Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
File:                     Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft (raw, json)
Hash identifier:          HXJ2HYb5IVI8sl+6ww6eE3RBhU7scYU9Rk8Qf//MTTM=
Subject key identifier:   8C:28:93:53:A7:5C:7E:DD:8D:ED:08:F7:85:2E:B6:03:1D:46:B8:91
Authority key identifier: 1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
Certificate issuer:       /CN=1a9b70ef99760a0659deaefa660345a0e6115423
Certificate serial:       019EBAD8E5DE0727D7A4A1CCC46DE67FE422
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
Manifest number:          18E9
Signing time:             Fri 12 Jun 2026 08:00:37 +0000
Manifest this update:     Fri 12 Jun 2026 08:00:37 +0000
Manifest next update:     Sat 13 Jun 2026 08:00:37 +0000
Files and hashes:         1: Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl (hash: fgHdRqyGHXl4S0PuNFz9INntI5k02vdwDrH6VOQrM3Q=)
                          2: ZohyHfqFv67z4908u3_QeIT8zVw.roa (hash: F/BjQl+7N2tQfUywKhEzc2DzriEJ3gerXgEGzUTdIDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:d8:e5:de:07:27:d7:a4:a1:cc:c4:6d:e6:7f:e4:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a9b70ef99760a0659deaefa660345a0e6115423
        Validity
            Not Before: Jun 12 08:00:37 2026 GMT
            Not After : Jun 13 08:00:37 2026 GMT
        Subject: CN=8c289353a75c7edd8ded08f7852eb6031d46b891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:07:68:19:0b:96:98:f7:6a:f0:0d:2d:3d:f8:
                    cb:3d:1d:f7:cc:2c:d8:46:a7:9c:fd:4f:9a:48:a8:
                    fd:bd:a6:4e:d5:cf:d9:49:98:69:a1:22:bf:de:0f:
                    b0:94:03:b9:b9:43:0a:49:11:10:46:6d:53:97:0c:
                    7d:de:99:5c:ad:7e:9e:2b:06:fa:51:61:1d:4d:db:
                    00:ad:c9:47:13:eb:79:9d:46:58:64:3c:12:ac:e8:
                    37:91:34:87:b9:fb:a3:50:b9:d1:52:d0:0c:6b:1e:
                    66:ac:7e:31:4c:93:8b:9a:00:ec:80:df:bd:c2:80:
                    57:63:25:99:f1:93:d6:06:79:37:7b:f7:18:d0:18:
                    ad:fc:cc:8f:6e:f2:8e:ef:29:fc:d2:5b:a2:e5:86:
                    4c:58:ca:4b:b5:21:8b:b4:61:ea:be:61:7c:d9:ab:
                    e8:58:f5:4a:33:f6:87:a0:f9:10:f8:e9:16:fd:26:
                    e4:59:61:0d:3f:21:a1:79:eb:c1:94:1c:ec:34:ef:
                    8e:b2:45:0d:b2:56:bc:f1:07:3f:a8:18:bd:a1:49:
                    27:d8:95:e5:58:d3:79:85:0c:c9:3b:f0:3c:da:5f:
                    a0:99:36:a4:fd:a8:05:29:30:41:0a:62:b4:ca:ae:
                    12:47:65:fc:b2:65:df:d2:0e:e1:e5:be:47:7f:e2:
                    05:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:28:93:53:A7:5C:7E:DD:8D:ED:08:F7:85:2E:B6:03:1D:46:B8:91
            X509v3 Authority Key Identifier:
                keyid:1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:49:ae:e0:20:74:a3:28:6c:ce:97:f9:9d:86:cb:bf:af:21:
         38:7e:ce:2e:66:c8:6f:7d:5d:25:32:a1:3c:5b:0f:5b:83:3b:
         e7:b3:93:55:8a:4c:38:c7:1c:fb:06:ea:04:c3:64:1d:63:bb:
         45:4a:8b:94:1f:5f:c7:81:32:2b:ee:c5:ca:ce:9a:49:63:b0:
         09:d5:5e:c0:fb:49:aa:94:7a:d9:f6:87:ec:8a:3b:5b:ad:66:
         4d:5d:94:0b:0a:71:00:89:9e:dd:2a:82:14:c6:0f:24:83:3d:
         bc:8f:1c:ec:d7:bb:c5:1d:bb:84:a6:ef:5f:b4:b8:d0:39:fa:
         07:03:37:99:48:51:d8:62:4d:d3:37:bd:ee:ed:02:3c:51:80:
         f9:b9:5c:74:c2:e0:fe:29:c6:46:3b:9a:b1:29:81:b1:68:f9:
         9f:f6:95:07:8e:a1:66:b1:cb:86:8b:1a:ab:f3:74:9d:03:a9:
         f2:94:f7:3b:75:27:ad:fb:6b:a5:2c:87:22:06:70:51:88:9f:
         f3:df:b6:f1:a7:4f:4f:26:66:0b:6c:96:e7:90:30:6c:03:e3:
         99:85:98:3e:c5:e6:f1:1b:7a:f0:7f:9b:61:d8:02:6b:ef:6b:
         52:30:9d:02:c0:1d:31:fb:16:e9:0b:25:d2:83:88:a7:b8:c6:
         e8:39:92:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:54:54 2026 by rpki-client