Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/GXC73-TB270lU1siTtzNjL0Wy0s.mft
File:                     GXC73-TB270lU1siTtzNjL0Wy0s.mft (raw, json)
Hash identifier:          yGgZEPaLJgR+sWFIumqWpIKEri0mXno3Kd4o/5NDDoA=
Subject key identifier:   E1:56:F2:44:DE:AC:98:AC:34:F5:15:C4:5A:4F:4E:07:91:26:7D:72
Authority key identifier: 19:70:BB:DF:E4:C1:DB:BD:25:53:5B:22:4E:DC:CD:8C:BD:16:CB:4B
Certificate issuer:       /CN=1970bbdfe4c1dbbd25535b224edccd8cbd16cb4b
Certificate serial:       019E88A36FAA0372F68FB0428E54D714A743
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GXC73-TB270lU1siTtzNjL0Wy0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/GXC73-TB270lU1siTtzNjL0Wy0s.mft
Manifest number:          32
Signing time:             Tue 02 Jun 2026 14:01:12 +0000
Manifest this update:     Tue 02 Jun 2026 14:01:12 +0000
Manifest next update:     Wed 03 Jun 2026 14:01:12 +0000
Files and hashes:         1: GXC73-TB270lU1siTtzNjL0Wy0s.crl (hash: zCGOsNFqDUfDr3TKVMQQJeCvTj18n5HOItLETDLiwhM=)
                          2: pf2FwpKc7vnaaunQAa3wzyiNNX4.asa (hash: pibuNniDNE/2mZFRFWHKbypNyAWHCp21IacmhxVYowA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/GXC73-TB270lU1siTtzNjL0Wy0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/GXC73-TB270lU1siTtzNjL0Wy0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GXC73-TB270lU1siTtzNjL0Wy0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jun 2026 14:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:88:a3:6f:aa:03:72:f6:8f:b0:42:8e:54:d7:14:a7:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1970bbdfe4c1dbbd25535b224edccd8cbd16cb4b
        Validity
            Not Before: Jun  2 14:01:12 2026 GMT
            Not After : Jun  3 14:01:12 2026 GMT
        Subject: CN=e156f244deac98ac34f515c45a4f4e0791267d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4d:bc:26:78:cc:3f:d8:e7:17:75:5c:ae:74:
                    5d:f9:b7:86:f9:7f:4d:2a:ba:a9:cb:2e:62:4e:08:
                    c4:ed:b5:c8:af:f4:0c:cd:c5:18:16:ba:81:41:10:
                    ae:ff:f2:b1:9e:6b:7a:1c:95:d6:cc:cf:46:b9:63:
                    fd:42:83:42:1f:7d:ca:39:6d:aa:35:31:17:a7:1f:
                    0f:36:54:b3:59:66:c0:31:b2:77:a7:7c:7f:e8:a9:
                    78:fa:6c:f5:72:ef:12:46:31:ed:92:74:c5:71:95:
                    4c:5b:91:e7:30:e4:4d:05:34:29:15:ee:d5:a3:52:
                    1d:fa:fe:68:43:c5:53:c4:b8:88:34:1c:49:fe:63:
                    13:17:84:2d:65:08:a0:08:c3:71:6b:9c:88:4e:e1:
                    da:cb:c3:05:a2:d0:a5:4c:e1:a1:b1:80:89:fb:51:
                    16:09:28:8b:f4:6c:de:3d:62:a5:3a:47:14:fe:72:
                    27:a7:23:66:f0:7a:68:ac:16:d8:11:dd:f0:9d:43:
                    ef:1e:23:53:3a:89:22:50:75:ec:b1:7b:bc:c5:98:
                    19:03:1e:bb:6b:86:2f:ba:34:d1:76:f9:0a:2a:bb:
                    53:ad:93:3d:b6:b1:ff:2e:3c:37:14:6f:a7:44:be:
                    f8:50:04:a0:1c:ac:82:94:f5:1e:9e:d0:92:86:52:
                    35:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:56:F2:44:DE:AC:98:AC:34:F5:15:C4:5A:4F:4E:07:91:26:7D:72
