Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
File:                     GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft (raw, json)
Hash identifier:          6iq/eZeGTi0jfdo+4p6eWzxoIDHBh3IaqBJR/t7pPRk=
Subject key identifier:   4E:64:03:2E:F8:1C:3F:D1:32:96:39:F4:A3:33:3D:53:88:2B:B4:CC
Authority key identifier: 19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91
Certificate issuer:       /CN=194e32a82e98f22d939ff9984455813be2ba6a91
Certificate serial:       019E8F136E3E503DC72AFA5E2AA41218F023
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
Manifest number:          045F
Signing time:             Wed 03 Jun 2026 20:01:15 +0000
Manifest this update:     Wed 03 Jun 2026 20:01:15 +0000
Manifest next update:     Thu 04 Jun 2026 20:01:15 +0000
Files and hashes:         1: BZBAahTREA8Q_3coOvyfGf9sdjY.roa (hash: jde/2VQaoII8kUESbj5JRDjPMDFmOdYKULZBf+Xi1JA=)
                          2: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl (hash: ZCC8ScCM35WrDxOtkK4ZLUEbGi8gw0eBRsTG0o7dH8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 15:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8f:13:6e:3e:50:3d:c7:2a:fa:5e:2a:a4:12:18:f0:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194e32a82e98f22d939ff9984455813be2ba6a91
        Validity
            Not Before: Jun  3 20:01:15 2026 GMT
            Not After : Jun  4 20:01:15 2026 GMT
        Subject: CN=4e64032ef81c3fd1329639f4a3333d53882bb4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c6:33:7a:7f:61:05:06:82:20:ad:c4:8a:0e:
                    74:70:13:7a:33:03:c1:a7:3d:8c:af:5c:5a:c2:06:
                    3d:ba:75:c9:f5:72:0f:67:c8:65:69:e6:41:20:06:
                    01:44:f8:11:fb:38:4c:4a:30:67:2a:b8:22:8b:80:
                    af:85:f9:40:56:97:2d:2c:06:91:bb:9b:be:45:5f:
                    e3:cb:63:c9:d7:66:a2:f2:23:be:71:88:ee:5b:a5:
                    26:71:54:a7:e0:9d:c1:30:31:e9:99:c7:51:ac:56:
                    fd:1c:14:a6:36:cd:48:74:c2:b8:4f:0f:c2:12:7a:
                    d0:30:61:ab:d7:31:82:44:b2:23:93:dd:ee:09:6f:
                    ba:e0:eb:c6:0d:c6:54:b3:05:aa:03:03:de:86:7c:
                    be:11:b0:76:2f:8d:1e:c8:7c:de:be:c4:ca:1c:37:
                    52:e6:48:d4:10:0c:ed:df:37:37:1b:e8:64:96:89:
                    16:a1:e1:0b:f0:87:98:d1:b2:89:71:34:d8:bf:ce:
                    b4:eb:b3:98:10:5d:ef:63:81:8f:4d:bb:e2:d9:8a:
                    1d:ab:aa:9c:58:d5:39:be:d0:f1:3d:02:74:c9:80:
                    1e:69:ba:cc:48:36:0f:0a:4f:93:27:da:42:a5:fa:
                    3c:16:4b:c2:60:07:d5:97:09:34:dd:f8:bb:e4:65:
                    0b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:64:03:2E:F8:1C:3F:D1:32:96:39:F4:A3:33:3D:53:88:2B:B4:CC
            X509v3 Authority Key Identifier:
                keyid:19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b9:a1:95:bb:6e:05:b3:57:db:23:26:4b:26:e5:86:af:69:
         7a:ca:da:6e:6f:38:14:04:c5:3b:79:06:36:e8:56:e4:a2:22:
         9c:83:ab:a7:fa:27:e9:44:ce:97:be:8e:68:47:3f:6e:5e:48:
         37:7d:33:fe:70:c2:e5:d0:9f:34:25:cd:ce:fd:7c:5a:9e:d0:
         9d:fb:ba:f0:96:a7:e8:da:75:26:14:d2:62:19:51:57:ae:c1:
         51:a8:09:93:73:28:0f:74:c6:32:ba:1b:ae:96:6a:bb:e4:3b:
         6d:21:90:30:e0:53:4f:9a:1c:1d:e7:ac:a8:03:db:fc:11:54:
         b9:ae:11:f0:8c:87:4a:0b:f8:f2:1d:d4:eb:db:35:d2:1c:a2:
         77:a6:87:a2:f4:9c:01:0f:82:da:fc:db:c3:f7:e8:ad:11:98:
         df:9d:37:c7:c5:2a:c3:48:fe:87:32:e2:99:92:09:58:a5:52:
         a3:2f:f6:51:c6:64:28:75:26:61:ab:a0:07:7e:3f:ae:75:62:
         cb:f3:0b:ac:f4:70:d9:43:9d:1a:7e:e5:32:46:7a:d4:f7:45:
         7a:16:70:e5:24:fc:9a:af:2c:ca:76:14:d4:ca:22:7f:37:d4:
         61:52:c5:f8:4f:df:e6:d2:a9:04:3e:d4:08:2a:c1:90:65:a1:
         b0:f0:01:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 00:06:54 2026 by rpki-client