Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
File:                     GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft (raw, json)
Hash identifier:          7tgc8gPy5sYtq5891RAnEoqAxZ+JzMjrluUNZ/Ctymk=
Subject key identifier:   E9:4E:09:B8:1A:71:BF:47:C2:1C:C3:D8:95:AD:C2:1D:9A:8C:59:21
Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
Certificate issuer:       /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Certificate serial:       019EB5E96123524D1FDE61622AA30BE0213B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
Manifest number:          110C
Signing time:             Thu 11 Jun 2026 09:00:31 +0000
Manifest this update:     Thu 11 Jun 2026 09:00:31 +0000
Manifest next update:     Fri 12 Jun 2026 09:00:31 +0000
Files and hashes:         1: 1-w__FgVbYGEvZzX5G7Wv6WpQMFc.roa (hash: YyyT93IM4vslKyEiZRnugviu0gDWs5kVRFPzXEYy/e4=)
                          2: GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl (hash: eASMzY0yAt/NkiaEjwRDDWRpi6khS9Q0WTxXXqSzCHg=)
                          3: Sy_QSnV4oKxcnxQ4UaY7HAFaAQY.roa (hash: mPfUVg1yW0xKUezEUlUR8Yt63tdbh4K/MBcEri0pjgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 09:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b5:e9:61:23:52:4d:1f:de:61:62:2a:a3:0b:e0:21:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
        Validity
            Not Before: Jun 11 09:00:31 2026 GMT
            Not After : Jun 12 09:00:31 2026 GMT
        Subject: CN=e94e09b81a71bf47c21cc3d895adc21d9a8c5921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b6:a7:a3:04:af:1d:9f:cf:43:0c:8b:f2:ef:
                    29:11:cc:e2:00:44:8f:8c:2e:33:c1:a7:b0:75:98:
                    29:4d:f5:d5:52:6b:4a:0e:59:c0:a3:19:ab:93:b1:
                    8d:ad:fa:37:16:d0:c9:84:c7:e3:1b:df:69:c4:06:
                    93:5e:4f:20:20:ac:5c:6a:87:04:81:70:84:ae:1e:
                    69:8b:57:f3:41:e6:28:d0:cc:c9:43:2d:2a:11:8a:
                    57:8b:a4:f0:b3:16:37:b5:4e:0e:2c:e3:42:08:0e:
                    ed:a9:fc:39:39:8d:db:be:8a:e4:2f:4b:e5:a6:50:
                    61:7f:5f:1f:09:24:9f:e2:59:6c:c1:d8:69:c3:56:
                    ff:3d:e2:d5:19:4c:21:4e:a3:6c:0f:20:36:6a:bb:
                    22:41:aa:e3:49:12:1d:32:3b:49:ac:de:12:f6:3b:
                    1d:a4:a1:f5:8a:00:4b:9b:9c:cb:df:00:8a:08:c1:
                    f6:9f:f8:26:f6:fd:19:31:63:ba:85:ac:68:07:cd:
                    da:8e:27:7f:72:bb:58:cb:c4:c8:bd:67:d4:43:ef:
                    24:5d:fb:1f:b7:3f:03:aa:41:02:ef:a0:68:bf:ab:
                    6f:17:f2:96:4b:ae:8f:72:95:c0:3c:9f:15:49:d9:
                    61:c9:71:d6:9b:17:b2:b7:92:03:bc:bc:f4:ed:be:
                    0e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4E:09:B8:1A:71:BF:47:C2:1C:C3:D8:95:AD:C2:1D:9A:8C:59:21
            X509v3 Authority Key Identifier:
                keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:9a:ad:38:c0:5d:b7:d3:84:69:47:15:d3:13:a0:3d:c4:92:
         ca:4b:0e:3d:fa:f7:e6:45:75:23:47:52:c8:e7:5a:3a:7d:1e:
         7f:0f:42:16:7f:e6:de:06:40:55:cd:fe:0d:b1:15:91:0e:de:
         3b:d5:ea:6f:f1:c8:c9:79:60:ea:b1:c4:97:b6:0d:65:86:4f:
         df:13:66:19:86:b7:f3:83:96:2d:7f:06:3f:47:9e:93:24:7d:
         6a:fd:47:fb:fe:40:b8:38:a6:2d:ec:85:37:ff:44:46:c4:25:
         49:09:1e:56:66:15:9a:22:15:1b:64:cf:05:8a:8e:95:59:0c:
         39:01:50:1f:f0:d6:49:b5:11:80:ad:63:6b:77:ad:b7:04:4c:
         a5:af:b3:cb:72:8a:8d:b5:8f:5a:02:e4:d1:2b:67:5a:71:83:
         18:82:1d:fd:fc:e7:98:d6:0d:92:47:f8:75:79:2a:c2:76:a5:
         c1:cc:01:ae:8a:e9:ac:00:b7:ab:80:5d:75:25:9d:ec:73:68:
         0d:83:d6:76:c6:b0:16:96:bc:c2:f5:76:35:12:7d:8b:87:81:
         3c:63:c8:d9:26:9f:04:ba:c5:23:e4:4b:5c:68:e0:8a:a5:fb:
         4f:e8:c1:3f:af:65:6b:b2:15:f9:58:3a:dc:56:8a:75:7c:b5:
         c9:c6:98:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:41 2026 by rpki-client