Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
File:                     GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft (raw, json)
Hash identifier:          cRaV2Oo6t8AEzKeVAiqA/2Eg8uO+YxO6WgCVvXXyUhM=
Subject key identifier:   8D:78:A4:D3:8A:44:EF:17:0B:58:E2:D7:E2:81:88:F2:0E:6B:17:D4
Authority key identifier: 19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C
Certificate issuer:       /CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
Certificate serial:       01A0897A406CC7771FBD520733A27A9D4999
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
Manifest number:          05DB
Signing time:             Thu 10 Sep 2026 04:01:25 +0000
Manifest this update:     Thu 10 Sep 2026 04:01:25 +0000
Manifest next update:     Fri 11 Sep 2026 04:01:25 +0000
Files and hashes:         1: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl (hash: ru0BSkD+D4Xx8pyFmI/Dw9hzHegUZe91xUy2Of8dWDU=)
                          2: aKJTM1Uf5WiFwk0xaQDn_EEx6LY.roa (hash: Bk0oWK0Lkt5p+4sdJT9WxyXxSp/0EFpvdzicJ3h6H0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 04:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:7a:40:6c:c7:77:1f:bd:52:07:33:a2:7a:9d:49:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
        Validity
            Not Before: Sep 10 04:01:25 2026 GMT
            Not After : Sep 11 04:01:25 2026 GMT
        Subject: CN=8d78a4d38a44ef170b58e2d7e28188f20e6b17d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:36:a3:c8:a1:33:4e:f1:e6:c4:da:77:2f:61:
                    d9:32:b3:7c:d4:15:d5:cb:a4:7d:18:1d:88:ce:79:
                    5b:5f:fc:38:aa:25:c1:8f:bc:71:82:d0:86:e5:d4:
                    d8:9d:bd:ce:5e:1d:59:ce:21:33:07:ef:46:ec:49:
                    9c:af:d6:74:2f:bc:6b:c9:7d:0c:43:ab:b7:24:b8:
                    85:40:3d:92:6d:8b:2c:ca:b4:9d:90:df:7e:56:90:
                    26:f8:8e:65:4b:3c:0b:19:ee:43:b8:8e:21:6a:5a:
                    7c:3e:1d:11:59:fe:e3:80:e3:50:22:aa:20:0f:ae:
                    88:8f:79:e9:c5:a4:fe:00:90:4a:8b:83:27:d5:bc:
                    fd:24:04:36:57:a5:2f:84:2f:f8:4a:0d:dd:a6:e8:
                    3f:5c:74:3a:21:58:0f:cd:ed:4f:99:f9:6f:cd:a5:
                    ef:c8:b9:68:c4:2c:c3:02:7e:bb:39:e7:fd:a3:5b:
                    31:78:85:7e:a7:71:2b:e7:f2:54:da:8d:27:db:1b:
                    db:62:a0:be:f5:35:df:8b:a5:48:40:72:7a:92:47:
                    90:2f:43:8a:4f:79:a7:ca:6e:e2:02:03:e1:46:f9:
                    3d:3f:4d:d4:42:df:97:1e:d5:d4:c8:2c:f1:3c:7b:
                    38:a1:0f:00:46:37:64:7f:3e:64:e8:d9:27:d6:50:
                    f7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:78:A4:D3:8A:44:EF:17:0B:58:E2:D7:E2:81:88:F2:0E:6B:17:D4
            X509v3 Authority Key Identifier:
                keyid:19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:6b:5c:42:ef:f7:50:04:6a:e4:c8:59:a6:c8:8e:11:2f:4c:
         db:f8:6a:f2:85:ac:7c:83:ff:3e:04:43:21:2c:97:a3:5c:79:
         a4:0d:c3:e9:ce:c0:ee:c5:8c:65:11:6d:1b:79:8e:54:24:18:
         83:4f:cb:fd:f7:3d:8a:9c:91:00:7a:3e:ac:e1:00:72:a3:f3:
         84:4a:12:a0:71:eb:fc:0e:d1:e0:72:7c:c9:09:96:51:89:76:
         9b:52:18:ff:98:33:72:41:61:4c:c9:72:8d:28:77:e8:c7:e2:
         bd:f7:9b:5b:99:90:03:5f:71:ea:b8:d9:67:fe:35:33:52:1d:
         7b:12:d6:6f:73:ef:8e:5a:3a:05:cd:e0:a9:b5:2a:a9:2e:a3:
         6e:8a:5b:2d:f7:c4:48:4b:8a:43:44:5c:e9:c3:88:9a:e0:7a:
         74:23:12:e5:79:bb:63:48:a8:58:d1:e9:ca:71:67:71:12:1b:
         27:04:89:0e:aa:cb:a4:75:52:0a:ab:30:70:ed:cb:f6:7f:a2:
         03:05:e7:a6:6e:c6:86:f1:0a:7a:fe:f2:68:00:e7:7f:71:55:
         32:d1:3c:d8:bb:4a:3f:c1:7d:73:0d:3d:4a:f6:b5:8c:c3:58:
         2a:d3:33:31:72:b2:a6:42:41:f3:ca:40:d6:25:df:d9:29:4d:
         ac:e0:21:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:48:19 2026 by rpki-client