Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
File:                     GYC7us-p483M9sDpNTYaerJ9oU0.mft (raw, json)
Hash identifier:          2k5RqQFgEvWxLVbD1drAlgSnExtz1KGW1gngkZrrVTI=
Subject key identifier:   FD:F9:20:1A:37:30:BB:3B:FD:F7:BB:A0:B2:62:3B:22:D6:62:FC:8E
Authority key identifier: 19:80:BB:BA:CF:A9:E3:CD:CC:F6:C0:E9:35:36:1A:7A:B2:7D:A1:4D
Certificate issuer:       /CN=1980bbbacfa9e3cdccf6c0e935361a7ab27da14d
Certificate serial:       019EB80EF54E45B6B74EFE9806548181FD9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
Manifest number:          1955
Signing time:             Thu 11 Jun 2026 19:00:48 +0000
Manifest this update:     Thu 11 Jun 2026 19:00:48 +0000
Manifest next update:     Fri 12 Jun 2026 19:00:48 +0000
Files and hashes:         1: GAgJEyeBQbINpePHsf9a-ETdBEo.roa (hash: jmElPeGw1Mnqm5X5HlhE2ARHbPrOTNT0EBsgbwDnsnA=)
                          2: GYC7us-p483M9sDpNTYaerJ9oU0.crl (hash: qqkpTqZvSLTEidMfFPH4sicLqcmgzFEYWmkekagQI5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0e:f5:4e:45:b6:b7:4e:fe:98:06:54:81:81:fd:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1980bbbacfa9e3cdccf6c0e935361a7ab27da14d
        Validity
            Not Before: Jun 11 19:00:48 2026 GMT
            Not After : Jun 12 19:00:48 2026 GMT
        Subject: CN=fdf9201a3730bb3bfdf7bba0b2623b22d662fc8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ff:88:75:1d:17:17:c2:d8:5a:cc:3d:c5:f9:
                    8f:c0:4c:f1:bc:16:4d:63:26:2d:32:88:0c:05:26:
                    e0:15:cc:22:06:44:23:3d:f3:90:7c:49:e8:17:1a:
                    15:9f:8d:f8:fc:1e:7a:5f:6e:6d:03:54:29:f1:2c:
                    0b:08:1e:16:e2:05:cc:db:1e:e1:4f:f0:c7:6e:1c:
                    d0:1f:a3:92:4c:6d:af:f7:88:4d:07:51:77:1f:81:
                    dd:97:34:f5:f2:af:fb:17:4f:22:f2:8d:54:f8:1d:
                    2e:d8:26:ab:d7:29:12:83:7f:3e:58:76:ee:2e:8a:
                    4f:b4:0f:94:83:7e:6c:af:15:53:de:a9:bb:1a:12:
                    95:04:cb:7f:a3:ee:59:f3:76:28:3d:37:c8:de:e3:
                    6f:81:1f:ff:ef:a9:40:9b:ac:f3:d4:06:dc:36:09:
                    c4:38:cf:d3:04:00:b2:28:ec:2b:ff:25:b2:1f:83:
                    75:13:01:57:ed:38:d1:aa:a2:6f:9d:45:77:29:c2:
                    70:48:85:3e:3e:9f:18:c9:9b:0b:ca:08:df:9c:42:
                    7e:39:dd:94:3a:60:29:89:c1:06:ea:4d:9f:19:1f:
                    2a:56:dd:c1:ba:a2:c6:55:1e:45:ab:1f:d9:0e:50:
                    a6:e1:66:09:7b:35:e4:84:6f:0e:a6:b0:22:e2:05:
                    70:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F9:20:1A:37:30:BB:3B:FD:F7:BB:A0:B2:62:3B:22:D6:62:FC:8E
            X509v3 Authority Key Identifier:
                keyid:19:80:BB:BA:CF:A9:E3:CD:CC:F6:C0:E9:35:36:1A:7A:B2:7D:A1:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:50:79:c0:9c:cd:e5:62:d5:ac:4c:02:12:e9:96:a1:f9:ac:
         59:6d:91:e9:42:b0:32:bc:fe:0f:78:07:b4:4c:fc:01:fd:92:
         92:26:4a:18:ea:1c:74:b8:e0:df:29:44:d2:17:7b:46:1f:3f:
         d9:11:55:d6:52:1b:e0:75:44:de:f2:f9:87:f6:8b:1c:94:83:
         33:a8:bc:e1:61:d7:a4:85:e2:ab:ab:a6:a9:4e:85:b6:84:a5:
         58:54:cf:ff:ee:f4:b7:32:bd:e5:25:1c:40:71:de:f6:75:f2:
         8d:ca:8e:8f:77:2c:d9:cd:3f:3f:7b:f2:dc:1a:f7:a5:cd:42:
         ac:53:e5:e8:dd:9e:de:f3:52:9f:d6:97:af:d1:74:5d:60:7e:
         34:70:57:9d:f6:c7:d1:b5:36:ba:36:af:55:a9:be:18:67:c7:
         48:48:c8:3a:e3:1e:5e:44:e6:0e:a4:6c:6e:b9:a9:20:41:da:
         16:89:46:d7:d4:a2:5d:ec:d7:95:bd:ec:0f:de:24:27:47:59:
         c1:13:2d:bc:8b:12:a7:68:52:a8:fc:d8:1e:62:de:0f:8e:38:
         51:fd:4f:46:b7:cd:ac:bc:fb:eb:2f:84:1b:4b:cc:44:e1:89:
         d1:e9:97:31:9d:08:5c:4e:14:ee:66:c9:d2:52:45:63:7f:20:
         16:7f:0e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:59:13 2026 by rpki-client