Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
File:                     gLWnciaEnxty0GO-Y4mX-wnK21E.mft (raw, json)
Hash identifier:          p8kkZrkHrv6jlMoxW4hV3JH1ZUV7ykedU0Jpldn6d6A=
Subject key identifier:   91:DA:FD:51:91:D0:06:17:EA:E0:97:05:AF:B9:A8:7C:E2:0F:47:87
Authority key identifier: 80:B5:A7:72:26:84:9F:1B:72:D0:63:BE:63:89:97:FB:09:CA:DB:51
Certificate issuer:       /CN=80b5a77226849f1b72d063be638997fb09cadb51
Certificate serial:       019EB9FD5E62A4047E7333FC5CBEF8C44293
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
Manifest number:          63
Signing time:             Fri 12 Jun 2026 04:00:50 +0000
Manifest this update:     Fri 12 Jun 2026 04:00:50 +0000
Manifest next update:     Sat 13 Jun 2026 04:00:50 +0000
Files and hashes:         1: gLWnciaEnxty0GO-Y4mX-wnK21E.crl (hash: k15AnQMe/FCX3sU41sJghpEQV7Rup1Ez/9q5riTrv0k=)
                          2: nTAeOQ1yfLeE7UobuYd95qQsnDc.roa (hash: MGx/T2ybNPO76ocB/JBxy+Dt6X73selrSnb5nBMcig0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 04:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:fd:5e:62:a4:04:7e:73:33:fc:5c:be:f8:c4:42:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80b5a77226849f1b72d063be638997fb09cadb51
        Validity
            Not Before: Jun 12 04:00:50 2026 GMT
            Not After : Jun 13 04:00:50 2026 GMT
        Subject: CN=91dafd5191d00617eae09705afb9a87ce20f4787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c9:9d:e5:c6:ba:91:aa:39:b1:2d:13:97:d4:
                    e6:ad:cb:fd:24:ae:8d:17:db:9e:fb:49:8d:b2:0f:
                    62:32:d5:01:e5:99:2b:65:8e:e7:5b:14:d5:80:be:
                    a2:b0:dc:5f:ce:8e:93:c2:16:0f:c6:4e:c6:f3:98:
                    17:d5:d9:0c:22:57:31:64:39:da:81:99:60:2d:26:
                    8d:97:39:90:f7:b3:62:d2:1a:85:3a:27:32:da:7a:
                    0f:99:10:28:68:82:3e:75:cd:47:ea:fc:2c:10:7a:
                    b3:65:7f:13:0e:01:0c:ef:86:19:6e:eb:eb:70:4d:
                    3e:d5:8a:ff:b0:2e:cd:b0:90:62:79:e7:0d:07:7d:
                    44:f6:ae:3c:b0:42:4a:56:a1:05:04:ed:ac:7d:e5:
                    8f:e6:9a:30:d3:33:4e:bb:b3:17:ac:8b:9f:84:b5:
                    4e:32:e6:cb:82:11:f1:f5:56:c1:87:79:cf:3d:29:
                    85:7e:28:5f:bc:b6:62:46:3a:7d:7c:d4:4c:16:8a:
                    2d:79:1a:ae:93:02:4e:86:4a:b8:61:a4:be:89:90:
                    55:a7:39:f5:9a:10:58:34:4e:04:6d:5b:8a:c5:d5:
                    c9:1c:b5:69:31:69:14:7d:78:f3:1f:af:3c:f6:1d:
                    1d:7c:0f:33:71:bc:6b:a7:f1:f9:40:e4:84:4c:20:
                    78:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DA:FD:51:91:D0:06:17:EA:E0:97:05:AF:B9:A8:7C:E2:0F:47:87
            X509v3 Authority Key Identifier:
                keyid:80:B5:A7:72:26:84:9F:1B:72:D0:63:BE:63:89:97:FB:09:CA:DB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d2:4e:ff:05:3e:2a:28:91:03:eb:af:5d:7d:81:67:4c:f2:
         9b:73:9f:04:72:4c:f7:50:73:52:23:a6:72:17:7a:ab:9a:8c:
         7a:7d:42:ca:39:71:4e:d2:b7:80:d7:a3:12:68:aa:32:cf:c1:
         0b:d2:87:65:02:73:18:72:f5:25:ec:e8:1d:38:f6:5b:c1:28:
         3d:e0:e6:d9:3c:c1:9e:52:7b:1b:e8:ff:ba:62:20:f8:75:df:
         70:0d:32:82:7d:44:53:a5:da:6a:03:2a:fa:c5:32:0d:80:21:
         62:71:f0:0a:e4:68:e5:62:27:74:d5:68:25:17:9e:e5:0c:7b:
         a7:63:26:ed:41:65:f0:9f:eb:c3:dd:6d:26:e7:e6:b1:e7:a6:
         1e:68:4c:ea:cd:ba:93:be:9f:d1:98:74:5a:ea:07:37:fc:b7:
         44:bb:8d:a8:cd:c2:68:ab:65:c4:d0:52:40:b9:d5:55:eb:19:
         18:95:7e:e8:7c:52:96:7e:18:cf:59:20:e2:fb:5c:24:a9:3f:
         47:31:f6:e3:13:38:cd:b2:86:d9:d6:f2:77:df:9d:69:23:f3:
         02:80:16:e0:f8:d2:71:2d:1a:af:f1:5b:92:3d:50:0d:aa:cd:
         c1:37:65:61:70:bc:d8:f1:47:ed:cf:b0:f4:b1:59:e8:a3:11:
         c9:00:ad:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:41:34 2026 by rpki-client