            X509v3 Authority Key Identifier:
                keyid:19:70:BB:DF:E4:C1:DB:BD:25:53:5B:22:4E:DC:CD:8C:BD:16:CB:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXC73-TB270lU1siTtzNjL0Wy0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/GXC73-TB270lU1siTtzNjL0Wy0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b983c6-3d5c-41e3-8a12-e6feb6c278d9/1/GXC73-TB270lU1siTtzNjL0Wy0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:50:fc:b4:47:c7:0a:7f:5a:d2:0d:56:9d:97:d5:af:2c:ad:
         30:a7:65:2e:76:c0:5f:1e:fd:0c:03:e7:9e:c3:f5:83:0a:30:
         23:f7:72:a4:f0:ce:97:65:4f:de:f8:3c:e2:f5:77:c0:a5:95:
         b0:df:8f:b3:48:c9:33:f4:b6:17:7d:e1:8a:68:4a:8a:88:68:
         17:ae:f9:3c:14:2c:af:38:76:31:5a:78:03:12:af:56:85:5c:
         3a:06:5b:c3:f3:ee:60:a0:f6:d9:13:c7:6f:40:76:7b:34:bf:
         83:ca:99:f3:cf:f2:b4:b2:b4:1e:7e:78:66:90:da:fc:f6:0b:
         9c:b8:09:ba:cb:32:47:a8:ac:ca:00:46:5f:af:99:01:88:df:
         e8:f8:54:a2:51:b9:1d:7e:bc:58:51:34:83:cb:a4:88:6e:24:
         ba:54:e3:c3:35:ec:31:23:f7:a4:0d:c2:46:85:0a:18:bc:84:
         50:bd:d6:51:34:ca:1a:52:bb:af:a9:c5:5b:34:c9:9a:1d:bc:
         ac:01:df:34:8a:b8:d5:2d:ae:4e:84:bf:0a:21:cd:18:41:d2:
         22:e0:af:fb:fd:10:c6:96:15:a5:eb:29:7d:71:0e:98:5c:88:
         2f:79:6c:30:d5:a0:fb:a9:6a:40:eb:6a:9d:63:f8:e7:2a:75:
         62:d1:fe:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6Io2+qA3L2j7BCjlTXFKdDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NzBiYmRmZTRjMWRiYmQyNTUzNWIyMjRlZGNjZDhjYmQx
NmNiNGIwHhcNMjYwNjAyMTQwMTEyWhcNMjYwNjAzMTQwMTEyWjAzMTEwLwYDVQQD
EyhlMTU2ZjI0NGRlYWM5OGFjMzRmNTE1YzQ1YTRmNGUwNzkxMjY3ZDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE28JnjMP9jnF3VcrnRd+beG+X9N
Krqpyy5iTgjE7bXIr/QMzcUYFrqBQRCu//Kxnmt6HJXWzM9GuWP9QoNCH33KOW2q
NTEXpx8PNlSzWWbAMbJ3p3x/6Kl4+mz1cu8SRjHtknTFcZVMW5HnMORNBTQpFe7V
o1Id+v5oQ8VTxLiINBxJ/mMTF4QtZQigCMNxa5yITuHay8MFotClTOGhsYCJ+1EW
CSiL9GzePWKlOkcU/nInpyNm8HporBbYEd3wnUPvHiNTOokiUHXssXu8xZgZAx67
a4YvujTRdvkKKrtTrZM9trH/Ljw3FG+nRL74UASgHKyClPUentCShlI1JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFW8kTerJisNPUVxFpPTgeRJn1yMB8GA1UdIwQY
MBaAFBlwu9/kwdu9JVNbIk7czYy9FstLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1hDNzMtVEIyNzBsVTFzaVR0ek5qTDBXeTBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9iOTgzYzYtM2Q1Yy00MWUzLThhMTIt
ZTZmZWI2YzI3OGQ5LzEvR1hDNzMtVEIyNzBsVTFzaVR0ek5qTDBXeTBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9iOTgzYzYtM2Q1Yy00MWUzLThhMTItZTZmZWI2YzI3OGQ5
LzEvR1hDNzMtVEIyNzBsVTFzaVR0ek5qTDBXeTBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1D8tEfH
Cn9a0g1WnZfVryytMKdlLnbAXx79DAPnnsP1gwowI/dypPDOl2VP3vg84vV3wKWV
sN+Ps0jJM/S2F33himhKiohoF675PBQsrzh2MVp4AxKvVoVcOgZbw/PuYKD22RPH
b0B2ezS/g8qZ88/ytLK0Hn54ZpDa/PYLnLgJussyR6isygBGX6+ZAYjf6PhUolG5
HX68WFE0g8ukiG4kulTjwzXsMSP3pA3CRoUKGLyEUL3WUTTKGlK7r6nFWzTJmh28
rAHfNIq41S2uToS/CiHNGEHSIuCv+/0QxpYVpespfXEOmFyIL3lsMNWg+6lqQOtq
nWP45yp1YtH+6w==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:39:25 2026 by rpki-client