Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
File:                     gV_CISVyYlbWo189oo91E90xwf4.mft (raw, json)
Hash identifier:          RsySS7OSrY+iJJLyBa4f1kNPstxeecWUjO8dA3I+RHA=
Subject key identifier:   8E:40:B0:47:2F:32:DD:1A:D8:E9:8B:1A:A6:4D:41:38:25:5B:ED:87
Authority key identifier: 81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE
Certificate issuer:       /CN=815fc22125726256d6a35f3da28f7513dd31c1fe
Certificate serial:       019EB6FC74A59E73098B5C69A30CD60B2551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
Manifest number:          18E6
Signing time:             Thu 11 Jun 2026 14:00:58 +0000
Manifest this update:     Thu 11 Jun 2026 14:00:58 +0000
Manifest next update:     Fri 12 Jun 2026 14:00:58 +0000
Files and hashes:         1: gV_CISVyYlbWo189oo91E90xwf4.crl (hash: WMmLC1kizG4ioktBl+YEzex5Af/p8DQCDiKghL2W6U4=)
                          2: lYK_65AKlFPw1-t6tjg4pQYtXHY.roa (hash: VCWprxMwmjsHW4IsRUv/igV1kqqp3MMJUQXFePAz+0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:fc:74:a5:9e:73:09:8b:5c:69:a3:0c:d6:0b:25:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815fc22125726256d6a35f3da28f7513dd31c1fe
        Validity
            Not Before: Jun 11 14:00:58 2026 GMT
            Not After : Jun 12 14:00:58 2026 GMT
        Subject: CN=8e40b0472f32dd1ad8e98b1aa64d4138255bed87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b6:80:9f:03:dc:27:0d:6f:a9:70:55:b7:56:
                    7d:06:f6:6d:e4:81:c1:5a:8b:83:51:98:1a:ca:de:
                    77:12:b6:c8:04:18:d1:eb:e3:9b:24:4d:44:22:62:
                    f9:eb:04:fd:3c:ac:37:6b:c2:b9:b2:4c:ee:26:df:
                    1f:ba:7a:0f:d4:86:df:0b:12:76:30:1c:b8:a2:7a:
                    e6:f5:eb:8d:cd:73:2a:62:c2:09:8e:1b:a8:97:94:
                    01:55:fc:9d:cb:88:16:f5:d7:ef:00:6d:04:26:91:
                    be:62:b1:87:3a:d1:b9:84:38:96:97:c8:d6:4d:48:
                    ec:78:32:4e:3d:1e:43:30:eb:54:7f:b5:63:a8:a5:
                    3a:02:fb:71:bc:3c:b9:2f:bd:51:c7:4e:50:e1:ae:
                    3f:a0:0c:0c:a6:b2:a1:81:a9:be:1a:00:e2:49:f2:
                    c8:fb:10:db:da:4b:e7:4d:f3:f7:25:61:9f:08:b4:
                    d1:0a:ec:06:6e:3d:a1:06:0f:44:54:69:8d:8c:ff:
                    63:b7:75:6c:04:eb:44:8a:4b:9c:31:3e:7d:14:b3:
                    17:32:5b:c4:97:cf:66:98:92:6d:97:a9:c0:a2:99:
                    30:94:7b:e1:ea:37:78:27:5f:05:9e:19:c0:5c:e5:
                    a9:6d:a2:51:0c:85:a3:9b:bf:42:88:79:f2:54:c2:
                    93:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:40:B0:47:2F:32:DD:1A:D8:E9:8B:1A:A6:4D:41:38:25:5B:ED:87
            X509v3 Authority Key Identifier:
                keyid:81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a8:80:52:5b:09:bd:96:be:a6:a1:cc:83:7a:3b:a4:b9:df:
         c6:2c:99:f8:e9:0c:2f:48:80:8a:ee:05:dc:95:b8:00:33:d5:
         27:85:2f:1e:72:ac:73:9e:20:2a:45:7d:60:ad:3f:8c:87:14:
         3e:90:39:c1:c2:79:1f:3b:37:5e:39:9c:a3:1d:1e:87:82:e1:
         7d:03:3a:c2:e6:8c:bf:a7:93:fb:1b:4b:41:f9:87:ee:db:a2:
         cf:46:3f:4e:03:61:1f:0c:e1:a2:f9:93:6e:e5:ff:87:08:60:
         b5:4f:fa:ef:b7:fe:dc:c9:df:6a:93:76:df:16:4a:98:df:5a:
         9d:03:01:b4:31:78:93:12:9a:27:29:5a:3c:33:1c:95:21:91:
         0a:4c:3c:a8:59:b8:c1:c1:d6:66:e5:43:7b:02:9d:f3:82:7b:
         48:dd:ee:b4:7d:70:02:4e:76:49:bb:1c:07:53:68:0a:98:a7:
         4c:cc:61:4f:86:c9:57:d1:20:35:e5:4d:8f:f6:b5:c2:e9:a4:
         69:08:c8:8d:0c:4f:23:93:12:af:a5:5b:16:8b:e4:49:ba:4e:
         3d:25:40:6e:87:1b:40:dd:e2:b5:9f:a8:6f:67:bd:8c:0a:fa:
         11:e5:38:8c:99:1a:86:b8:0a:47:92:e5:2e:28:82:e6:59:97:
         c1:0e:e0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:54:18 2026 by rpki-client