Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
File:                     GgEAlDqHCAKL5A1PpPKcmtnMVos.mft (raw, json)
Hash identifier:          LjEGKs7zCxBV/JjDwoEeZVfTtHSoVeTg3Ed7XPG4pGI=
Subject key identifier:   4D:7D:AE:7B:5E:7E:8C:02:DB:60:F4:12:F2:6A:BD:68:CD:5C:25:D5
Authority key identifier: 1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B
Certificate issuer:       /CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b
Certificate serial:       019EB6FC0621A7A565F832AB58E9847C35A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
Manifest number:          099A
Signing time:             Thu 11 Jun 2026 14:00:30 +0000
Manifest this update:     Thu 11 Jun 2026 14:00:30 +0000
Manifest next update:     Fri 12 Jun 2026 14:00:30 +0000
Files and hashes:         1: GgEAlDqHCAKL5A1PpPKcmtnMVos.crl (hash: O2XhZLot6AmP9qm92WomC/vkLNS0R7iI5s2wqrpLBR0=)
                          2: c-RKbXtHcflehkaW7_s-cfEhYzY.roa (hash: GHSgILgVbECkDEeWeGT0Z0WhcMXYxagSymWkAzUHFf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:fc:06:21:a7:a5:65:f8:32:ab:58:e9:84:7c:35:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b
        Validity
            Not Before: Jun 11 14:00:30 2026 GMT
            Not After : Jun 12 14:00:30 2026 GMT
        Subject: CN=4d7dae7b5e7e8c02db60f412f26abd68cd5c25d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:19:e2:57:73:25:a9:17:2c:72:07:cc:73:28:
                    3d:39:3c:87:97:e7:9b:b8:d3:6a:4d:1c:ff:2c:e2:
                    82:19:6c:3b:2c:db:9f:d7:4e:e2:6d:63:ba:41:71:
                    b6:41:cf:f3:30:d0:03:89:19:7b:8c:18:7f:63:b0:
                    4a:a8:9d:ff:fe:08:c5:00:9d:a5:d0:c1:26:d2:a0:
                    05:4d:2f:51:63:df:a4:28:2f:23:7b:78:17:59:e1:
                    d5:70:bc:76:14:ec:07:89:4b:ce:24:b6:3b:95:1f:
                    30:e7:6a:c9:7e:59:98:5b:ca:77:7c:c3:e5:9d:3f:
                    99:cf:73:19:b4:99:d5:49:10:b0:45:36:56:d6:07:
                    b4:24:e9:8d:85:23:2f:22:37:bf:0b:de:ea:b8:37:
                    95:40:a8:d0:bb:e5:da:04:33:20:be:7f:be:ee:dd:
                    38:17:81:fc:01:8e:89:46:20:ca:f0:48:a2:31:02:
                    af:4d:bc:9d:27:9b:91:fa:2f:8a:bf:91:65:e5:18:
                    f5:2b:1f:0d:51:1d:b2:d3:94:2a:8b:5a:c3:ce:e8:
                    db:0a:8c:24:03:bb:58:27:63:ca:46:6b:8a:96:75:
                    aa:bd:56:5e:f3:67:5c:e0:67:17:c2:09:60:24:d6:
                    53:12:0a:0f:25:a7:f6:9a:58:dc:2b:58:16:c6:d0:
                    cc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7D:AE:7B:5E:7E:8C:02:DB:60:F4:12:F2:6A:BD:68:CD:5C:25:D5
            X509v3 Authority Key Identifier:
                keyid:1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:42:09:ed:16:66:fb:a2:67:92:10:2a:2a:54:5f:42:7b:6c:
         fe:e5:4f:83:73:0e:fd:77:d0:bb:7e:d9:6f:33:cd:b7:ce:63:
         3e:9a:9c:77:92:97:5e:a7:ba:02:5e:6e:55:9a:2f:0e:7c:df:
         32:eb:57:a5:85:23:a6:7a:a9:09:6c:d9:15:74:a1:cc:e2:1d:
         d8:2e:70:79:24:67:9a:96:3f:5c:0e:22:15:87:bb:14:10:65:
         5f:53:db:b6:5e:c8:a5:05:91:54:db:93:a0:bd:21:77:a7:4c:
         dc:35:4c:82:d1:73:0d:77:07:94:3e:ad:cb:5a:0c:e6:81:79:
         3e:f2:94:e0:d4:dc:d4:70:b7:ed:7e:5a:74:9e:0e:11:5c:d0:
         9a:ee:d0:c7:34:bb:47:6e:34:07:3e:f6:69:fe:6c:fa:22:8a:
         4b:1d:b4:76:94:18:bd:ee:51:ef:cb:1d:72:0e:b6:3e:76:4e:
         ee:53:52:fe:e1:24:18:a5:62:ac:9b:31:21:9a:b7:2d:9a:df:
         dc:52:8b:ea:ad:6b:49:1f:03:e2:d2:a6:04:ad:82:1c:92:15:
         31:43:a4:bd:e1:21:bd:ed:29:23:02:52:56:03:37:b2:90:0d:
         a9:b0:60:bf:db:3c:b9:98:0a:5c:03:54:c8:8a:eb:a2:6b:aa:
         57:36:b7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:27:17 2026 by rpki-client