Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/94b590-c9c9-428d-98c5-62bc090c6c3c/1/GMvSaPW0_CLbvs7prlSJuUHePBQ.mft
File:                     GMvSaPW0_CLbvs7prlSJuUHePBQ.mft (raw, json)
Hash identifier:          UCZvnM1xc9gQwFs+BOGAuMH7/oqs2anjwuD4P78Js84=
Subject key identifier:   3D:2A:DA:5A:18:A1:11:13:C9:A7:FD:3D:2A:09:5E:87:BA:5A:CA:C7
Authority key identifier: 18:CB:D2:68:F5:B4:FC:22:DB:BE:CE:E9:AE:54:89:B9:41:DE:3C:14
Certificate issuer:       /CN=18cbd268f5b4fc22dbbecee9ae5489b941de3c14
Certificate serial:       019DD509BF306114346C2B95CB2A665DDA60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMvSaPW0_CLbvs7prlSJuUHePBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/94b590-c9c9-428d-98c5-62bc090c6c3c/1/GMvSaPW0_CLbvs7prlSJuUHePBQ.mft
Manifest number:          A3
Signing time:             Tue 28 Apr 2026 17:01:18 +0000
Manifest this update:     Tue 28 Apr 2026 17:01:18 +0000
Manifest next update:     Wed 29 Apr 2026 17:01:18 +0000
Files and hashes:         1: 2fuI5Yy1cnIVJxuM6LrXWuKqBTg.roa (hash: 0qvI3oLAIxzbhsWr2MHA6stfkpIaY0pi5dvdM8xacqk=)
                          2: GMvSaPW0_CLbvs7prlSJuUHePBQ.crl (hash: yEwOwguWM5pA8S+EwMxVSW4+01GZ4qHeB7KuJnsvVxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/94b590-c9c9-428d-98c5-62bc090c6c3c/1/GMvSaPW0_CLbvs7prlSJuUHePBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/94b590-c9c9-428d-98c5-62bc090c6c3c/1/GMvSaPW0_CLbvs7prlSJuUHePBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GMvSaPW0_CLbvs7prlSJuUHePBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Apr 2026 14:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d5:09:bf:30:61:14:34:6c:2b:95:cb:2a:66:5d:da:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18cbd268f5b4fc22dbbecee9ae5489b941de3c14
        Validity
            Not Before: Apr 28 17:01:18 2026 GMT
            Not After : Apr 29 17:01:18 2026 GMT
        Subject: CN=3d2ada5a18a11113c9a7fd3d2a095e87ba5acac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:a2:6b:d3:3e:28:9a:47:1b:1a:8f:41:2b:
                    d0:04:16:d2:49:05:e1:51:1b:96:ce:29:8e:15:c3:
                    93:e4:f3:14:23:23:dd:b4:b8:ac:df:70:ee:4f:9c:
                    d6:e8:8e:4d:e2:83:7f:f7:a4:0e:8e:90:b5:c7:65:
                    a4:27:f6:f7:81:35:ba:4f:c0:1a:61:25:ba:37:12:
                    74:89:89:0e:eb:e1:25:52:22:9e:59:f8:86:45:a2:
                    28:83:56:0c:fd:07:1c:b8:7b:18:38:a6:23:cb:52:
                    56:ec:ab:ee:ec:9a:1b:3f:5f:51:09:02:31:0f:85:
                    6d:f8:06:50:0d:a2:77:20:48:e6:42:f0:a8:e1:3e:
                    72:57:94:ce:99:65:c4:e8:15:f4:ba:1e:13:f4:62:
                    79:2c:fd:0b:10:0f:8c:de:18:06:e5:3b:f4:66:1b:
                    ae:d0:c3:64:7a:89:1e:23:5c:66:92:76:69:f6:44:
                    27:43:4b:2a:07:71:5d:26:13:b2:5f:ff:b7:eb:6a:
                    06:4d:42:4b:36:46:1e:78:92:82:1a:e0:ae:76:6f:
                    8e:2c:30:96:57:9c:ad:72:97:f2:99:55:d6:50:1d:
                    23:b1:3b:b3:bb:0e:e2:e8:6e:ae:1d:cb:a6:18:33:
                    85:db:b9:3a:de:40:90:d7:7c:08:70:f1:9b:44:79:
                    57:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2A:DA:5A:18:A1:11:13:C9:A7:FD:3D:2A:09:5E:87:BA:5A:CA:C7
            X509v3 Authority Key Identifier:
                keyid:18:CB:D2:68:F5:B4:FC:22:DB:BE:CE:E9:AE:54:89:B9:41:DE:3C:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMvSaPW0_CLbvs7prlSJuUHePBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/94b590-c9c9-428d-98c5-62bc090c6c3c/1/GMvSaPW0_CLbvs7prlSJuUHePBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/94b590-c9c9-428d-98c5-62bc090c6c3c/1/GMvSaPW0_CLbvs7prlSJuUHePBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:68:c6:ff:b8:00:a6:7e:36:b3:39:08:64:9b:78:fb:30:4e:
         93:4e:ca:19:e2:53:0e:c7:57:c9:54:c0:da:d6:8d:60:98:f3:
         48:6d:e3:df:65:08:e0:f7:35:45:bd:de:15:11:02:3a:c7:ad:
         0a:2e:e3:db:3f:97:cf:fa:6c:51:44:7e:31:4a:b3:c9:2b:a8:
         59:c7:ce:c5:47:b2:5c:e2:34:fe:94:3f:bf:80:fb:10:8d:44:
         0f:66:af:4e:f4:54:0c:5a:85:37:43:56:53:fb:03:b5:b3:b4:
         53:35:4d:6f:95:29:22:0e:be:eb:ab:c5:64:4a:74:58:a8:b1:
         20:e2:02:ff:1d:df:a9:c7:81:67:93:6a:48:b1:63:b6:9b:7e:
         1b:43:e7:ac:a2:53:50:ec:6d:f3:d4:e2:ee:9d:10:12:3a:fa:
         0b:51:20:09:74:e3:f1:cd:9f:9f:a7:24:db:51:a6:fb:79:f4:
         3d:1c:d5:5e:42:f9:97:90:df:10:96:b6:37:41:bf:cd:59:dc:
         8a:77:58:9c:45:73:a9:1e:14:85:b4:78:f3:8f:60:62:66:42:
         d4:44:a4:f1:01:86:8b:57:02:df:5c:d4:f6:ea:57:b1:25:be:
         e1:d1:fe:b3:83:a6:59:71:fd:b8:b9:79:ef:91:40:f7:a0:e7:
         b5:d3:39:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 00:02:48 2026 by rpki-client