Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
File:                     GfGp3RJvNyN84gD7hhb_k3vKlmw.mft (raw, json)
Hash identifier:          CMyXQLuuIA+2Nn6CvdEAxmHfcWIvJuJ3UMcMw9IL0wE=
Subject key identifier:   20:F6:87:0A:62:E0:89:B5:57:D1:F6:BF:31:85:0C:C3:B1:EC:9E:8F
Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
Certificate issuer:       /CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Certificate serial:       019DCED0C8A3BB697B576F83293A1D18040C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
Manifest number:          18DB
Signing time:             Mon 27 Apr 2026 12:01:22 +0000
Manifest this update:     Mon 27 Apr 2026 12:01:22 +0000
Manifest next update:     Tue 28 Apr 2026 12:01:22 +0000
Files and hashes:         1: 7owqXESGy_RXh39I2zXYrOmIRmY.roa (hash: uD/kXqY4+DVU4PEvK0O92LooxshLndRFHktHnH9fzjs=)
                          2: FhTqn0nI2AOefAde-zGtbwEbRRY.roa (hash: pvmj7N2aWwyL4DhPFHc9oWpCfcCMtoks7zjIuX/XA3M=)
                          3: GfGp3RJvNyN84gD7hhb_k3vKlmw.crl (hash: w9QHruLibUboJmVy7xIZYKttKEfDG+zXp/qyx5AxZBo=)
                          4: IjVQWwZv9EJg_zhL2dYrs3DlkR4.roa (hash: 9Z9gCW1kabV4H10WypJ+CcaUnOFek5gLKpjj5o/RjC0=)
                          5: nnLZ_anjPSOLRayVOL-RzewgHwI.roa (hash: 2WaAIYb59kGhe6tvXHb5ioUayH6vLhFoDq8NRlocKJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 12:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:d0:c8:a3:bb:69:7b:57:6f:83:29:3a:1d:18:04:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c
        Validity
            Not Before: Apr 27 12:01:22 2026 GMT
            Not After : Apr 28 12:01:22 2026 GMT
        Subject: CN=20f6870a62e089b557d1f6bf31850cc3b1ec9e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a7:49:42:f9:a6:55:e2:17:55:b9:dd:7b:19:
                    d9:92:c5:ef:47:72:b1:cd:3f:d9:c6:35:bb:11:46:
                    ee:c0:b0:bd:f2:12:3e:2c:da:72:c6:13:e5:58:b2:
                    f8:ed:ce:5d:0a:bc:a0:ab:22:d2:05:42:8a:36:53:
                    4a:0c:ea:c1:fc:37:97:b0:2a:c9:0f:a8:ee:de:90:
                    8c:59:e7:88:53:75:49:60:38:cc:37:67:44:de:c1:
                    92:3d:6e:8c:8d:98:fa:42:a6:fb:94:a6:5b:4e:3a:
                    e7:4e:8a:7c:08:23:60:ed:97:d7:6c:64:e5:f3:b6:
                    9b:86:00:f4:ab:13:85:db:a2:24:ff:e8:ab:b7:b3:
                    86:74:59:33:dc:f7:c5:71:51:05:fd:e9:ae:8f:d6:
                    51:e0:1e:92:c9:82:68:31:6a:ca:68:b7:13:8e:04:
                    09:26:40:dc:c8:1a:2f:7e:b3:21:33:65:98:c5:92:
                    1a:96:05:69:f8:6a:f2:66:fe:28:fc:c1:52:50:2d:
                    86:65:75:4b:fd:2f:20:1a:66:ac:42:2b:2f:66:c7:
                    cf:10:05:bb:00:c0:91:a6:f4:60:b5:2c:5e:01:d8:
                    f6:03:c2:87:03:9a:e2:59:b0:da:a9:0f:59:71:99:
                    d0:86:74:33:e0:98:cf:3c:74:b7:ad:07:9a:e6:aa:
                    a5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F6:87:0A:62:E0:89:B5:57:D1:F6:BF:31:85:0C:C3:B1:EC:9E:8F
            X509v3 Authority Key Identifier:
                keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:8b:35:12:a9:81:6b:15:98:14:d2:79:79:da:39:f7:6c:36:
         3b:4f:5a:4e:5c:57:12:26:a9:65:de:9e:50:ae:f0:7c:40:3a:
         ae:6f:74:aa:cc:bd:b4:25:63:e3:25:1a:3c:47:ac:4e:39:78:
         65:14:a5:a6:64:e0:81:92:bd:a5:f1:85:21:1d:55:ba:2f:5c:
         4c:dd:19:02:38:6a:6b:96:c9:52:88:6e:b6:55:e1:1d:fa:1c:
         1b:2f:30:f7:19:08:ac:bc:20:c6:83:2f:56:74:bf:6e:ce:bc:
         a5:57:8a:1f:63:b7:2b:51:82:8a:85:9c:6e:05:8f:23:e8:52:
         cc:35:be:74:cf:be:c3:57:63:30:09:8e:bd:8b:44:7e:b2:93:
         2d:6e:d4:bd:e2:b5:05:89:e1:ab:b9:9e:9c:df:7a:dd:36:bd:
         36:f9:54:bd:98:06:c5:9b:00:ec:ef:2c:5d:7c:d3:34:da:ae:
         0f:27:89:d8:e0:42:96:45:12:5d:f7:39:40:93:98:3d:c7:59:
         1c:f1:13:ef:63:cb:c4:b8:6d:5e:9d:4e:45:06:bd:83:35:bb:
         9b:7a:ce:ed:3d:23:d4:da:c9:97:89:05:7c:84:31:ee:07:72:
         b3:5e:1c:a2:87:a5:32:32:a2:a9:f0:7d:f5:72:25:fb:4d:a2:
         9f:9d:0e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:09:26 2026 by rpki-client