Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
File:                     GYNgTwg-WMPNGdOUgLqq3zihm2M.mft (raw, json)
Hash identifier:          J5w3qtP20RcfjgOWBON13csXJDa9e4c7TJ0AG/PaTno=
Subject key identifier:   A5:F3:B6:C8:E2:E0:93:FD:DF:32:56:1D:21:37:F7:EF:02:05:5B:FF
Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
Certificate issuer:       /CN=1983604f083e58c3cd19d39480baaadf38a19b63
Certificate serial:       019F122E293A72E73BFEF3D8086760852003
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
Manifest number:          0C0F
Signing time:             Mon 29 Jun 2026 07:00:42 +0000
Manifest this update:     Mon 29 Jun 2026 07:00:42 +0000
Manifest next update:     Tue 30 Jun 2026 07:00:42 +0000
Files and hashes:         1: GYNgTwg-WMPNGdOUgLqq3zihm2M.crl (hash: 6x3ezRQicdyJklBg40stBSj65iKwPm3595mM2v9t2fw=)
                          2: oWw98f4bNM9LtIQxRub1EWETvac.roa (hash: aAOilAHbjhSIlksDdDQYiXq9fjYiWz1hB658OU9itjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:2e:29:3a:72:e7:3b:fe:f3:d8:08:67:60:85:20:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63
        Validity
            Not Before: Jun 29 07:00:42 2026 GMT
            Not After : Jun 30 07:00:42 2026 GMT
        Subject: CN=a5f3b6c8e2e093fddf32561d2137f7ef02055bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b8:be:9d:5a:12:9d:24:94:c1:f5:f1:b9:dc:
                    e4:55:24:af:9f:ac:12:bf:3d:49:cc:4a:bd:20:09:
                    53:17:0b:74:fc:40:bd:f8:d1:ef:d1:de:62:6a:90:
                    e5:88:b3:fc:7c:1d:19:ab:88:2e:96:66:e4:db:f7:
                    f9:9b:41:4b:56:2e:53:47:b8:a9:2c:51:89:59:34:
                    d2:43:b8:10:b4:9f:34:d3:73:55:e7:c2:6c:17:44:
                    d4:62:7e:21:67:87:6a:f8:fb:86:43:24:98:6f:3c:
                    dd:30:61:7b:1b:18:6d:a6:ad:2f:96:a0:2c:45:34:
                    b5:40:35:41:0a:65:60:e0:11:ce:74:7c:72:7a:91:
                    75:fa:02:4e:73:ce:48:42:2b:58:ce:e6:23:7d:0a:
                    91:36:58:a7:1e:bf:b1:1e:ea:78:84:6d:2f:39:b7:
                    52:03:8c:67:59:75:b9:2c:ba:3a:7a:cb:a9:13:7b:
                    5e:dc:4e:7d:3a:0a:b8:ec:63:f7:c2:16:59:47:bd:
                    7b:0a:b7:72:fd:c4:12:2d:08:c7:3a:d5:09:20:27:
                    ca:29:5c:fa:10:93:d6:08:34:0e:fe:6a:af:37:4c:
                    8d:a4:05:8b:56:8d:d1:99:81:79:47:5b:11:9d:ca:
                    c0:a0:7c:f9:b5:f4:3e:6c:57:a7:60:92:1a:1b:2e:
                    80:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F3:B6:C8:E2:E0:93:FD:DF:32:56:1D:21:37:F7:EF:02:05:5B:FF
            X509v3 Authority Key Identifier:
                keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d9:66:87:f0:48:af:25:ee:50:95:d6:8e:1f:7e:8d:a0:d8:
         32:84:9f:2a:44:b1:c9:91:41:60:86:ad:73:9f:b0:4d:9d:0f:
         94:50:68:e5:76:1e:d7:fb:05:fb:16:16:26:2c:b2:52:2a:3f:
         82:4c:a6:ff:0f:f8:6a:e9:6c:e1:4c:4a:51:c3:70:35:6e:45:
         c8:59:d0:12:ed:13:44:b4:1d:f8:b1:23:45:32:fc:59:06:26:
         f7:00:6b:76:09:af:02:19:d1:56:08:4c:09:d8:b9:93:d8:ea:
         72:e6:8a:e8:a7:15:98:67:be:84:75:17:32:4a:a9:f3:2c:d3:
         8a:5d:89:e6:7a:68:10:cd:a9:59:f4:80:5f:aa:81:8b:f3:b0:
         55:1c:52:67:0b:55:c4:d6:f7:71:70:02:0c:43:18:9a:5b:6b:
         b7:48:53:5c:0e:aa:5e:8f:e2:1e:7d:88:26:a7:b9:58:99:81:
         84:db:44:12:3c:0e:63:4c:aa:e4:1e:6b:08:33:1b:28:b6:a6:
         2f:d2:aa:be:a7:83:9d:d9:e1:32:b5:16:3b:fe:7f:41:c5:2f:
         b7:25:bc:c2:3d:2a:64:8d:67:e5:92:c8:f1:ae:3a:c0:b2:91:
         94:d7:f2:b5:4b:0b:21:19:bd:a0:81:bb:55:e8:c2:0d:ac:87:
         c7:53:13:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:35:22 2026 by rpki-client