Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft
File:                     gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft (raw, json)
Hash identifier:          cehHDMxnifYLYtCbsNvrv+uMmZOb1q33Qyeu/GDJ5kE=
Subject key identifier:   3C:16:BE:3D:AD:B1:7C:79:4E:CF:2F:B5:AF:4D:91:23:CB:50:BA:11
Authority key identifier: 82:F0:8F:26:3C:37:45:9B:5F:D6:FC:06:FD:9F:0E:5F:6D:62:27:59
Certificate issuer:       /CN=82f08f263c37459b5fd6fc06fd9f0e5f6d622759
Certificate serial:       019EB6FBE92A56AB456F40A9CF2900D3F3BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft
Manifest number:          1959
Signing time:             Thu 11 Jun 2026 14:00:22 +0000
Manifest this update:     Thu 11 Jun 2026 14:00:22 +0000
Manifest next update:     Fri 12 Jun 2026 14:00:22 +0000
Files and hashes:         1: ZdWh-3a_kbKPG_RUVdao6c2TLrM.roa (hash: DLbAphqaTRDgJkVVSI04I7CCD0VoHbCq4Vo+MxDnvU4=)
                          2: gvCPJjw3RZtf1vwG_Z8OX21iJ1k.crl (hash: tOQ6VNfc85E8uzaBQHs433rB+E3POeHNKkijRDsTp/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:fb:e9:2a:56:ab:45:6f:40:a9:cf:29:00:d3:f3:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82f08f263c37459b5fd6fc06fd9f0e5f6d622759
        Validity
            Not Before: Jun 11 14:00:22 2026 GMT
            Not After : Jun 12 14:00:22 2026 GMT
        Subject: CN=3c16be3dadb17c794ecf2fb5af4d9123cb50ba11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5d:ba:20:eb:da:c7:bf:da:4f:ba:db:c6:53:
                    6a:b0:16:06:98:1c:b4:76:36:ec:f0:64:22:e1:47:
                    63:72:d4:62:a1:14:63:a8:33:f7:81:8d:9b:d6:24:
                    d1:c6:9e:22:a2:b6:06:fe:8c:13:04:f7:0a:e4:de:
                    51:b5:d4:81:68:55:31:87:1f:9e:3f:b0:af:be:a5:
                    ac:86:30:43:ee:63:b5:fe:9e:37:f0:cd:f8:b2:56:
                    57:d0:42:07:99:df:0e:8d:ba:fd:7c:75:b4:df:35:
                    11:51:e1:9b:70:93:1f:fe:26:f9:db:ba:95:6e:76:
                    ee:be:31:9c:2e:1d:83:24:ea:cc:79:d8:59:78:69:
                    51:d6:fb:af:53:48:ef:03:9b:e0:c0:d2:00:6a:03:
                    87:88:95:6c:15:7a:63:99:46:44:bb:59:d8:72:7e:
                    00:6c:69:54:0a:c1:41:95:18:54:5b:11:dc:9c:4f:
                    eb:e9:fa:e8:c9:8b:02:6b:7a:91:99:a6:ea:fd:e0:
                    12:37:01:28:7c:f5:ec:3e:53:2e:62:c8:5d:84:29:
                    c9:50:89:7b:3a:23:2b:78:2c:9a:1b:fd:2d:bc:3f:
                    43:47:89:ee:75:b5:7e:43:57:75:00:56:9f:a4:df:
                    71:24:df:c2:e4:c7:f3:65:67:e3:df:03:89:89:d3:
                    43:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:16:BE:3D:AD:B1:7C:79:4E:CF:2F:B5:AF:4D:91:23:CB:50:BA:11
            X509v3 Authority Key Identifier:
                keyid:82:F0:8F:26:3C:37:45:9B:5F:D6:FC:06:FD:9F:0E:5F:6D:62:27:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:a6:e7:21:36:a3:50:39:42:c3:78:a7:1f:d7:cc:11:1f:a7:
         e5:ee:a4:f1:68:f6:4f:aa:b4:79:e9:4a:28:82:c7:00:53:8f:
         62:8b:aa:03:0a:29:66:26:7f:31:e1:69:a0:78:fd:ca:64:51:
         e9:57:93:a6:c0:33:e7:59:8f:71:35:32:79:a1:ed:4d:69:ad:
         4e:62:fb:a5:d4:27:30:aa:31:de:3c:df:3b:4c:b4:47:a3:80:
         e1:99:cc:25:09:fd:ba:f9:61:e3:b0:cf:20:38:a8:a5:4c:6f:
         81:b3:3f:1a:08:40:d9:d0:b1:29:e2:76:40:d1:8e:e0:62:85:
         45:93:16:ac:b4:db:22:5c:2a:4c:60:73:17:77:62:ab:80:dc:
         5e:17:92:22:de:ba:e4:2b:cb:f1:58:09:87:c4:c7:19:a1:ae:
         4e:97:18:6d:d6:a1:e3:57:db:84:d9:b6:ba:0e:f7:74:fb:63:
         5f:0c:e6:d4:fb:3b:2e:ca:47:11:de:62:ad:6d:83:6a:1a:bf:
         79:21:d5:8e:09:68:fe:47:fb:d5:91:c1:31:fc:d5:3d:24:46:
         d0:e3:53:c2:a3:42:16:2e:63:c8:db:42:f0:18:1c:03:40:bc:
         0d:a6:46:cb:e5:00:8d:59:da:08:b8:49:de:a2:0c:81:13:1d:
         98:43:2d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:40 2026 by rpki-client