Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
File:                     gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft (raw, json)
Hash identifier:          1WoNEaV0VdJ1eI5tzGgx+4kY+2e6IzxBuI3PGZ1NH+A=
Subject key identifier:   D7:57:BA:9C:1D:9B:B6:0E:17:75:43:B5:00:52:58:D6:CE:32:29:5C
Authority key identifier: 80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E
Certificate issuer:       /CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
Certificate serial:       019E31F302E12EFBC1782A9ED20A7E577DB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
Manifest number:          0824
Signing time:             Sat 16 May 2026 18:01:09 +0000
Manifest this update:     Sat 16 May 2026 18:01:09 +0000
Manifest next update:     Sun 17 May 2026 18:01:09 +0000
Files and hashes:         1: 6_jxkWbS4mo_dqKSpUzPD-or2bk.roa (hash: oZKz7hjKw33KEtnhKq1VS8pa2G32Hvyj9HFGHRr0tYo=)
                          2: gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl (hash: jP2OkQhS2Q/nDrXbzKfwAV74XNNjB1Th9SIkb6LAC28=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:f3:02:e1:2e:fb:c1:78:2a:9e:d2:0a:7e:57:7d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
        Validity
            Not Before: May 16 18:01:09 2026 GMT
            Not After : May 17 18:01:09 2026 GMT
        Subject: CN=d757ba9c1d9bb60e177543b5005258d6ce32295c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6c:57:7e:b6:3b:02:0c:4a:b9:6f:06:14:14:
                    29:4c:fa:26:c8:e3:8a:f6:36:1e:73:36:44:45:d2:
                    b0:c1:c1:a3:f5:b7:f4:5a:39:fd:b2:84:69:e6:3b:
                    0e:c8:0f:bd:95:ed:e7:a7:05:b3:3f:66:96:76:3e:
                    f1:a5:25:42:2a:31:54:d6:3d:3b:57:06:db:8f:a7:
                    d6:98:18:77:d2:4d:ce:ac:ce:9c:fc:f3:83:e6:6e:
                    0b:d4:93:1d:07:39:29:53:3b:9e:1d:48:5f:09:70:
                    65:36:ae:35:e5:87:2f:2e:ac:f0:ba:df:c2:3d:c6:
                    fd:91:19:00:47:89:fc:df:34:e5:cd:8b:da:2a:3a:
                    04:f6:89:60:d5:f0:a4:13:90:b0:92:b9:ed:93:b2:
                    a0:fd:bc:2b:d0:92:6d:a8:fc:dd:34:67:01:e2:87:
                    7f:7f:e0:90:c9:d2:d2:2e:d1:18:7e:5b:bb:a7:b3:
                    c2:97:16:b4:06:eb:1d:6d:6f:57:47:1a:98:fb:fb:
                    c4:0e:c3:83:6f:8f:46:1d:b5:ae:ab:91:ca:f6:ca:
                    6a:62:3b:4f:ca:a7:c7:80:d4:75:de:1a:c3:0b:cc:
                    a7:bd:54:0b:c2:4c:db:4d:2a:15:a0:fd:6a:cb:77:
                    16:c8:14:59:d4:9e:2d:a2:bf:74:7f:24:0b:4d:f1:
                    96:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:57:BA:9C:1D:9B:B6:0E:17:75:43:B5:00:52:58:D6:CE:32:29:5C
            X509v3 Authority Key Identifier:
                keyid:80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:f0:bc:e6:9f:2b:d7:16:0c:06:af:5f:9e:6d:60:8b:2d:1b:
         15:24:6a:6d:b4:25:29:14:21:3f:da:80:3f:22:9a:b4:7e:b7:
         18:6a:94:ad:6b:7d:b3:c6:31:2f:60:15:94:9c:ad:bb:5b:34:
         e5:4a:f1:7b:74:04:3b:60:5a:fd:01:6c:9a:a6:2f:f8:f4:47:
         47:35:07:0b:93:58:e2:1f:61:fa:42:37:c6:c5:49:89:21:7c:
         31:e3:58:7f:a2:79:fd:2e:53:57:11:2b:63:31:94:52:43:94:
         9e:b2:19:95:e8:63:5d:ce:f4:5f:24:6d:af:23:1e:0a:ce:50:
         2b:60:95:03:97:b6:fd:34:bd:24:18:47:b3:ca:04:16:1f:67:
         e5:d0:d8:f7:f5:22:29:b5:ba:49:9c:c6:00:fe:03:2f:65:4d:
         c1:77:84:d0:95:ab:cc:cd:42:89:5f:58:14:88:32:ed:0d:d4:
         a8:ec:f6:96:4e:41:7d:bd:a7:97:d1:04:f9:57:9a:49:8e:13:
         9f:b3:28:f9:46:b9:57:3c:3a:43:1a:e5:15:a6:6a:37:0b:c1:
         25:36:d0:53:fd:d1:31:a6:e6:26:49:76:f7:0f:dc:4f:54:cd:
         d2:e9:b9:4d:03:90:59:6d:eb:f8:96:bf:44:cd:c7:8d:50:b7:
         82:c9:1f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:27:55 2026 by rpki-client