Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
File:                     GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft (raw, json)
Hash identifier:          wycRGBIYJPsaHBK25tFJVSoO+PnFXAjmujP6PVApvMs=
Subject key identifier:   F9:B6:87:6F:EA:4A:97:E4:F6:BB:5F:BF:00:0F:9B:69:6A:B6:5E:7C
Authority key identifier: 1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F
Certificate issuer:       /CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
Certificate serial:       019EB8B3F7941CE35BB6477C9AE0C514AB7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
Manifest number:          18E9
Signing time:             Thu 11 Jun 2026 22:01:02 +0000
Manifest this update:     Thu 11 Jun 2026 22:01:02 +0000
Manifest next update:     Fri 12 Jun 2026 22:01:02 +0000
Files and hashes:         1: GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl (hash: 7bRZbc1mZV/AuYIASizIPJnxL1dUSn5J3VaJ3a7TU/s=)
                          2: O1x05-HbZz9z_RAG_UsW8fq9KnQ.roa (hash: RqXyqzQCK+VpxYKPTIZPxW8p4AdlK8gMbx5a8aqVV1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b3:f7:94:1c:e3:5b:b6:47:7c:9a:e0:c5:14:ab:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
        Validity
            Not Before: Jun 11 22:01:02 2026 GMT
            Not After : Jun 12 22:01:02 2026 GMT
        Subject: CN=f9b6876fea4a97e4f6bb5fbf000f9b696ab65e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2c:77:19:bd:52:26:39:c5:eb:f8:52:27:98:
                    e6:a4:79:a7:89:fd:b3:6d:f5:0d:04:72:a0:42:ca:
                    3d:10:62:22:e9:6c:44:b9:59:71:e7:57:a8:d7:2c:
                    f3:c5:b1:b4:14:ed:23:4b:23:4f:a2:e5:8c:4a:58:
                    e2:e0:f6:dc:78:f0:bc:69:9a:8e:6b:33:45:92:70:
                    f7:3b:ee:e6:16:f7:3e:11:99:a1:f3:e7:b6:58:04:
                    fb:27:af:ae:bf:be:a1:41:b6:64:93:cb:1b:6f:c1:
                    08:f8:b2:95:20:61:88:b8:45:6b:94:cb:3d:7f:43:
                    5c:10:01:5f:99:57:e3:2d:bc:69:ae:16:ed:b6:bd:
                    c3:96:49:4e:cd:3e:cd:7f:c7:83:c9:d8:86:74:dd:
                    2a:80:54:54:11:af:86:7c:04:65:d8:e8:2f:46:b8:
                    45:36:c3:66:9b:1e:13:e1:42:b7:9d:eb:38:64:52:
                    cb:c2:17:6b:ad:94:ed:78:c6:84:f2:2e:7a:e3:84:
                    a5:7f:3b:87:01:3f:5b:d1:a1:a2:e1:ec:9b:ad:5a:
                    e7:c5:b3:38:6a:78:cc:c6:97:29:07:7d:0a:4d:20:
                    b8:57:f7:44:e6:06:ca:46:4c:d8:0a:8a:bc:06:6f:
                    69:96:a7:2e:c7:8f:79:ed:42:48:c4:0b:6f:74:b3:
                    5e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B6:87:6F:EA:4A:97:E4:F6:BB:5F:BF:00:0F:9B:69:6A:B6:5E:7C
            X509v3 Authority Key Identifier:
                keyid:1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ed:2d:99:05:cd:92:bd:f4:57:40:f9:6f:37:72:db:02:79:
         ed:a0:dd:e4:e9:77:1f:dc:63:96:3a:3e:55:6e:dc:eb:52:bc:
         90:f0:70:fe:72:22:30:1e:e7:62:4c:db:69:3c:bb:86:b3:e0:
         88:b7:ac:8a:c1:4d:db:f0:70:48:da:de:6e:71:b1:82:e6:7d:
         e3:ac:66:1b:f6:ff:89:6d:fa:35:2e:4e:c1:ae:1a:a7:4d:3c:
         0b:ef:24:f3:fa:98:77:d2:b8:5c:e4:5b:06:26:11:bd:ab:31:
         90:64:55:ec:0f:29:35:ae:86:7a:09:26:10:97:d2:3d:10:4e:
         f1:c5:37:fd:87:f0:17:6e:14:7e:41:13:d6:47:85:17:63:ca:
         e9:e2:c0:b1:df:0c:c1:3e:91:4c:59:53:80:87:8d:3c:1f:89:
         0d:22:53:20:2e:31:c7:d7:fb:93:8c:a4:3e:2f:1f:8e:e8:0c:
         0b:ed:e6:ff:cf:57:d4:47:f7:aa:ea:1b:ba:1e:72:b7:57:7d:
         65:ef:56:56:9e:ef:72:2f:71:fb:6a:16:1f:00:fa:57:dd:67:
         11:10:14:34:7d:00:84:a0:62:ef:69:1e:79:b1:1c:59:68:5c:
         eb:55:8e:7e:b4:f1:42:b1:ec:a4:62:d0:33:68:58:49:9d:86:
         ef:9d:69:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:53:22 2026 by rpki-client