhVQN-t-ZcEqyaoqLDJQOMOps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft
Manifest number:          0C99
Signing time:             Fri 17 Apr 2026 10:01:40 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:40 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:40 +0000
Files and hashes:         1: 2m0EGmPYAk8UEyoPFCdGZfUXZ58.roa (hash: xM4PqrOFPyrlAEK5Rat9kM0I00fA9ams94dU6W0ME2Q=)
                          2: GlvhVQN-t-ZcEqyaoqLDJQOMOps.crl (hash: JmzEswmm2BPaQubsSX3RrpdY1FqXWyk74MVkqWrzKcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GlvhVQN-t-ZcEqyaoqLDJQOMOps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 10:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:9a:f8:f1:8b:33:8e:96:26:83:83:f7:24:f1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5be155037eb7e65c12ac9aa2a2c325038c3a9b
        Validity
            Not Before: Apr 17 10:01:40 2026 GMT
            Not After : Apr 18 10:01:40 2026 GMT
        Subject: CN=d0133e68d2af2f3176f13fbb713abfe8523bf20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:37:97:69:e1:8b:95:f9:79:95:9f:d2:f9:09:
                    55:3a:7f:29:7f:98:ba:53:cd:ea:c4:3c:5a:9b:39:
                    65:ce:14:8e:96:64:59:ff:42:eb:ad:c0:75:d0:4a:
                    08:e4:fa:91:a8:f0:d0:09:90:29:f1:59:90:32:a6:
                    f8:63:97:f7:08:d5:c0:8c:e6:af:36:56:b0:bc:52:
                    1e:cb:26:5b:ab:a7:d6:f2:77:6d:05:a2:69:b2:f0:
                    f6:30:97:b2:50:09:26:cf:58:3a:08:f4:ac:80:a1:
                    ee:9c:ef:ee:53:db:b0:d8:27:60:c7:01:b3:70:84:
                    85:c7:fb:6b:f8:2d:cb:9f:98:9f:e4:7a:5e:6d:74:
                    36:bc:f1:c6:3f:15:18:bf:ec:3a:74:d0:fc:f0:37:
                    c2:d9:bd:e9:76:3c:6c:6c:0e:d4:d7:bd:9f:1c:42:
                    36:0b:51:88:ad:f6:73:ff:15:e1:b9:1d:80:44:b8:
                    22:0b:6f:06:9d:27:db:3c:d9:67:89:f3:e8:f1:c8:
                    09:09:1f:46:e7:bf:bf:73:a8:ee:ae:81:d0:42:a0:
                    5b:24:46:7d:c9:dd:3c:b4:ef:c9:39:e0:22:60:d7:
                    fa:d8:c0:2c:a4:cb:d5:82:7c:cf:95:32:e6:eb:ba:
                    56:03:3d:7b:0e:60:be:3c:21:4f:98:b7:e3:e9:5c:
                    1b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:13:3E:68:D2:AF:2F:31:76:F1:3F:BB:71:3A:BF:E8:52:3B:F2:0D
            X509v3 Authority Key Identifier:
                keyid:1A:5B:E1:55:03:7E:B7:E6:5C:12:AC:9A:A2:A2:C3:25:03:8C:3A:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlvhVQN-t-ZcEqyaoqLDJQOMOps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:04:55:8c:36:16:a8:4c:32:9f:16:b9:2e:3b:bd:a6:f8:92:
         cd:6c:d0:44:05:2e:c5:e1:3d:e4:4d:6d:10:1d:19:fa:c5:66:
         a6:49:77:fe:1b:ea:cd:88:08:46:3c:99:30:9d:4d:fb:f7:b1:
         e9:f3:56:96:11:85:8b:ce:ad:76:4b:4c:fa:3a:20:d8:d2:12:
         78:77:37:da:4c:05:8c:5d:55:55:6b:17:67:45:5d:d1:4f:b1:
         c6:de:d1:d7:7f:38:51:03:7d:42:1a:d6:4a:f7:c9:d4:0d:67:
         a6:ee:07:22:e5:9e:c1:6b:c6:27:a1:cf:21:9c:57:81:06:30:
         3d:99:49:34:16:d3:6b:cf:87:1b:81:91:7b:60:a5:cd:4e:91:
         b8:29:8e:e0:d0:fd:33:1c:83:f0:f7:25:77:bf:cb:b3:37:4a:
         ef:72:51:4e:f2:b9:e7:72:c6:fd:e1:3e:2c:a2:87:c5:97:87:
         c4:86:98:8c:7a:3c:7f:44:73:b6:d5:d9:c7:7b:f3:63:ef:94:
         0a:1d:74:c5:a7:82:4c:18:17:b7:35:bc:1f:19:28:24:d6:50:
         e2:b9:9d:62:54:94:58:70:10:38:64:90:62:73:cc:b2:cd:36:
         b8:75:2d:36:98:7e:e1:0c:41:81:21:42:70:d6:70:55:a2:47:
         14:6c:99:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:11:34 2026 by rpki-client