Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
File:                     GbEF0UjemWA2_fIcsgijOKFYzto.mft (raw, json)
Hash identifier:          YMqwWPSiXLc/nC6ilFQdgNp2HwIGkuP7Ukv4OxyswO0=
Subject key identifier:   76:3E:09:AF:D9:8B:03:F6:E5:12:FF:6D:76:69:9D:93:EE:C3:83:E9
Authority key identifier: 19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA
Certificate issuer:       /CN=19b105d148de996036fdf21cb208a338a158ceda
Certificate serial:       019E4EEA7B94D0F1D4B10DD1507633938926
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
Manifest number:          08A3
Signing time:             Fri 22 May 2026 09:00:50 +0000
Manifest this update:     Fri 22 May 2026 09:00:50 +0000
Manifest next update:     Sat 23 May 2026 09:00:50 +0000
Files and hashes:         1: GbEF0UjemWA2_fIcsgijOKFYzto.crl (hash: jPlCwldFrONAksZ8qRa3+tQP9yBZSNI3MD9mCN/qltY=)
                          2: dyUespYQq3mAO5ciQOI9W33sub4.roa (hash: f5ONEWQltft9lq7xj2n38xNWDCpMGTw5GICFFgsknX0=)
                          3: fSqawDgohGpuSmZo75yc0WkYeBQ.roa (hash: 8OxkTboICrI/6VG3FG9kRuzUoZMlBkjPOzPS7xwaWEU=)
                          4: nUmvBNvDTQXxBOq0CjmJmn5Dtmc.roa (hash: edmkHUr1mlIvRQnZS+9H+p7B//zDt6WSlQ6S+qA/Trg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:4e:ea:7b:94:d0:f1:d4:b1:0d:d1:50:76:33:93:89:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b105d148de996036fdf21cb208a338a158ceda
        Validity
            Not Before: May 22 09:00:50 2026 GMT
            Not After : May 23 09:00:50 2026 GMT
        Subject: CN=763e09afd98b03f6e512ff6d76699d93eec383e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1d:55:dc:c2:22:a5:27:23:7e:cf:3f:12:83:
                    ff:6e:5b:d2:34:c8:07:ac:50:d8:42:1c:32:3e:73:
                    9e:fc:b4:05:ae:ee:19:9e:c9:2d:b4:e9:f2:4a:a0:
                    7e:5b:74:db:19:66:92:02:96:17:dd:47:76:f3:99:
                    53:30:d2:99:8f:3d:21:33:2c:4f:09:18:76:e3:a7:
                    cd:aa:d6:00:44:e9:a8:ba:a0:74:6e:93:f5:b4:ae:
                    8e:14:ce:b6:ba:6c:42:41:18:29:01:6d:2b:ab:30:
                    03:87:46:1e:8b:0a:62:37:41:f4:c9:07:73:01:1c:
                    44:20:97:78:f9:84:91:31:2f:f0:c4:5b:6c:26:c9:
                    8b:0c:51:20:c2:12:80:c3:66:fb:72:78:df:0b:88:
                    f6:86:de:18:32:c6:88:df:44:c5:29:6c:e1:f2:73:
                    70:68:9e:25:43:c8:91:2c:62:5a:79:d4:2e:98:82:
                    91:77:ef:25:cb:f5:08:72:97:3b:1f:95:5b:4e:0c:
                    da:8a:5a:b4:3e:a3:e2:aa:00:d2:36:6f:bc:6f:8e:
                    e7:53:c8:a6:9d:ee:93:4a:8e:f1:ae:c1:83:f8:ff:
                    80:48:d8:23:0a:a3:df:4b:d0:30:c5:28:b9:0e:04:
                    ce:63:d2:0c:05:9c:fc:51:a7:64:24:f2:db:4d:19:
                    60:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3E:09:AF:D9:8B:03:F6:E5:12:FF:6D:76:69:9D:93:EE:C3:83:E9
            X509v3 Authority Key Identifier:
                keyid:19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:df:63:47:33:a3:f5:09:2b:f7:0f:7e:01:27:08:1b:52:15:
         bb:36:f9:35:58:d0:dc:dc:70:b0:04:c6:2c:bb:bb:8c:49:4e:
         61:9a:5f:be:e3:b4:a7:e4:d9:18:2a:cb:c8:c3:80:00:c2:02:
         e4:2c:63:83:d4:f3:85:0c:bf:5f:2a:07:2a:e9:0d:08:7a:9a:
         f3:94:00:ef:f2:61:8f:4d:19:88:dc:9e:6d:2f:f9:c9:8e:ab:
         13:82:b0:04:d4:2d:b5:fa:d5:e6:55:27:70:53:93:48:a1:75:
         3d:5b:8b:a6:aa:a4:92:01:12:32:0e:00:b6:f0:a7:a1:fa:fa:
         07:ac:03:9b:9f:bd:7b:63:55:11:08:db:15:17:5e:79:43:9f:
         a1:d8:27:f4:be:3f:15:fe:8d:c6:ef:61:16:42:39:26:54:72:
         6d:d6:5c:1f:73:3e:3e:25:60:76:ae:07:11:1f:4f:48:f7:2f:
         c9:66:73:19:aa:de:7b:ba:c4:fc:96:e2:da:9e:f8:ad:29:3f:
         98:4f:d1:21:20:7c:1b:ae:61:6d:d7:85:20:3f:1b:89:89:12:
         0a:89:d6:91:0c:8b:ab:6c:50:54:a7:f2:db:79:64:d7:85:a3:
         29:79:29:84:29:fb:15:ba:97:0c:91:fa:f1:ea:ae:55:b1:c6:
         65:16:52:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:10:12 2026 by rpki-client