Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.mft
File:                     GbiQW6xTUBxccgHgYY3w9F8RSnU.mft (raw, json)
Hash identifier:          ojCAlkn60FE+podceBZQeouAKhbw7eNF52IBXUn2bs0=
Subject key identifier:   3B:9D:EF:D2:44:F8:B2:36:E5:CE:CA:59:7F:CA:8E:B2:0F:41:80:81
Authority key identifier: 19:B8:90:5B:AC:53:50:1C:5C:72:01:E0:61:8D:F0:F4:5F:11:4A:75
Certificate issuer:       /CN=19b8905bac53501c5c7201e0618df0f45f114a75
Certificate serial:       019E9D066638D4DEB9AC2B365762AA4385A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbiQW6xTUBxccgHgYY3w9F8RSnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.mft
Manifest number:          8E
Signing time:             Sat 06 Jun 2026 13:01:42 +0000
Manifest this update:     Sat 06 Jun 2026 13:01:42 +0000
Manifest next update:     Sun 07 Jun 2026 13:01:42 +0000
Files and hashes:         1: 48mZdI5GwAnLSURvpyliOOqttMQ.roa (hash: 31skaXcRsPZrgu8cTQ5ajy3MoKvly3qp6UXzeLtlo7w=)
                          2: GbiQW6xTUBxccgHgYY3w9F8RSnU.crl (hash: uZNivxhMDrTvQkw2lW/UdVwIXZCr11t8+wmBX2jM9ec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbiQW6xTUBxccgHgYY3w9F8RSnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 12:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9d:06:66:38:d4:de:b9:ac:2b:36:57:62:aa:43:85:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b8905bac53501c5c7201e0618df0f45f114a75
        Validity
            Not Before: Jun  6 13:01:42 2026 GMT
            Not After : Jun  7 13:01:42 2026 GMT
        Subject: CN=3b9defd244f8b236e5ceca597fca8eb20f418081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:79:8c:b6:2e:75:17:8f:13:8b:8f:42:4e:5b:
                    89:76:e9:54:b6:ea:d7:54:e2:6d:e5:88:5c:4b:b2:
                    1b:9b:7c:77:29:97:21:ad:d3:3d:bf:f5:ab:f4:76:
                    27:11:33:5b:69:e1:18:65:f6:42:02:45:9d:04:36:
                    d3:ee:fa:b8:76:0f:61:49:ca:ff:04:eb:63:b0:79:
                    4a:33:f3:ed:25:7b:7f:e7:c0:c8:d3:6d:03:4f:d0:
                    e1:b4:49:11:1c:a2:ec:8c:cd:c4:35:81:f2:98:15:
                    61:34:6f:b9:7a:e5:0e:b6:26:a4:da:ac:f2:88:aa:
                    df:2f:6a:38:05:e4:94:69:03:04:25:d1:19:1b:ab:
                    66:5b:89:94:70:7f:a1:43:a3:32:a0:c5:32:08:8c:
                    3b:70:26:a4:34:21:1c:26:30:5a:26:11:6c:6d:31:
                    92:7e:32:b7:d2:00:73:72:33:c4:e0:6a:86:bb:c6:
                    2a:a2:8b:9a:77:30:7b:dd:cd:6e:a1:3e:42:5a:90:
                    cf:6e:0f:30:a8:ae:38:8e:3b:4c:ad:d6:81:26:a0:
                    2d:71:9b:b9:54:2d:de:3b:ab:13:c2:b3:73:12:3e:
                    36:5c:b6:fb:6e:2f:97:40:80:e9:67:67:f9:1b:12:
                    ed:6f:1e:d3:c5:9b:8e:d4:9d:7f:2f:a5:a0:6c:3c:
                    dd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9D:EF:D2:44:F8:B2:36:E5:CE:CA:59:7F:CA:8E:B2:0F:41:80:81
            X509v3 Authority Key Identifier:
                keyid:19:B8:90:5B:AC:53:50:1C:5C:72:01:E0:61:8D:F0:F4:5F:11:4A:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbiQW6xTUBxccgHgYY3w9F8RSnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:aa:41:0e:33:00:86:be:4b:04:0c:a0:9c:49:a5:85:c4:21:
         0f:84:52:88:61:19:4b:41:2a:9a:37:43:2f:f0:bb:79:94:05:
         8e:89:67:ed:0e:f1:b2:85:8a:9f:00:d5:a2:67:3f:f4:da:a3:
         b2:80:10:24:f9:b3:94:33:47:35:e5:86:1c:8b:8a:57:15:39:
         08:ce:2d:6c:ff:7b:cd:0f:a0:dc:42:a4:be:6c:cf:9e:71:51:
         1a:eb:fc:16:dd:af:3b:88:46:f5:4b:ab:79:84:8b:8c:ab:f3:
         24:75:1a:40:c1:e4:37:c9:96:1e:51:7b:0e:79:2b:ef:ef:ab:
         c0:1a:06:7b:d3:71:3e:ef:17:11:4a:5f:75:51:fd:dd:8e:33:
         14:53:42:63:2a:1f:07:85:ff:cb:c2:e0:ae:17:f6:aa:f1:4c:
         fd:b4:04:c2:fd:f2:9f:f9:8f:85:76:05:89:2a:e2:1f:da:84:
         8f:44:f0:59:04:c5:f7:23:af:05:93:93:71:c5:a7:f0:08:e0:
         a9:8e:0d:21:8e:ed:67:05:16:51:f0:a2:8a:a1:cb:aa:17:50:
         69:c6:20:ee:25:05:e7:4a:95:20:04:f2:b5:12:26:97:6c:2d:
         a8:53:a7:0f:52:66:38:ab:c2:62:f9:b2:46:cb:06:cd:07:f0:
         62:c0:cd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:57:47 2026 by rpki-client