Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
File:                     gDCVaDspR93Unu6sDb2eqVSuoUQ.mft (raw, json)
Hash identifier:          djIupjk/Y6AuHh39H6RlHgnYno/8+l2WERUbWtctlv8=
Subject key identifier:   D9:E4:46:D0:99:D7:C5:E5:8F:B0:93:D1:25:1B:6C:38:4A:0D:57:DF
Authority key identifier: 80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44
Certificate issuer:       /CN=803095683b2947ddd49eeeac0dbd9ea954aea144
Certificate serial:       019E28B888277D6E33615EF8CBD90F687488
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
Manifest number:          0822
Signing time:             Thu 14 May 2026 23:00:42 +0000
Manifest this update:     Thu 14 May 2026 23:00:42 +0000
Manifest next update:     Fri 15 May 2026 23:00:42 +0000
Files and hashes:         1: gDCVaDspR93Unu6sDb2eqVSuoUQ.crl (hash: zGGs0ghNrpdUK/3P32BdY/S+9m5fbbaAp6NTzfqPFWA=)
                          2: vH_sEfDU81k82bCyQ3wMyP5PVWE.roa (hash: FwaLONRBNXLNCaY37uk5cOKRRSKJajQin0uHoBoCrh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:b8:88:27:7d:6e:33:61:5e:f8:cb:d9:0f:68:74:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=803095683b2947ddd49eeeac0dbd9ea954aea144
        Validity
            Not Before: May 14 23:00:42 2026 GMT
            Not After : May 15 23:00:42 2026 GMT
        Subject: CN=d9e446d099d7c5e58fb093d1251b6c384a0d57df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cc:f4:52:98:06:1b:3d:06:96:a7:4b:e8:06:
                    6a:03:1b:0a:12:f4:43:91:4d:aa:d7:26:11:0d:61:
                    94:ab:cc:35:87:d1:6b:90:a6:1d:88:fe:1d:1d:d4:
                    d7:71:8b:ec:d9:2a:34:cc:dd:bc:87:69:e2:95:43:
                    25:7b:dd:9e:54:23:c2:9a:37:81:f0:df:25:e7:52:
                    4c:04:d7:20:7e:65:c3:84:1a:08:a6:5e:eb:fb:84:
                    b0:11:df:7f:2f:48:81:1b:f7:12:47:cf:9a:4d:55:
                    7d:72:7d:0b:eb:a3:24:4c:3b:3b:c7:18:8a:7f:9f:
                    ed:4b:6e:84:9b:60:3c:c5:56:86:ee:ba:a0:27:7e:
                    cc:de:3b:52:dd:e1:9c:43:c9:ec:02:01:3a:3d:cb:
                    7c:fb:08:d5:cf:b9:12:22:4c:3d:6f:23:08:ed:ff:
                    30:f9:45:6b:b7:1a:45:12:ba:67:29:f2:ea:a7:a8:
                    8d:4b:61:be:0e:a6:88:5c:ac:01:74:d0:59:dc:f7:
                    4a:7f:20:e2:01:7f:e4:ca:41:db:47:a4:9c:5e:8e:
                    eb:b9:ae:a2:0b:51:f7:30:7e:33:27:7e:9e:d4:20:
                    73:26:a8:e4:14:06:7c:e1:0e:62:b6:3c:3a:95:dc:
                    d0:10:ea:a0:f1:64:88:86:d0:92:01:e9:76:13:df:
                    74:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E4:46:D0:99:D7:C5:E5:8F:B0:93:D1:25:1B:6C:38:4A:0D:57:DF
            X509v3 Authority Key Identifier:
                keyid:80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:29:b1:3d:07:b6:98:79:49:9f:1f:f6:e6:a3:e4:59:ce:d6:
         5c:06:a1:67:e3:90:e1:85:1e:c9:fc:f1:f8:ff:e5:ef:09:52:
         f7:04:5b:6d:77:27:8d:c9:0a:dc:37:f9:77:6f:52:49:4a:68:
         8a:d6:5b:a5:5f:8f:6d:1e:b9:a3:b1:f8:77:d2:de:8b:f6:e8:
         a4:af:2c:47:b8:3b:55:af:94:80:31:9f:d3:d2:80:14:23:93:
         37:fd:12:f9:2d:ed:8c:b7:31:4f:dd:c5:02:a5:38:ac:40:49:
         81:7b:d5:53:f3:c4:76:f7:78:1f:d8:e8:6d:8f:3f:2c:10:b7:
         dd:32:13:46:34:e9:4e:6a:2e:49:7d:e1:1d:a3:cf:23:4f:a3:
         2e:d5:9c:c9:5d:86:8e:54:55:4c:58:25:b8:4b:07:90:18:bc:
         5b:ca:3f:d1:90:ab:49:5c:ea:8b:1d:86:ce:7b:50:f9:a5:fa:
         8a:41:e2:81:b6:f9:25:70:80:3f:9b:4e:5a:af:d2:f9:38:87:
         e0:87:b8:53:f5:3e:0f:0e:bf:bc:32:dd:0f:72:30:be:b9:51:
         a0:bc:bb:d8:8d:45:64:00:02:ba:77:de:77:ca:8a:60:91:6c:
         e2:62:0f:ad:04:d0:65:ce:36:f8:3c:a3:d0:36:1c:34:26:bb:
         7a:e1:ba:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:02:09 2026 by rpki-client