Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
File:                     GUKBeimILUM78buOvFmy_yVugD8.mft (raw, json)
Hash identifier:          BrU4jdna8mZBiiAi0U+V+lHMLMHnXcbp/tQmWZim5ys=
Subject key identifier:   77:6A:19:1C:D8:29:2A:01:A2:DF:8C:AC:20:6E:C1:2E:DE:B2:CC:07
Authority key identifier: 19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
Certificate issuer:       /CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Certificate serial:       019E284B369D99A87835ED4C41A80E34D755
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
Manifest number:          0E43
Signing time:             Thu 14 May 2026 21:01:18 +0000
Manifest this update:     Thu 14 May 2026 21:01:18 +0000
Manifest next update:     Fri 15 May 2026 21:01:18 +0000
Files and hashes:         1: 1AlRjHDHPerXd5ndCFjnN-RkvrM.roa (hash: ZLKTq9Q4KNpxNVoqpx9iO6C2WOOfE/x2d5mOP6ZbGXQ=)
                          2: GUKBeimILUM78buOvFmy_yVugD8.crl (hash: Fa9gYdcn2RCqDHvNeGmuLU+zp9FPGGgy9EttyBgmJuI=)
                          3: p93Yo32LiS86tKNIIJTFqRsTAc4.roa (hash: rKHZxZkQ1DlZz92HShvQ6VMO1LR9WfPRGqIp6geZ5io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 21:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:4b:36:9d:99:a8:78:35:ed:4c:41:a8:0e:34:d7:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
        Validity
            Not Before: May 14 21:01:18 2026 GMT
            Not After : May 15 21:01:18 2026 GMT
        Subject: CN=776a191cd8292a01a2df8cac206ec12edeb2cc07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:30:7e:88:51:1f:d0:ac:a4:cb:9c:7c:73:ab:
                    b0:b1:21:35:99:0d:aa:41:3d:04:de:2a:f6:4f:0e:
                    2b:c2:67:c5:83:a1:37:69:43:6d:0a:a1:c8:eb:fc:
                    b9:15:1d:a7:20:9c:f9:dc:ff:37:df:f6:2f:bc:83:
                    ef:72:c8:ba:a6:8e:9a:33:05:f4:81:4c:82:95:5c:
                    c2:bf:32:82:8f:9f:ce:d6:10:ec:51:15:5e:af:e2:
                    d6:7c:7f:50:76:eb:5f:03:f2:a5:02:86:c1:b5:87:
                    d6:ea:a2:8e:b2:c1:ce:59:78:c0:04:82:50:63:1a:
                    dc:d1:a5:33:3a:a5:4b:3a:91:79:52:c8:d9:5b:1d:
                    85:7d:4b:93:a2:d5:95:9f:21:38:f0:5a:35:bb:c6:
                    20:93:9e:ed:53:6a:07:db:5e:59:99:c1:b9:6c:73:
                    bf:d2:8f:4c:ab:8c:ae:c7:a9:3e:d2:26:a3:7c:0e:
                    50:b3:48:97:5d:d5:94:18:84:ad:f5:9c:c4:a9:6d:
                    09:91:eb:c6:8a:9b:ee:dc:41:2f:ba:2e:54:d2:41:
                    be:a2:36:24:c0:40:18:e4:bf:e5:35:5f:cc:ac:82:
                    93:69:0c:f2:78:ae:e6:cc:23:ae:d0:c9:cf:85:9e:
                    76:b9:63:66:87:80:13:cb:21:90:40:5e:4e:28:07:
                    c1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6A:19:1C:D8:29:2A:01:A2:DF:8C:AC:20:6E:C1:2E:DE:B2:CC:07
            X509v3 Authority Key Identifier:
                keyid:19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:e6:14:2f:85:5e:e9:b0:a3:67:51:cb:5d:88:01:51:2e:55:
         4d:0e:49:3b:3a:ed:67:ef:c5:cc:86:ac:5a:93:d4:bf:7b:f5:
         1d:f5:fe:bd:c4:2f:ca:9f:e2:80:3b:e4:c7:2a:04:9f:05:8a:
         51:0b:e0:61:3e:60:cf:bd:3d:3f:42:55:c2:63:84:98:4e:f7:
         06:e3:9d:1c:d2:18:06:a8:14:f6:67:4f:11:95:e5:b7:71:a9:
         42:7a:75:88:19:eb:33:10:85:ed:89:8d:a0:c3:8e:ee:d9:bf:
         2b:f9:30:2b:2d:01:68:43:9b:9c:82:c8:d8:dc:e4:5c:8d:cd:
         06:ca:89:66:71:17:a4:7e:8c:9c:dd:a2:0f:23:5f:39:e0:4f:
         37:8b:15:b0:3e:1d:75:7c:aa:38:68:70:09:e5:06:b1:c0:db:
         0b:51:2b:97:bc:ab:97:7e:77:99:a3:85:21:c7:4c:af:61:b0:
         7a:dd:fe:37:d5:91:e7:09:fa:e7:f6:d9:1e:a7:a8:63:58:dd:
         78:3d:72:29:ff:4a:fa:fa:64:68:d4:d3:0c:31:11:72:0e:09:
         7a:72:a5:30:82:4d:20:2f:e7:fe:2c:04:09:5f:87:7f:a5:a7:
         ba:e0:f3:0f:66:b7:b0:63:52:96:d8:ce:37:bc:c9:8b:1e:f9:
         83:87:fe:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:04:08 2026 by rpki-client