Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
File:                     GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft (raw, json)
Hash identifier:          yhMQjetOycECD/8VneOWXzHXbZMrAJy9rZGv6I/L7zA=
Subject key identifier:   3D:9F:60:15:37:CD:5F:C1:48:42:E7:EA:81:B5:BB:60:E2:CF:E9:F7
Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
Certificate issuer:       /CN=1b098412c984b89be38011a72a3c471975fc47a2
Certificate serial:       019E9A3B6EEC6C8FA7422D7A3FF96B1624AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
Manifest number:          0B44
Signing time:             Sat 06 Jun 2026 00:00:46 +0000
Manifest this update:     Sat 06 Jun 2026 00:00:46 +0000
Manifest next update:     Sun 07 Jun 2026 00:00:46 +0000
Files and hashes:         1: GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl (hash: 0C5MAefMa4zHmH3e7ntZ4vjXjgKwQyPAfoZrfl/43VA=)
                          2: JZaH_jpSvzp_LB_dT1bUbnV7u6Y.roa (hash: PBsKlZt/RhXzdnMDW9mk8dmSBPIc5dC6MxwZF8UDWyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 00:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9a:3b:6e:ec:6c:8f:a7:42:2d:7a:3f:f9:6b:16:24:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2
        Validity
            Not Before: Jun  6 00:00:46 2026 GMT
            Not After : Jun  7 00:00:46 2026 GMT
        Subject: CN=3d9f601537cd5fc14842e7ea81b5bb60e2cfe9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5b:f8:70:aa:25:fa:b3:08:e9:20:d0:75:63:
                    12:28:6e:8a:b3:a5:e3:9c:80:dc:af:a4:0d:ac:22:
                    1e:44:d3:7a:dd:a9:6b:05:d8:1e:ef:14:29:5a:66:
                    7b:b3:d5:b2:46:a1:b6:df:4a:51:b9:f2:51:f6:dc:
                    6e:9f:57:b1:a9:b7:98:ef:a6:7b:26:14:87:1a:a2:
                    5f:ff:96:38:fe:e0:95:af:5c:39:ca:c7:83:eb:3e:
                    5d:32:c8:af:e5:d4:2d:6d:c5:94:b2:99:c3:b2:75:
                    8a:75:a0:e1:7a:04:83:e4:e2:47:96:96:cc:ef:ee:
                    a6:35:ec:a3:2d:34:5b:fe:fb:77:fd:77:64:3a:3b:
                    b8:5c:cd:6f:2f:34:80:d3:21:d4:dc:a4:7d:a6:3a:
                    02:00:29:41:b8:5b:e5:a5:b8:31:fc:86:24:d6:a8:
                    06:a8:9c:ab:fb:fe:d6:f8:c0:86:89:7f:08:09:88:
                    e5:56:0b:65:1c:b4:71:ed:26:80:00:ec:9c:7c:c0:
                    e8:f1:11:20:6a:f4:6d:86:b0:c6:cd:13:da:5c:8e:
                    d1:1a:ca:5a:ab:8a:fe:08:3f:8d:e3:05:60:00:06:
                    8b:bc:0f:49:bc:02:ff:d9:e1:05:e2:f1:01:65:3a:
                    9f:d8:d7:65:2a:d4:d1:49:33:32:32:b4:07:e9:85:
                    c8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9F:60:15:37:CD:5F:C1:48:42:E7:EA:81:B5:BB:60:E2:CF:E9:F7
            X509v3 Authority Key Identifier:
                keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:2d:d6:da:7c:3d:a2:db:14:56:34:46:7a:2a:2e:cb:38:27:
         62:bc:16:52:07:16:1b:97:03:1f:b4:ad:ea:41:f2:38:d3:3f:
         cd:8d:db:e6:e8:8e:af:66:87:39:d2:bb:ba:a9:b4:2e:9a:ad:
         00:22:9c:0e:9b:d2:88:5f:d3:e0:36:5a:ef:f2:fb:8a:df:18:
         ee:e7:c3:d9:68:07:5a:5e:44:f1:4c:d5:e3:b7:61:95:02:5e:
         dc:07:94:27:4d:f2:8f:b1:be:c3:c3:32:5f:22:0e:aa:d8:26:
         13:3e:ae:d9:d7:78:de:bb:b8:c9:6d:7c:42:ad:10:79:b1:e7:
         c3:53:40:05:e1:bf:8f:5b:f3:15:26:93:40:49:e2:c5:f3:44:
         80:92:17:ea:76:45:88:72:b1:ae:9f:cb:d9:7d:47:a9:3b:ed:
         9e:9a:4b:3c:c4:98:4f:87:16:42:91:4c:9e:66:4b:77:37:8c:
         7e:16:b9:4d:ad:81:8b:49:4b:58:fb:df:58:31:24:90:ac:a6:
         b2:3c:c6:06:73:21:26:e9:3a:60:96:8e:84:c9:f6:59:af:ef:
         af:f7:46:6c:26:7c:23:81:f3:38:ca:6f:15:95:ec:2b:6e:de:
         35:23:04:01:4d:34:3b:9d:b0:0f:ef:51:cc:05:dc:72:53:e6:
         b1:75:88:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:03:32 2026 by rpki-client