Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
File:                     GbsyomYvkFwNi_JH7ODbxnmha4Q.mft (raw, json)
Hash identifier:          wkEDjbqxYISscyhbKc1J/tUX7lmpBeg31RMQs+/YE0M=
Subject key identifier:   9B:CC:EC:74:0A:C5:F7:83:CC:CF:FA:EF:88:39:D6:A8:F6:64:1F:10
Authority key identifier: 19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84
Certificate issuer:       /CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84
Certificate serial:       019DDD3112BF5AAD563590B83FD24942F0D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
Manifest number:          0605
Signing time:             Thu 30 Apr 2026 07:01:13 +0000
Manifest this update:     Thu 30 Apr 2026 07:01:13 +0000
Manifest next update:     Fri 01 May 2026 07:01:13 +0000
Files and hashes:         1: GbsyomYvkFwNi_JH7ODbxnmha4Q.crl (hash: uzk5V5KzfI2lA0nG8CtF0XTAfuXom7GtkCRkacbmQ2Y=)
                          2: Ip5f-rtoZ2VJ7SiwM6fpe8-kxhs.roa (hash: VpZtyINbjieT/4qcJpty0j6h8djbUlkDrnIQP/pseyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:dd:31:12:bf:5a:ad:56:35:90:b8:3f:d2:49:42:f0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84
        Validity
            Not Before: Apr 30 07:01:13 2026 GMT
            Not After : May  1 07:01:13 2026 GMT
        Subject: CN=9bccec740ac5f783cccffaef8839d6a8f6641f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a8:57:2c:e3:1a:dc:dd:2b:5a:ad:01:58:e1:
                    bb:44:1a:4a:d2:52:02:1f:1a:99:96:f3:64:97:35:
                    bd:e4:75:6c:f0:0d:af:55:32:55:f1:9b:b4:b2:ef:
                    da:db:9f:0b:4c:07:8a:ec:08:3c:ec:00:b1:11:73:
                    72:68:bb:94:65:17:9b:62:36:8a:fd:52:0b:1b:b3:
                    64:b3:16:4c:72:1b:d5:5f:4f:3f:36:13:d1:6a:96:
                    ec:63:ac:6e:98:11:e0:8d:43:6c:30:95:79:c7:d8:
                    26:81:45:4e:f7:24:d4:f7:06:16:02:74:f8:62:56:
                    25:4b:34:c9:74:1a:22:72:a4:07:79:c5:9c:cd:bd:
                    19:57:8d:a8:19:d4:87:c6:e6:68:2a:f1:0d:1e:f4:
                    6d:15:a3:86:1b:85:ef:a9:82:5b:67:f6:92:4d:7a:
                    67:b8:8d:0d:04:d3:3b:4f:7a:d2:0a:da:24:1d:02:
                    28:97:27:ac:1c:20:bc:0f:6c:13:08:00:b0:21:e2:
                    3b:eb:36:67:93:76:b3:69:48:c1:2e:86:55:2c:30:
                    81:8d:35:dd:c7:dd:ca:03:53:e4:ad:e8:87:2e:39:
                    df:3c:06:f3:c3:1e:0a:ec:69:44:37:14:be:89:c3:
                    1d:e1:d6:7e:d6:fc:94:eb:0f:83:20:a6:44:1f:5f:
                    c4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CC:EC:74:0A:C5:F7:83:CC:CF:FA:EF:88:39:D6:A8:F6:64:1F:10
            X509v3 Authority Key Identifier:
                keyid:19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:8c:84:5e:5f:27:d1:34:d7:b0:00:3f:59:58:9d:a2:2f:cc:
         82:37:9a:6f:e7:d3:53:f3:6e:95:d0:0e:d8:e9:7a:b8:b6:06:
         f8:3c:73:f7:4c:97:2e:06:07:1d:dd:89:09:10:c5:3f:ad:eb:
         56:2c:50:8b:04:44:30:75:58:2f:ad:0d:4b:14:e5:0d:d6:c0:
         04:4c:a7:9e:d1:3e:73:b0:19:32:a4:0f:d0:c5:0f:43:fc:37:
         fa:b5:26:35:51:7a:cc:33:57:ac:95:26:4b:7d:3e:fa:69:05:
         9d:48:2a:6c:35:ad:f6:b5:30:a4:d0:64:f9:e5:5f:61:c6:58:
         ff:e8:55:26:a2:03:ee:b6:c1:03:3d:87:76:23:23:06:b5:50:
         f8:0d:12:33:bd:b3:d2:70:d1:59:b9:2a:c7:6a:d0:d5:05:4d:
         f4:b0:ee:dc:a1:51:3d:57:98:9a:20:c5:fe:db:06:f3:1a:04:
         b7:27:53:91:6b:f6:b8:36:51:68:77:a3:5e:81:29:eb:ca:ac:
         a2:ad:53:33:69:c2:54:aa:83:ae:bb:ff:af:ec:27:d0:06:e6:
         60:58:d9:7a:a1:02:d9:5a:ae:e0:e8:ab:37:6f:d0:a0:ac:6f:
         c4:38:9b:e4:8f:22:3a:83:53:ac:83:e6:06:75:5a:e9:ca:48:
         cb:41:a8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:47:57 2026 by rpki-client