Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft
File:                     gynJE4dY3-i6EjXuDsfZtlifSyc.mft (raw, json)
Hash identifier:          dar0YqaJUjDnUCHoHrrfcse0slaKVXhxRC0z6T83C7w=
Subject key identifier:   01:28:13:D7:8E:4A:B8:DD:0C:CE:D2:D4:9D:DF:7A:8E:BF:87:0C:66
Authority key identifier: 83:29:C9:13:87:58:DF:E8:BA:12:35:EE:0E:C7:D9:B6:58:9F:4B:27
Certificate issuer:       /CN=8329c9138758dfe8ba1235ee0ec7d9b6589f4b27
Certificate serial:       019EB98FB8D91A605012C7472FFE8F33A447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft
Manifest number:          0941
Signing time:             Fri 12 Jun 2026 02:01:04 +0000
Manifest this update:     Fri 12 Jun 2026 02:01:04 +0000
Manifest next update:     Sat 13 Jun 2026 02:01:04 +0000
Files and hashes:         1: PYRVlO-jN4cauhkJtjiu69BHf7g.roa (hash: KzLhCQkDAQ9keU3NpLY3q6k73UjDZ8YfyF1YN3DhJDg=)
                          2: gynJE4dY3-i6EjXuDsfZtlifSyc.crl (hash: V1Jn3EN9N5uruUC53yQjdnnKAHHx6gqOSRHtdBM50GM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:b8:d9:1a:60:50:12:c7:47:2f:fe:8f:33:a4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8329c9138758dfe8ba1235ee0ec7d9b6589f4b27
        Validity
            Not Before: Jun 12 02:01:04 2026 GMT
            Not After : Jun 13 02:01:04 2026 GMT
        Subject: CN=012813d78e4ab8dd0cced2d49ddf7a8ebf870c66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c9:28:4d:f2:e4:7d:7f:a9:83:81:ba:60:b0:
                    ec:52:56:d9:6c:ea:7d:e1:fb:b9:8c:3e:7d:99:48:
                    6d:aa:f7:e5:c1:3b:f9:a1:d8:55:19:de:5e:18:36:
                    12:c9:8e:be:ae:95:55:bf:d8:6c:37:34:07:a6:44:
                    77:ee:7f:95:8d:ef:df:53:19:c4:bf:43:d3:f4:3d:
                    86:de:9c:89:d4:50:cc:f2:bc:58:71:28:2b:70:f1:
                    69:0b:8d:e6:7f:2f:9d:97:b3:ee:d4:ce:e9:10:43:
                    82:0f:4b:8a:9b:75:87:0b:28:ef:69:ce:13:f0:f9:
                    eb:d1:db:5a:5d:23:fe:07:17:06:f3:dc:2b:a4:8c:
                    bc:4d:0a:3b:3d:64:5b:d2:2f:e0:d9:ab:ba:b1:e7:
                    b2:50:ed:9f:9e:1c:e7:9b:e8:64:2b:6f:46:67:eb:
                    dd:2a:68:fb:1a:a6:ac:21:0c:2c:28:8e:30:d5:55:
                    2b:09:b4:b7:07:73:ad:2b:b0:5d:2f:d5:70:ff:d3:
                    92:5d:f3:8b:0d:6f:a5:e5:8e:01:a9:6f:66:72:77:
                    31:dd:68:18:85:81:25:96:7c:4c:e4:6d:43:00:2c:
                    84:b9:71:ac:52:62:c8:d3:f6:1b:ac:0b:1f:09:49:
                    3e:76:91:f9:6a:67:da:07:7d:56:61:77:93:24:17:
                    94:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:28:13:D7:8E:4A:B8:DD:0C:CE:D2:D4:9D:DF:7A:8E:BF:87:0C:66
            X509v3 Authority Key Identifier:
                keyid:83:29:C9:13:87:58:DF:E8:BA:12:35:EE:0E:C7:D9:B6:58:9F:4B:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e1:23:0c:46:34:df:60:98:a6:b8:20:28:2c:e9:16:4f:ac:
         a7:4b:7a:1a:fe:ec:06:a6:cc:ac:01:80:e7:e2:7b:4d:c8:fa:
         ca:a3:31:64:31:15:63:ee:e1:36:40:45:03:97:71:e6:47:6b:
         71:55:e5:cc:3c:98:b5:45:56:b2:65:a9:bb:61:f5:fb:1e:a7:
         24:6e:04:29:15:9f:56:94:60:4c:9d:83:f4:f7:82:e2:2d:a1:
         52:94:98:f4:32:74:b7:72:2b:b9:a3:98:9b:39:7e:9c:f6:e2:
         a8:f0:4b:7d:88:ac:f1:73:40:fd:d9:bc:3d:34:a5:d5:00:e5:
         f1:d1:0c:da:90:4d:77:e7:96:14:e1:2c:47:06:0a:b1:2a:ed:
         27:db:e6:3a:d1:8a:0e:9a:2b:28:55:19:6d:bd:94:9a:1c:80:
         84:66:26:bf:1c:16:79:04:fc:a8:27:04:38:73:a9:cc:29:96:
         8f:33:18:72:d0:92:46:3e:f3:88:b8:df:23:71:59:37:e9:6c:
         43:64:d5:6c:1a:24:62:64:1e:1b:1a:1e:cb:86:28:5b:f3:37:
         dd:47:9d:2e:d7:62:0e:5c:46:79:1c:41:4b:f7:d4:9f:e2:08:
         83:d3:39:b1:23:69:52:41:38:e9:f3:84:1c:31:aa:a1:e3:3d:
         3d:01:c7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:28:32 2026 by rpki-client