Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
File:                     GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft (raw, json)
Hash identifier:          B2smaB0Wg9327qpPUEHdMryFUTmHIpa3SjkIsLrlr0k=
Subject key identifier:   D4:DC:07:20:E8:79:9F:40:91:4D:19:34:F6:66:8C:A9:77:36:74:E3
Authority key identifier: 19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C
Certificate issuer:       /CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
Certificate serial:       019EB80EBECF2907F46105D08444CE6D72EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
Manifest number:          04EA
Signing time:             Thu 11 Jun 2026 19:00:34 +0000
Manifest this update:     Thu 11 Jun 2026 19:00:34 +0000
Manifest next update:     Fri 12 Jun 2026 19:00:34 +0000
Files and hashes:         1: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl (hash: uvW0LJOlO3N6dz4KTG+bOBxtfl90lZjvnyMk1ag9cNk=)
                          2: aKJTM1Uf5WiFwk0xaQDn_EEx6LY.roa (hash: Bk0oWK0Lkt5p+4sdJT9WxyXxSp/0EFpvdzicJ3h6H0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0e:be:cf:29:07:f4:61:05:d0:84:44:ce:6d:72:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
        Validity
            Not Before: Jun 11 19:00:34 2026 GMT
            Not After : Jun 12 19:00:34 2026 GMT
        Subject: CN=d4dc0720e8799f40914d1934f6668ca9773674e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:12:e7:34:11:9b:92:3a:15:9d:03:6c:43:a7:
                    25:8f:9a:c8:b8:09:54:95:81:af:10:ef:7c:f9:9b:
                    4d:58:fc:33:42:84:22:4c:2f:31:bd:5e:63:58:2d:
                    48:8f:a3:53:18:d0:03:ae:3d:32:2b:9e:d4:64:a2:
                    c4:c4:bc:b3:bf:2f:c2:b3:09:27:4e:1d:b2:52:3a:
                    40:16:3e:a2:44:bd:33:c0:85:e3:d5:3c:0b:53:eb:
                    73:6b:46:d9:b7:4c:55:d9:6c:82:88:26:8c:83:87:
                    70:62:62:66:65:3a:e0:70:7d:6d:94:74:6f:79:71:
                    1b:4f:f2:54:a5:b3:d5:22:0e:54:c0:53:53:a4:cd:
                    45:c6:36:56:3e:fc:39:87:2a:d3:9d:80:d4:ae:72:
                    0b:23:b7:2c:2f:5f:a0:be:ab:d3:f1:85:2e:b8:26:
                    8a:b3:09:d1:3f:dd:21:ba:d1:73:89:7a:16:2a:ac:
                    80:e6:27:fe:7e:7d:a2:3f:33:1a:2c:cd:3a:75:7b:
                    3f:4b:8f:7b:fc:7c:ad:2a:97:8d:80:2f:ea:fd:09:
                    72:44:25:3d:91:c6:4c:1c:5a:0f:ba:f9:4e:0d:10:
                    87:d7:6b:d7:9e:76:01:ac:88:99:bb:77:5d:39:eb:
                    34:20:6e:ed:fe:18:97:f6:b6:12:97:a4:5e:83:c7:
                    3b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DC:07:20:E8:79:9F:40:91:4D:19:34:F6:66:8C:A9:77:36:74:E3
            X509v3 Authority Key Identifier:
                keyid:19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:6c:33:df:2b:75:66:f1:b4:88:15:30:ae:d1:18:bc:5e:74:
         2d:b9:d4:43:c8:c8:3f:26:c4:c2:5b:f3:25:af:1a:6f:da:db:
         84:23:00:94:70:78:58:06:79:4c:a3:ce:d4:28:db:c5:fa:47:
         80:ea:e8:d2:4d:97:47:36:7b:e5:d8:68:dc:a5:b0:d1:6c:08:
         b6:19:1d:a5:58:79:79:7e:6e:0f:5d:4e:9d:e1:d5:87:cb:df:
         1f:bf:9a:63:a3:f8:d2:cd:f1:dd:ef:0a:ef:2b:a0:00:93:1a:
         ce:3a:de:4c:aa:3f:04:56:8e:f8:f9:08:a2:a7:a4:dc:d6:3d:
         13:5b:3b:a0:98:6f:ef:72:f0:3a:83:92:fa:88:7b:ff:87:de:
         e2:25:e2:b1:5d:4a:41:2d:e1:8f:74:62:35:59:2c:7a:16:81:
         74:fa:d2:be:33:f6:62:8b:e9:a9:9a:d4:b4:28:56:df:69:c7:
         6f:58:51:fe:47:9b:90:ae:86:ae:ca:16:c3:a5:8f:67:e3:21:
         2f:d8:f0:34:f2:c6:40:61:0e:50:47:99:14:46:ac:8f:a3:63:
         6e:09:9c:63:f0:d7:7b:ec:d5:f7:2d:97:18:da:36:3e:ad:2d:
         59:0e:bd:2e:4f:96:11:5e:67:c7:b9:69:48:68:f0:ec:6b:c6:
         5e:e4:a4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:40:40 2026 by rpki-client