Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
File:                     GKhKjkdfZgbnoS-SszDWPY-IC-A.mft (raw, json)
Hash identifier:          ol9i9B7y/kV4kxqiUSESEovyzkI3n36OwVX+XkX6sUI=
Subject key identifier:   6A:13:51:C0:DC:89:65:90:06:3B:F1:2F:6D:A9:0F:00:30:85:78:EB
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Certificate issuer:       /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial:       019E8FEF03404AD307F0C43C7D84D4E69270
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
Manifest number:          119C
Signing time:             Thu 04 Jun 2026 00:01:06 +0000
Manifest this update:     Thu 04 Jun 2026 00:01:06 +0000
Manifest next update:     Fri 05 Jun 2026 00:01:06 +0000
Files and hashes:         1: Eu4BP5a5E95Q7p4k5RfhumyOrvk.roa (hash: 1lD5R4cJuPj/nZ60zfBHs9WvrZ5YRD+ZAX1KkvheAUY=)
                          2: GKhKjkdfZgbnoS-SszDWPY-IC-A.crl (hash: GqOrODdbXjPBEcORManFRIJpXSlZbKtHOJVcQx/bFC0=)
                          3: Lz9HTbSY8lhhcxkrepciN8LQ0fQ.roa (hash: rZwlf03cUQC4V8ZoX8hCUb5cuhgy7zpkYtcAyoRPcgs=)
                          4: bkbetdS8S-j3tP4wUr1qTgybbWU.roa (hash: Oq2Kf7OZI0bbyyfOu9XDW+vxC4txNMjTca4uRZlKC+I=)
                          5: lnQm--gY8ePlCI161SZETEH7iss.roa (hash: vxrBUtHuyLV0LieoKDVoBuqAYfEuInf7kfLphmP99fg=)
                          6: mb8r9vp3wM6oJLJdPmkNlWrgKtE.roa (hash: Xrfg/Aqkw9N5mVtt/uYm1yP5BsOe0X4pZfMOzaQDicg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8f:ef:03:40:4a:d3:07:f0:c4:3c:7d:84:d4:e6:92:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
        Validity
            Not Before: Jun  4 00:01:06 2026 GMT
            Not After : Jun  5 00:01:06 2026 GMT
        Subject: CN=6a1351c0dc896590063bf12f6da90f00308578eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f8:5d:e9:ca:4e:7d:68:42:e6:a3:dd:2f:1e:
                    4c:ee:35:e3:b4:5e:aa:96:ff:db:2e:f0:22:5f:a6:
                    3c:42:67:d7:70:a4:d5:95:32:31:11:aa:e8:3b:61:
                    c7:32:16:31:b9:5b:59:c5:98:c2:c3:43:21:c3:96:
                    76:29:c8:d4:ad:5c:c3:3c:da:b1:eb:3f:ad:24:be:
                    79:14:c7:b5:40:6f:bd:7b:bd:55:db:81:cb:37:2c:
                    8e:a6:cd:35:08:4e:e4:70:01:3f:4f:67:6f:bd:ff:
                    42:7d:f1:80:00:2a:f7:1a:0e:ae:d7:60:49:22:ec:
                    27:3f:90:11:a3:23:8a:44:08:37:b8:7b:db:c8:13:
                    d7:95:d8:fa:59:3e:41:c9:65:82:82:c0:c2:13:11:
                    95:2e:a2:46:fb:94:ea:d9:25:72:51:df:64:19:eb:
                    08:62:33:4a:47:04:e2:b3:82:75:ef:71:29:ae:70:
                    fe:b6:41:3d:15:05:89:41:9e:7a:b1:f1:88:6b:e5:
                    77:26:9e:60:3b:82:1a:70:5d:c4:39:a7:59:79:a0:
                    ef:6b:f8:1b:31:f0:b1:4d:71:8f:26:e8:b1:dd:cc:
                    67:30:51:65:29:ff:50:90:7a:d7:75:5c:53:a9:a5:
                    93:4d:29:3a:8c:4d:1b:43:1a:75:b4:a1:fd:73:cc:
                    c6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:13:51:C0:DC:89:65:90:06:3B:F1:2F:6D:A9:0F:00:30:85:78:EB
            X509v3 Authority Key Identifier:
                keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:17:5a:d3:89:4d:18:bf:6e:72:3a:48:4c:22:35:24:c1:86:
         07:47:91:a4:72:23:da:8e:b8:9b:3e:c3:6c:95:e1:4a:ca:bb:
         5c:9f:55:70:ce:0b:28:b9:bc:5e:ca:db:e7:12:a5:05:66:d9:
         08:c9:41:b6:48:5f:75:53:f5:06:95:8a:1a:27:5c:1d:1c:fb:
         7e:67:4e:46:14:13:d8:ed:12:42:e1:1b:4f:20:27:74:8d:97:
         93:2c:92:ab:ff:dc:73:be:d2:8e:ab:ce:bc:db:a5:fd:ff:31:
         09:b9:b1:fc:97:b4:74:ca:c2:30:9a:69:e6:90:60:c1:de:12:
         8f:bc:76:a7:ab:8a:f3:cd:fc:43:c8:bb:ed:ac:e8:a6:0d:e8:
         dc:37:47:1e:0e:0f:82:b5:0e:22:c3:de:29:31:d9:11:61:00:
         9a:03:df:e5:f2:f6:5a:e7:5b:8b:10:21:12:50:76:a0:dd:5a:
         21:40:c8:ef:9c:d7:ea:88:74:89:18:fc:d5:82:b2:10:04:ff:
         54:eb:06:f8:9e:9d:3d:7f:d9:b9:68:f4:b3:6d:41:25:ed:45:
         b5:91:82:cd:f3:0d:f2:9f:af:72:d6:a7:0a:a7:92:74:8e:e4:
         d3:43:c8:27:9f:60:4d:e4:a2:3d:19:c0:3d:3d:eb:c2:f8:3a:
         d6:85:44:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:16:37 2026 by rpki-client