Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft
File:                     GW1YekBaGQSWYyGhDzmJtoZvXmM.mft (raw, json)
Hash identifier:          49wfFNVjZ48XoXEXaEHJcAgH5TDtV+D7NH5oqCBsH58=
Subject key identifier:   B5:10:DD:E6:7B:AF:23:2E:12:45:42:0E:09:88:FD:38:B2:DE:C6:F7
Authority key identifier: 19:6D:58:7A:40:5A:19:04:96:63:21:A1:0F:39:89:B6:86:6F:5E:63
Certificate issuer:       /CN=196d587a405a1904966321a10f3989b6866f5e63
Certificate serial:       019E905C36FD0726DA5D64234C534FE05744
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GW1YekBaGQSWYyGhDzmJtoZvXmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft
Manifest number:          0159
Signing time:             Thu 04 Jun 2026 02:00:22 +0000
Manifest this update:     Thu 04 Jun 2026 02:00:22 +0000
Manifest next update:     Fri 05 Jun 2026 02:00:22 +0000
Files and hashes:         1: GW1YekBaGQSWYyGhDzmJtoZvXmM.crl (hash: ntEvGKE9KFFPnvtZ8dXpYPvwEWFJHkZHRpIxjBdGYvI=)
                          2: cJYpXB_oLGSwXDizlOh5NTU415c.roa (hash: mZv4pxKg6JT+luM0hXV3CCOhtyIkDC3zPkMJ6EEFxgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GW1YekBaGQSWYyGhDzmJtoZvXmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:90:5c:36:fd:07:26:da:5d:64:23:4c:53:4f:e0:57:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196d587a405a1904966321a10f3989b6866f5e63
        Validity
            Not Before: Jun  4 02:00:22 2026 GMT
            Not After : Jun  5 02:00:22 2026 GMT
        Subject: CN=b510dde67baf232e1245420e0988fd38b2dec6f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4f:0f:14:d4:46:4e:e1:fc:a5:40:9f:87:2e:
                    18:7d:8c:6a:bb:a2:ef:98:f4:96:d8:cd:dc:90:e1:
                    33:63:c4:4b:bf:19:9d:29:21:85:90:14:9f:05:94:
                    07:56:36:e1:07:e5:da:39:25:20:3f:76:9b:cf:b2:
                    da:70:67:43:62:38:db:8d:3f:c5:d1:9b:f8:fb:5c:
                    45:72:41:91:b7:ae:48:51:8f:42:0e:55:fe:03:34:
                    d3:f5:a0:e1:4b:00:31:cb:6b:f6:2e:e4:e3:0a:1e:
                    5c:56:6c:7c:4a:c0:39:ac:0e:41:49:a9:18:bc:3d:
                    5b:7e:ca:b3:8a:3c:dd:03:05:12:68:68:99:13:8a:
                    81:ed:e0:2b:d9:2f:d5:30:38:03:18:e0:2e:d1:0e:
                    7f:00:7d:a1:44:8f:2f:b9:23:50:7b:ca:47:01:c7:
                    6d:28:25:62:1a:3e:33:6a:bc:8a:b4:f8:fe:5e:c1:
                    2b:bc:df:52:96:8a:bf:9d:f5:4e:0f:ff:e0:c1:7e:
                    37:c1:e8:2f:34:94:d3:03:02:3b:f0:7c:f7:b8:24:
                    61:48:a0:ee:6c:98:a3:b5:df:27:fb:b4:29:f7:d6:
                    d0:7b:a5:8f:17:fc:8d:9e:01:59:46:c9:47:21:c3:
                    03:b6:81:f8:49:0d:5b:f0:cd:90:e4:cd:a7:93:65:
                    eb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:10:DD:E6:7B:AF:23:2E:12:45:42:0E:09:88:FD:38:B2:DE:C6:F7
            X509v3 Authority Key Identifier:
                keyid:19:6D:58:7A:40:5A:19:04:96:63:21:A1:0F:39:89:B6:86:6F:5E:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GW1YekBaGQSWYyGhDzmJtoZvXmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8a9aa0-5c54-4484-a594-65e23e3ff9c8/1/GW1YekBaGQSWYyGhDzmJtoZvXmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:02:05:b2:0f:51:52:56:cf:c9:d6:1f:60:33:23:15:47:11:
         e1:6a:9f:94:9c:f6:46:a1:b6:8c:aa:99:ab:20:4e:b7:03:4b:
         6f:07:43:87:fe:17:97:f8:1b:8b:7e:30:f6:36:4d:1e:4c:4b:
         db:cc:84:12:5f:fb:3c:f4:94:4d:b7:cb:71:93:e5:5c:69:78:
         9a:8d:a1:1c:e4:3b:47:78:e0:e0:c6:57:71:63:bc:a3:c9:82:
         d1:b6:f4:83:04:11:1d:c6:44:0a:a7:95:48:ac:bc:cf:d8:bb:
         97:6b:64:9c:df:ad:67:d9:69:40:85:f4:6f:6a:8a:c8:95:8a:
         de:e3:7f:3c:41:0f:8e:12:90:bc:7c:24:aa:cb:2c:2f:3a:ee:
         c1:6d:88:bc:1a:01:79:0e:e4:23:64:97:23:19:c0:ff:3e:b1:
         ba:2c:2b:b3:52:7c:de:e5:f1:7c:cf:a4:43:a7:26:8c:8c:8b:
         a3:5a:d2:3a:df:65:ae:6c:e3:b6:89:84:73:5b:37:fe:bf:1c:
         17:b1:b9:11:73:06:12:08:c5:fb:eb:f4:2a:b5:6a:f0:1c:61:
         27:f3:b9:78:65:60:6d:e4:2e:62:2f:b5:33:95:e1:ec:58:06:
         d3:a1:8a:3b:08:46:89:60:e0:28:dc:76:1f:81:42:dc:a6:42:
         ed:74:dd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 04:18:47 2026 by rpki-client