Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
File:                     GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft (raw, json)
Hash identifier:          bNwPpEQPRaE8uwVVvhz5k7NCWkPD0N2rHQuSbUJEp+Q=
Subject key identifier:   13:96:B1:FE:E3:77:3C:33:5F:91:3E:98:FD:80:3F:5E:2B:F5:55:BE
Authority key identifier: 18:8A:87:AB:79:10:19:37:93:B8:AA:6C:3C:1E:E6:6B:DB:06:A7:1F
Certificate issuer:       /CN=188a87ab7910193793b8aa6c3c1ee66bdb06a71f
Certificate serial:       019EFCB92EB47AD0D3E32AA05C6ECC9F7344
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
Manifest number:          01FB
Signing time:             Thu 25 Jun 2026 03:00:54 +0000
Manifest this update:     Thu 25 Jun 2026 03:00:54 +0000
Manifest next update:     Fri 26 Jun 2026 03:00:54 +0000
Files and hashes:         1: GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl (hash: LhMXu2gTfI52adzriZAs4CCdtSTBeJZCMecCe2VWsKg=)
                          2: dKUSVy6IdXXRjgtpigNGU0J9jeU.asa (hash: CejzruUkEWq9zLEaoAabqikLpPGhjf75ZRntC5aAVpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fc:b9:2e:b4:7a:d0:d3:e3:2a:a0:5c:6e:cc:9f:73:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188a87ab7910193793b8aa6c3c1ee66bdb06a71f
        Validity
            Not Before: Jun 25 03:00:54 2026 GMT
            Not After : Jun 26 03:00:54 2026 GMT
        Subject: CN=1396b1fee3773c335f913e98fd803f5e2bf555be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a3:aa:a4:e8:25:7d:e8:fe:4d:5d:48:6b:91:
                    bb:62:4a:bd:ca:6b:6b:11:ee:ed:47:17:d1:3c:53:
                    ce:d2:4b:c3:f9:fb:e5:f6:5f:d9:d1:19:a8:5d:3c:
                    1e:61:bb:a0:7d:e2:72:8e:55:f4:e6:8f:08:e5:82:
                    08:8e:18:c6:c5:da:24:7c:f9:23:5d:81:7a:a7:eb:
                    09:2b:65:14:91:b4:ed:92:2f:ae:cc:be:3b:54:46:
                    dd:91:d9:1c:99:45:6b:bb:1a:28:13:1b:9a:7f:61:
                    d4:23:82:7f:9c:e0:f6:6c:a5:f4:bb:f7:46:29:46:
                    e4:f9:f9:d8:e4:a9:86:ab:2e:bd:73:0e:04:29:a2:
                    eb:0c:0c:55:8e:42:43:6e:8c:71:06:c0:de:0c:22:
                    a5:5f:c5:ef:8e:e2:88:d5:44:4b:ea:9c:4e:2e:58:
                    d7:b1:0c:2f:0a:78:7e:0b:48:a2:53:2e:59:e6:95:
                    42:bb:7c:89:f9:61:55:b3:30:e2:e4:18:1e:cf:ab:
                    45:26:0b:31:cb:fa:9c:1c:d3:b1:28:76:d3:a0:13:
                    0d:7a:f2:08:5d:29:7c:ce:9d:da:1c:8c:1c:96:d8:
                    c5:78:61:b9:36:38:84:71:da:95:bc:9e:3e:07:4d:
                    36:b0:1c:6f:42:80:50:74:5d:8e:9f:f9:b5:6e:f1:
                    1f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:96:B1:FE:E3:77:3C:33:5F:91:3E:98:FD:80:3F:5E:2B:F5:55:BE
            X509v3 Authority Key Identifier:
                keyid:18:8A:87:AB:79:10:19:37:93:B8:AA:6C:3C:1E:E6:6B:DB:06:A7:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:28:67:dd:ce:e4:d9:66:77:85:2c:f1:9a:27:25:1f:78:2a:
         bf:10:e6:a9:01:1e:fd:78:0e:1f:0d:5d:40:ae:b9:89:dd:93:
         cf:e1:d4:7d:a0:52:ca:a9:d0:9b:0d:e2:4b:bc:bf:50:8d:0f:
         bd:26:fa:1a:d0:1b:07:34:2c:da:76:ca:ae:b1:03:9f:5a:49:
         82:68:a8:8c:57:1e:16:b5:ee:15:63:bd:0b:cc:ca:bd:c6:28:
         d0:97:32:22:ef:c5:4c:f3:bd:d8:20:2a:aa:99:8b:2e:4f:64:
         2e:9e:bc:84:2d:e2:88:87:fb:3d:5f:c6:0c:a5:b8:79:35:a2:
         7e:dc:4a:ea:70:1f:5f:9a:ff:4a:f3:14:86:64:e3:fc:87:cb:
         1e:27:b1:de:70:03:a3:0b:ca:4f:dc:5f:91:1f:9b:06:01:36:
         36:99:78:67:2c:68:e1:41:a0:28:28:6c:12:81:74:1c:22:30:
         20:66:ee:1c:27:80:c0:1e:1f:ee:60:c5:f6:8e:15:4b:26:21:
         28:b7:c4:19:12:0b:4d:6c:a1:7b:53:df:84:ef:bb:36:16:32:
         8e:d3:66:63:c1:cb:16:28:e2:c6:aa:c8:5a:69:f9:de:0a:9e:
         0b:d1:fd:93:5d:7d:c6:c4:a0:af:ae:b0:0f:50:0c:c6:ff:6e:
         81:60:46:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:30:00 2026 by rpki-client