Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
File:                     GPJ8DAs13dQruJLBaEWmOwAnocc.mft (raw, json)
Hash identifier:          MRn7mjq/X5qljUf8kU4zcdnixXgxB+unfbjyuidfZhs=
Subject key identifier:   87:E4:F3:3B:1A:42:9E:1F:AE:BD:8B:23:C5:5C:E2:90:40:5B:37:D2
Authority key identifier: 18:F2:7C:0C:0B:35:DD:D4:2B:B8:92:C1:68:45:A6:3B:00:27:A1:C7
Certificate issuer:       /CN=18f27c0c0b35ddd42bb892c16845a63b0027a1c7
Certificate serial:       019E21000802422D276A054398D8A45AA4ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
Manifest number:          0407
Signing time:             Wed 13 May 2026 11:01:50 +0000
Manifest this update:     Wed 13 May 2026 11:01:50 +0000
Manifest next update:     Thu 14 May 2026 11:01:50 +0000
Files and hashes:         1: GPJ8DAs13dQruJLBaEWmOwAnocc.crl (hash: /Maa1oLcxgo3mKeASfbLl9q6K3Fz3F9t1CQLrZWdI9c=)
                          2: RqlCRGLn8WCi_decwvLY1MH3NJ0.roa (hash: e6wtpCGhTAbBzVr4hSDCQshEk7sSjJ31RaQhsBrVJiY=)
                          3: kZzi5najCOiRoP0WLMWI7hCvztc.asa (hash: b2P8/xQuWtMN9fdhE+2aiLpTbdQceFn+w65LkW+vfwc=)
                          4: soR2pwiyOc7dgIHXlwP-PMnXsm0.asa (hash: 5F0rJLaw/NXlRPUerx6WnmlN2zMQswFy06aLsh2Eurw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:00:08:02:42:2d:27:6a:05:43:98:d8:a4:5a:a4:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18f27c0c0b35ddd42bb892c16845a63b0027a1c7
        Validity
            Not Before: May 13 11:01:50 2026 GMT
            Not After : May 14 11:01:50 2026 GMT
        Subject: CN=87e4f33b1a429e1faebd8b23c55ce290405b37d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fc:0f:90:6b:cf:1a:e7:f3:8b:1f:d7:5a:4f:
                    9d:af:02:a5:e0:e7:6a:c1:7d:6d:9a:8a:7f:3e:fe:
                    cb:ab:69:48:32:bf:3c:4f:8c:01:9d:c4:80:ab:b4:
                    a6:13:c5:8f:ab:81:96:36:22:27:38:8a:02:46:58:
                    5e:37:f4:fd:22:bb:ab:88:eb:ff:42:a7:75:fd:aa:
                    e3:93:3d:d4:e7:5f:46:c8:56:1b:25:c8:84:ce:e5:
                    bc:c0:fe:0a:12:42:5d:1e:57:0e:1f:3d:11:fe:a5:
                    5c:56:c7:bf:90:99:c8:74:d5:e2:e9:a7:7f:c0:59:
                    c0:df:fb:45:ed:ce:16:92:ac:aa:90:7a:14:f2:80:
                    db:ea:3f:47:ca:fb:37:a7:f1:03:39:95:85:1a:04:
                    fa:b5:b6:20:89:7e:66:71:97:28:96:f4:39:86:eb:
                    6f:1b:eb:0a:95:7e:d7:53:02:4b:c1:7a:8e:5c:b7:
                    b2:bf:4b:a6:aa:5e:c8:4a:17:70:a4:00:20:1f:79:
                    b6:d1:0a:98:ca:a1:a7:77:14:ef:dc:f9:98:3c:42:
                    88:ff:62:77:08:5a:7e:c8:6d:d6:25:ce:6f:d3:ad:
                    e1:a8:b4:e8:b8:79:24:9a:80:bc:ed:cb:30:ec:ae:
                    1d:1a:b0:d6:31:45:40:af:11:1f:56:9b:47:c3:c8:
                    27:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E4:F3:3B:1A:42:9E:1F:AE:BD:8B:23:C5:5C:E2:90:40:5B:37:D2
            X509v3 Authority Key Identifier:
                keyid:18:F2:7C:0C:0B:35:DD:D4:2B:B8:92:C1:68:45:A6:3B:00:27:A1:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a4:10:08:dc:a4:c4:57:96:c5:a1:c3:c8:b9:60:a1:2c:98:
         6c:f5:3e:4f:68:c4:63:8d:9a:f0:74:f2:ff:d0:21:f0:fc:10:
         ec:f0:32:90:58:38:a1:8e:0b:a0:8d:a8:8a:82:bf:2f:ab:d5:
         79:d2:c3:a8:b5:8c:1c:c9:b9:04:39:40:a7:c4:80:39:3a:a2:
         ee:9d:57:16:c0:6a:dc:35:01:d5:2d:5b:12:3e:ab:ec:ff:5a:
         e6:c0:5b:23:af:a3:7f:6c:c7:1d:2a:b8:88:5d:45:99:02:6f:
         1a:13:03:02:42:cc:70:93:40:9c:cd:26:9c:2e:fb:e1:03:56:
         cb:cc:76:ff:ac:55:fd:4f:75:a0:4d:da:a5:76:23:67:ec:52:
         85:4c:fb:09:d1:36:d9:54:0e:74:d7:3b:35:cb:60:9a:74:0e:
         fc:89:44:41:25:98:f6:93:a5:a2:79:c2:29:54:cb:01:31:6f:
         b3:a9:a3:a3:8e:57:93:ea:12:56:85:2d:85:06:7f:0a:0f:67:
         66:f2:6c:0a:bb:27:2b:f6:a6:c2:be:ef:60:3f:72:ec:18:68:
         13:d9:43:61:7e:13:7b:37:e2:98:25:00:f3:ac:bd:41:d9:fe:
         19:4b:7c:1c:f2:21:2e:dd:9d:ad:c8:cc:91:fd:85:96:00:5e:
         20:b0:82:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:08:30 2026 by rpki-client