Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
File:                     GGDjbiWx26EXgHXIA8KaBEzs_eE.mft (raw, json)
Hash identifier:          5u0V4qTRJlmzK85BjmHXgaAliFQUUmDwVQS+GxnUdQw=
Subject key identifier:   18:7C:C3:24:8C:32:2D:C6:3A:05:11:86:38:A3:D1:35:76:6E:D9:40
Authority key identifier: 18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1
Certificate issuer:       /CN=1860e36e25b1dba1178075c803c29a044cecfde1
Certificate serial:       019E547F04B90DF0EFA3D74C217CDC153986
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
Manifest number:          0C47
Signing time:             Sat 23 May 2026 11:01:10 +0000
Manifest this update:     Sat 23 May 2026 11:01:10 +0000
Manifest next update:     Sun 24 May 2026 11:01:10 +0000
Files and hashes:         1: GGDjbiWx26EXgHXIA8KaBEzs_eE.crl (hash: x9lqqn7kKuh0He86Phat7SyGRgDPH4G3ZEPpAk/HUYQ=)
                          2: HMpfD8yWZ0j1ouvG1EDM2ZSSE8c.roa (hash: SGGQvvIcUh55SsmT9zcE0INbCSKqRJfWxR5dRHBgMA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:54:7f:04:b9:0d:f0:ef:a3:d7:4c:21:7c:dc:15:39:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1860e36e25b1dba1178075c803c29a044cecfde1
        Validity
            Not Before: May 23 11:01:10 2026 GMT
            Not After : May 24 11:01:10 2026 GMT
        Subject: CN=187cc3248c322dc63a05118638a3d135766ed940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:88:e8:e1:7d:67:73:52:b6:4f:17:84:80:a2:
                    c1:3b:5e:f2:24:a2:35:a0:44:bf:a1:5d:c1:11:6a:
                    36:18:1b:9b:3a:72:9c:24:ae:c5:51:d2:e6:7b:08:
                    0b:d1:4a:b6:70:18:12:13:4a:08:7c:41:fe:0a:b8:
                    b0:70:03:bf:e0:e8:5e:54:1a:ce:ae:bd:71:27:48:
                    9a:48:5a:2f:de:ec:b9:16:6a:97:c3:88:7c:46:0d:
                    52:2c:68:99:b1:24:c5:0b:8f:9f:99:35:57:8b:17:
                    3a:42:67:68:79:b1:f9:e3:21:80:65:6c:1a:bc:cb:
                    ed:cf:2a:ee:c7:4b:63:ce:fb:b8:ca:a6:cb:ee:3b:
                    44:b0:a3:0d:d1:08:9d:c3:08:98:1a:09:73:cb:5b:
                    b5:10:da:19:ca:40:ae:67:c7:41:cd:15:3a:25:45:
                    71:1d:ad:bc:de:31:16:54:e4:3e:54:fe:6a:05:ed:
                    db:6d:d2:6b:95:92:56:60:f7:a4:ff:a7:1f:fb:18:
                    16:44:fd:94:e2:01:13:67:fa:ea:1b:7a:74:b9:5a:
                    ad:7d:9e:4e:1c:39:24:a8:3c:89:2b:51:fc:a3:93:
                    13:4a:29:48:b0:14:3e:e0:0c:79:7b:0a:00:08:df:
                    c9:d6:99:16:19:9d:3b:73:b4:1e:6f:20:d8:0f:68:
                    55:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7C:C3:24:8C:32:2D:C6:3A:05:11:86:38:A3:D1:35:76:6E:D9:40
            X509v3 Authority Key Identifier:
                keyid:18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:b3:d7:27:16:5b:0b:6e:03:32:e4:86:e0:5e:58:0a:fe:bf:
         2b:06:23:26:17:43:8d:9c:a5:ef:fb:82:63:c3:b5:79:02:a3:
         8b:b4:28:a4:8a:ed:88:1b:a3:a5:8b:81:96:a6:9f:88:ea:b1:
         4a:cf:60:ce:7b:d3:c5:da:80:57:02:63:fb:7d:2c:eb:d2:e7:
         e5:af:03:52:be:30:1b:6b:d7:be:bb:75:cf:9e:78:ee:4c:62:
         d3:de:9a:db:fa:62:3f:1f:5d:08:68:28:ec:32:e4:14:8d:ef:
         30:63:04:e3:8e:aa:35:f1:6b:e9:d2:98:77:ac:23:1b:0c:a8:
         73:66:6c:d3:06:fa:75:95:d0:85:84:9e:fe:23:65:d1:5a:dd:
         1f:3a:ee:e5:15:de:46:0b:a8:d6:71:3f:a8:11:3e:94:83:c1:
         be:7b:c2:2f:75:75:ff:46:93:e6:1f:0a:48:6c:1b:00:4f:2d:
         cc:83:ba:a3:ce:c0:ee:bb:0e:13:8a:2e:da:44:c3:59:db:3c:
         e2:ea:69:29:e6:28:6f:0a:d1:5d:d8:67:55:df:79:a3:8a:31:
         9d:e5:cb:6a:e7:4e:0d:d2:2a:4e:90:2d:56:55:a0:8a:08:09:
         f8:97:e0:b8:e6:a6:23:65:bd:3b:80:c3:f9:f4:92:73:ad:a4:
         4b:78:c6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 19:31:10 2026 by rpki-client