Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
File:                     GtwAk8WviUz1ILWTbjCyFQkN6fg.mft (raw, json)
Hash identifier:          Sw42ScPfUq9BF9PQ9ms3BoZfHFLmpvP7w7k/7evsGSg=
Subject key identifier:   38:CF:73:9A:31:E4:E2:76:A5:CD:C5:FB:D7:25:08:B9:A4:D3:43:79
Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
Certificate issuer:       /CN=1adc0093c5af894cf520b5936e30b215090de9f8
Certificate serial:       019EB9C68F6A834B27A52D697570DD40C859
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
Manifest number:          111C
Signing time:             Fri 12 Jun 2026 03:00:58 +0000
Manifest this update:     Fri 12 Jun 2026 03:00:58 +0000
Manifest next update:     Sat 13 Jun 2026 03:00:58 +0000
Files and hashes:         1: 22DYdmOvCLM948EoyfkUAxlACZo.roa (hash: kciKnNjBgHwlkB4sn576VFqmz6xPQ5AioU9khsx436M=)
                          2: GtwAk8WviUz1ILWTbjCyFQkN6fg.crl (hash: BB81DOJX5TCab1DPjJAeAcotBW/+syWUiZ+ZcKNC0tw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:c6:8f:6a:83:4b:27:a5:2d:69:75:70:dd:40:c8:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8
        Validity
            Not Before: Jun 12 03:00:58 2026 GMT
            Not After : Jun 13 03:00:58 2026 GMT
        Subject: CN=38cf739a31e4e276a5cdc5fbd72508b9a4d34379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:26:53:6e:bf:43:37:c3:96:35:ba:5c:7a:da:
                    18:ce:53:cd:c7:87:21:e5:93:ae:bf:e4:83:80:47:
                    1a:cd:cf:74:9b:b5:a1:97:65:6c:47:47:1c:32:39:
                    a8:1f:03:6c:2b:a4:b3:f7:da:ce:b6:22:af:41:7a:
                    20:cb:72:05:18:ed:78:6b:ba:fe:52:8e:be:d6:7e:
                    66:94:45:0f:1f:65:8e:9b:b8:25:ee:77:bc:b5:88:
                    f2:74:84:c2:fd:5a:e7:85:1b:c8:bc:64:cc:84:06:
                    0e:79:58:6b:d6:21:53:e3:01:54:e8:4f:b1:85:4b:
                    57:7a:9d:7d:29:2c:94:f6:a5:91:13:54:8b:51:a7:
                    5a:d6:b3:3e:15:da:0d:eb:b2:fc:76:1c:c6:e1:27:
                    22:a4:d9:ac:b1:24:4f:32:04:52:d1:de:d5:02:00:
                    b0:ff:82:64:11:85:0c:f5:5e:2c:93:fa:bd:24:9a:
                    29:46:a3:d6:23:98:0d:81:63:4d:5e:5b:8b:c8:f3:
                    45:d8:c9:93:4d:64:53:7c:25:b1:7b:9b:f4:1d:85:
                    a8:93:6a:a5:8f:8f:21:d4:fa:7b:4c:e0:2f:d4:ee:
                    04:01:cf:76:ff:82:f9:aa:5d:c9:b3:7e:2b:00:41:
                    3b:43:2b:5e:7e:dc:d6:19:0d:ff:5f:68:65:ac:ee:
                    55:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CF:73:9A:31:E4:E2:76:A5:CD:C5:FB:D7:25:08:B9:A4:D3:43:79
            X509v3 Authority Key Identifier:
                keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:07:8e:da:d0:2d:18:4b:ff:aa:5a:db:ab:c6:75:a0:04:06:
         52:9e:80:25:71:51:fe:d4:cd:f7:c8:1f:be:9c:45:db:42:a9:
         03:42:de:f2:56:18:ad:c9:a1:06:ae:0c:22:82:b3:69:85:0b:
         92:da:16:23:1d:e5:81:20:3b:c4:c9:23:4b:58:3e:00:e4:bc:
         ae:32:91:a0:76:f0:9b:ba:57:5d:42:1f:c5:51:cf:ba:0f:97:
         aa:af:0a:b4:b4:74:12:79:23:ad:af:77:7f:62:72:d9:e1:7a:
         01:7b:56:d7:12:0c:fa:6c:32:7c:3b:45:5b:ea:3f:bf:46:47:
         e4:8b:04:d8:12:c1:2d:51:01:6a:dd:f1:11:c1:da:ce:34:89:
         c2:22:76:ea:1d:42:c6:31:34:cb:98:24:49:8b:30:7d:51:00:
         c1:e2:af:1f:21:fa:8f:0f:60:18:92:68:c1:c5:0a:51:dd:eb:
         e3:eb:fc:92:21:36:52:c8:2b:0f:5b:14:2e:79:e5:de:e9:5a:
         9c:bb:6e:44:08:61:cd:2a:e6:7c:cf:2f:48:e5:ef:48:1d:ce:
         89:c2:40:a4:4e:02:8c:08:c5:9c:5e:74:34:40:e6:63:6b:1e:
         f2:7c:04:49:47:fa:95:2f:80:78:92:1d:0d:26:3c:c8:c3:9e:
         71:cf:66:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:55:40 2026 by rpki-client