Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
File:                     G9vEEUREgGUxPvC4LhzPeubqVyA.mft (raw, json)
Hash identifier:          piIvIedFFY0I6twjX6peGC4ae6TToiWvvis/laWYuno=
Subject key identifier:   0E:23:15:2D:3E:20:FC:5F:7C:05:30:59:B6:5F:51:15:A2:B1:EA:EC
Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
Certificate issuer:       /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Certificate serial:       019E0C2F2468C3BA8895A10E9D05CA97D330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
Manifest number:          18FF
Signing time:             Sat 09 May 2026 10:01:16 +0000
Manifest this update:     Sat 09 May 2026 10:01:16 +0000
Manifest next update:     Sun 10 May 2026 10:01:16 +0000
Files and hashes:         1: G9vEEUREgGUxPvC4LhzPeubqVyA.crl (hash: aAU/guarl4vLDdwFc8D+fVtIUWsK69kYYlj56ili9hQ=)
                          2: tXwPHcD7KOQpl4ubBwGZXMLcNGc.roa (hash: kHVmMcCLDSaK/L8IsfRUQoLqMYtr8aRP/Gpfi71r/IU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 May 2026 04:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:0c:2f:24:68:c3:ba:88:95:a1:0e:9d:05:ca:97:d3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
        Validity
            Not Before: May  9 10:01:16 2026 GMT
            Not After : May 10 10:01:16 2026 GMT
        Subject: CN=0e23152d3e20fc5f7c053059b65f5115a2b1eaec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c2:96:72:e6:cc:ef:27:72:4b:bc:a3:54:80:
                    cb:08:7a:34:91:8b:78:a1:54:87:da:24:33:62:8a:
                    5b:ff:8b:62:31:54:3f:af:16:5a:ac:5f:f9:64:e3:
                    dd:81:a4:09:81:81:e2:22:29:86:73:b1:e4:3d:66:
                    c6:bb:09:0a:b0:86:5c:96:e4:be:e2:a3:0a:d8:ee:
                    34:0e:59:32:dc:75:6c:b3:9c:0a:c0:8a:a8:f9:76:
                    01:4d:6d:ac:e8:f7:6f:8c:26:56:dc:3e:bc:04:c0:
                    a3:93:62:f3:91:c3:53:ee:90:6e:4f:cc:71:73:50:
                    f9:d1:98:cb:7a:d2:98:4e:7a:4f:54:90:79:14:27:
                    2c:78:9a:3f:fd:ff:9b:97:d3:12:1f:20:c0:b9:2d:
                    05:c5:5d:ca:fb:68:9d:24:a6:3b:70:87:61:d1:3e:
                    cc:89:4f:49:cf:37:18:dd:96:4f:36:25:37:37:29:
                    8b:93:d6:27:ad:9c:55:ba:58:5c:92:57:3f:f6:42:
                    68:0d:31:b8:6b:cf:ea:51:95:be:f9:c0:0e:6f:fb:
                    4d:40:68:d5:1c:c1:41:ca:b8:03:6b:a9:61:94:38:
                    65:cd:ce:cd:3e:32:f9:47:82:b0:e0:3e:17:10:0e:
                    17:bc:4e:95:ed:46:0d:b7:a4:41:99:1f:76:85:ca:
                    08:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:23:15:2D:3E:20:FC:5F:7C:05:30:59:B6:5F:51:15:A2:B1:EA:EC
            X509v3 Authority Key Identifier:
                keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f5:c4:8c:6b:b5:88:8d:d4:4b:8c:30:fe:ee:43:0b:30:8a:
         dc:f9:e6:d4:b0:49:dc:e3:24:6f:e9:a7:90:f4:84:75:86:67:
         ab:93:32:7d:30:4d:fd:d1:14:f5:1e:11:ea:5e:78:c7:cf:24:
         22:76:14:17:b0:40:5c:5a:b9:fb:6d:18:27:97:fb:61:a9:21:
         c3:f4:e8:41:ab:af:a7:63:89:b7:c2:d3:47:48:1f:aa:ab:1c:
         31:33:44:68:e9:34:5f:b2:7e:31:6a:02:31:39:0c:74:f5:71:
         5c:98:97:59:2f:d4:5c:30:dd:b7:52:77:53:a5:e0:24:d7:1b:
         ee:09:16:c6:1e:46:cf:eb:95:c6:d2:fa:1e:51:14:2d:49:4e:
         ab:8a:cd:8f:37:e7:a3:0c:d5:56:57:42:13:f6:91:01:2a:b1:
         ab:63:f2:48:0d:2e:c9:62:04:89:77:5c:0f:c6:d8:c3:5d:92:
         1a:c5:4f:45:d3:e0:21:b1:5e:58:48:72:7e:83:bb:03:47:bf:
         53:9b:d3:c1:d5:bb:31:bd:3b:d2:f9:4c:a7:61:8c:8c:62:38:
         f6:16:09:cc:63:ff:3d:16:4d:3f:bd:82:c3:25:35:1a:63:25:
         9d:e9:fd:21:ee:f8:3f:e1:e7:91:69:4b:44:da:cc:96:70:2a:
         7e:e8:d3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 14:43:08 2026 by rpki-client