Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
File:                     gcGu10qtBrG4XFumd5wWH0pSs8Q.mft (raw, json)
Hash identifier:          pvTioRDZOOetDLdz0oICjhq3JqRBJb7ABE9KQLfIiTw=
Subject key identifier:   42:2F:66:88:BE:1C:F0:C7:42:68:D6:1A:BA:C9:74:3F:55:42:68:5C
Authority key identifier: 81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4
Certificate issuer:       /CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
Certificate serial:       019EB6FC2B39C1215BA170B343F8B96BD87C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
Manifest number:          1956
Signing time:             Thu 11 Jun 2026 14:00:39 +0000
Manifest this update:     Thu 11 Jun 2026 14:00:39 +0000
Manifest next update:     Fri 12 Jun 2026 14:00:39 +0000
Files and hashes:         1: gcGu10qtBrG4XFumd5wWH0pSs8Q.crl (hash: qij6PrvmmPRKu2ANhJT3dm7rx8Kg3EIIPkbtjrBeOtU=)
                          2: pA1ePqI7SD5ojrPp_XCatoiq2zo.roa (hash: CAWXsP1JZ/KW0NUUE6ss0n5HsqgH1Gk+g+22Bws1Rqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:fc:2b:39:c1:21:5b:a1:70:b3:43:f8:b9:6b:d8:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
        Validity
            Not Before: Jun 11 14:00:39 2026 GMT
            Not After : Jun 12 14:00:39 2026 GMT
        Subject: CN=422f6688be1cf0c74268d61abac9743f5542685c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:95:6d:49:ca:87:bc:ac:93:1e:15:19:75:3f:
                    8d:21:0a:50:a5:16:6d:bf:85:5a:93:45:83:3c:5d:
                    1f:16:0f:06:74:8f:a5:73:9e:a7:83:e5:f3:ea:60:
                    63:a8:7b:48:89:44:3b:8a:4e:6f:ba:5d:db:67:19:
                    d6:ad:ad:7f:d7:03:94:25:19:06:fc:96:92:f4:d6:
                    a6:cf:a3:90:84:7b:49:f6:fc:83:ee:b6:32:9b:48:
                    e9:71:43:b4:4e:da:f9:64:f2:d2:70:e2:b2:6f:a2:
                    ec:07:00:ec:22:9e:4c:7f:df:79:6a:5d:e4:67:9d:
                    72:ad:82:d8:31:1d:de:21:19:e7:9e:8d:46:c8:e5:
                    be:69:2e:a1:cc:95:20:24:63:41:a7:a0:fc:c7:5d:
                    89:2d:9b:de:99:2f:9f:58:e5:63:b6:1c:11:17:7a:
                    f1:54:53:9d:ca:f8:fe:bc:d6:62:11:96:b9:2d:46:
                    39:57:e5:7f:24:bb:e5:df:e0:30:fe:b2:72:47:f4:
                    ee:40:b6:dd:16:dc:73:57:45:fa:e8:09:c1:72:84:
                    ca:db:ab:e8:87:f7:5b:66:30:65:74:9f:1c:47:97:
                    75:a3:fc:9d:59:5a:ca:b1:e5:9a:f6:2d:f0:49:e9:
                    3b:0f:fb:9c:13:6d:82:a5:df:c5:f1:cf:a8:f0:eb:
                    ff:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2F:66:88:BE:1C:F0:C7:42:68:D6:1A:BA:C9:74:3F:55:42:68:5C
            X509v3 Authority Key Identifier:
                keyid:81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f2:c5:ba:64:67:12:9e:98:ff:f1:1b:40:fc:9b:73:bc:41:
         65:0b:02:e1:c0:6b:72:b4:cb:1d:4e:4a:ad:3b:bb:52:43:97:
         58:96:4f:e6:f2:a5:eb:7c:bc:b7:17:e7:10:bd:c0:de:6d:86:
         56:15:cb:73:30:67:28:4b:31:90:28:24:7a:b6:d8:78:d1:13:
         10:a1:70:e6:14:22:7a:d8:fa:4b:55:4c:9e:c1:46:29:3b:a0:
         c9:37:96:ae:4d:1a:c5:81:29:bf:20:ec:8e:c0:c5:48:59:77:
         5f:77:8a:c1:ce:5d:bf:72:9c:96:4c:83:20:5c:83:c0:7c:0e:
         7a:d2:bd:3c:78:75:d3:c1:c6:02:1d:2f:d8:ab:ca:e0:c9:3e:
         56:12:ff:9f:0b:f3:ad:4a:44:16:de:06:ac:55:5d:e0:f4:d9:
         7a:58:58:05:c4:a1:e4:a4:1f:11:75:f6:f4:89:dd:d1:0e:23:
         e6:64:6f:9a:ea:a3:26:9f:6c:1d:79:b2:60:ba:02:fd:10:b3:
         17:7c:86:c1:d5:a4:40:22:78:ac:15:3d:40:66:8e:3e:97:5f:
         24:3b:7c:86:8f:97:ac:7b:0c:18:3a:ac:94:3b:87:4e:32:ae:
         7b:53:53:d2:4e:2a:20:95:b8:e6:96:b5:06:0d:e5:0c:fe:bc:
         82:54:63:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:40:50 2026 by rpki-client