Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
File:                     GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft (raw, json)
Hash identifier:          YhDheTrb1YtYFwvRJJZ88xdfbIGkUvrxuInrJc+piQM=
Subject key identifier:   81:0B:17:E1:75:22:CF:C6:45:D8:40:5D:35:6C:ED:85:5C:E7:7D:AF
Authority key identifier: 18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70
Certificate issuer:       /CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70
Certificate serial:       019EB6C50B5C74A52FA785BC9D1CEFDF0D5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
Manifest number:          1625
Signing time:             Thu 11 Jun 2026 13:00:27 +0000
Manifest this update:     Thu 11 Jun 2026 13:00:27 +0000
Manifest next update:     Fri 12 Jun 2026 13:00:27 +0000
Files and hashes:         1: GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl (hash: w/rZyEar+JNu7MpXznzup/jAYEFq7CNjy26SjJnE+lY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:c5:0b:5c:74:a5:2f:a7:85:bc:9d:1c:ef:df:0d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70
        Validity
            Not Before: Jun 11 13:00:27 2026 GMT
            Not After : Jun 12 13:00:27 2026 GMT
        Subject: CN=810b17e17522cfc645d8405d356ced855ce77daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e8:ec:ff:52:b6:9a:84:e4:d5:c6:67:a5:e8:
                    1c:44:01:88:93:1f:2a:87:fc:b9:d0:0f:da:f7:0a:
                    ea:e1:f7:1c:4a:65:8b:1d:77:71:62:bd:b4:cc:e8:
                    f9:57:28:f7:98:85:5e:0f:ee:8e:b5:4a:6c:5a:27:
                    17:97:ea:c7:ee:0a:c5:db:ef:7a:73:1b:85:97:90:
                    38:9b:96:6b:57:ee:2d:00:dc:9c:c9:98:ac:ea:03:
                    a6:7f:8e:53:f5:23:e7:bc:91:de:16:44:54:eb:89:
                    bd:d4:ad:47:b5:9b:fb:fe:dc:0d:aa:08:c0:e4:6c:
                    1e:2e:e1:3e:10:2a:27:7a:77:6c:a1:69:48:bb:8c:
                    dc:b3:19:69:30:01:88:75:9b:4b:1f:4d:e4:c4:a4:
                    cb:cf:97:bf:6b:f7:94:a4:00:e1:f9:b4:6c:98:28:
                    f4:d8:21:41:70:df:a7:6d:f6:a5:fc:b9:0b:9d:f8:
                    6f:fe:a6:21:c9:04:9c:a0:53:4a:b2:15:76:8b:fd:
                    64:6a:11:33:ba:fe:d9:04:a7:77:ce:32:45:5f:6d:
                    41:0c:5c:ec:5a:4d:12:46:4e:e6:0d:3f:ff:70:4b:
                    d0:f6:d7:9a:3d:8e:dc:f8:74:d5:98:b9:64:e8:b9:
                    0c:25:d2:27:9e:8a:0e:66:10:44:25:de:60:16:62:
                    9d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0B:17:E1:75:22:CF:C6:45:D8:40:5D:35:6C:ED:85:5C:E7:7D:AF
            X509v3 Authority Key Identifier:
                keyid:18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:3d:27:7c:f3:11:eb:25:ab:53:57:d1:ed:26:e0:e4:1d:1d:
         61:a9:a7:7c:6c:f9:4e:92:94:c2:1a:9a:ef:bf:a1:e6:8d:ca:
         d6:86:5d:27:30:35:94:40:d6:fb:95:3b:7f:cc:6c:00:57:d4:
         a0:23:e2:c1:1d:02:fe:64:c5:74:2b:e2:4d:7e:03:a6:7a:de:
         62:a5:b1:66:6e:42:26:27:0a:2b:4b:cc:cf:59:f4:81:04:dc:
         ce:24:a6:ec:97:80:49:44:7e:f5:5c:c2:bc:3e:87:89:28:c6:
         a9:60:fd:11:94:9a:50:95:b0:75:9d:aa:42:4b:73:ff:5a:3d:
         f9:65:05:ad:47:92:58:74:f9:67:9c:d6:75:9c:df:d7:a7:19:
         a7:ef:34:0b:5d:7e:07:1a:9f:ef:d6:d7:0c:3b:2c:8b:00:e7:
         db:e3:87:c1:c3:c3:28:8d:84:c3:c3:e9:d3:40:ff:1c:5f:dc:
         97:99:24:08:25:b0:26:71:d5:06:c3:6c:46:25:60:fb:00:a6:
         76:c6:a7:ee:a6:41:00:88:06:17:30:81:b9:55:78:34:1d:cb:
         5c:2d:6f:af:19:8e:db:dc:bd:1f:dc:b1:f7:b7:08:c7:65:c0:
         72:ee:4b:32:cc:ce:91:23:2e:da:be:ef:ff:93:69:02:20:b9:
         53:b2:30:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:26:50 2026 by rpki-client