Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
File:                     GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft (raw, json)
Hash identifier:          I0R52k/jgT98QP9GjBrvr0vIXT9FxJS7gBUQgGxxymU=
Subject key identifier:   C3:B1:37:04:8E:6B:81:10:64:13:CC:46:86:91:06:C4:C4:66:2B:85
Authority key identifier: 1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F
Certificate issuer:       /CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
Certificate serial:       01A08A1E90C05B89512D9C95025038CA4AF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
Manifest number:          19DA
Signing time:             Thu 10 Sep 2026 07:00:53 +0000
Manifest this update:     Thu 10 Sep 2026 07:00:53 +0000
Manifest next update:     Fri 11 Sep 2026 07:00:53 +0000
Files and hashes:         1: GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl (hash: 6ZYTgA/LTGdHQnYDuXZxrkjRjl3miv/q5MGi4kUzCAE=)
                          2: O1x05-HbZz9z_RAG_UsW8fq9KnQ.roa (hash: RqXyqzQCK+VpxYKPTIZPxW8p4AdlK8gMbx5a8aqVV1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 07:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:1e:90:c0:5b:89:51:2d:9c:95:02:50:38:ca:4a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
        Validity
            Not Before: Sep 10 07:00:53 2026 GMT
            Not After : Sep 11 07:00:53 2026 GMT
        Subject: CN=c3b137048e6b81106413cc46869106c4c4662b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cd:e1:49:ef:6b:7d:1d:a7:f6:f6:97:c4:98:
                    04:61:ae:3f:7d:ba:79:6c:c8:c0:11:35:2b:45:a7:
                    6c:66:5b:3c:3f:d3:9d:fb:8e:ee:3d:c8:20:a3:84:
                    86:4a:2e:57:72:46:ba:03:6e:a5:76:c9:28:c0:3c:
                    79:95:50:78:da:ea:d5:a0:2d:55:8d:96:cc:9b:6e:
                    34:b8:f1:85:c0:1b:fe:a4:49:be:f7:8c:4f:40:13:
                    78:a2:71:28:f6:29:1a:56:45:56:80:54:4b:ce:02:
                    42:c0:7f:59:fe:2d:58:e2:b4:0e:93:92:28:3f:2b:
                    12:1d:71:0a:40:48:81:76:59:41:fd:d0:cd:7e:d4:
                    ba:0b:c4:34:50:89:fa:7e:56:31:e0:f9:32:4b:c4:
                    37:a6:f3:ac:a2:b3:69:b4:14:db:10:c3:28:75:d0:
                    56:a4:d0:7e:df:a5:50:ae:64:7e:ff:e9:46:56:aa:
                    a0:44:77:b6:38:41:cc:19:8e:78:7a:96:7d:5e:c2:
                    b1:78:00:a6:c1:44:d6:18:d7:3c:f7:bf:84:a1:a8:
                    36:43:c4:85:7c:52:6a:63:a6:42:cd:7b:85:5c:a3:
                    e4:55:45:92:f7:bf:8c:1c:24:f3:18:43:a2:31:38:
                    31:53:5c:0b:a1:15:af:be:95:66:43:86:73:16:fc:
                    2d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B1:37:04:8E:6B:81:10:64:13:CC:46:86:91:06:C4:C4:66:2B:85
            X509v3 Authority Key Identifier:
                keyid:1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:39:96:46:03:e9:d5:c4:2c:65:27:d1:f9:db:c9:99:19:63:
         5a:89:87:1c:40:a9:0f:fe:c0:3d:c3:92:ab:88:1d:ba:cd:96:
         9c:b2:77:67:0b:7f:73:67:a0:a8:f7:60:2a:2f:c8:a6:3a:49:
         c4:4b:e1:9b:6e:3e:18:6c:13:40:58:d1:eb:5c:28:90:d2:9f:
         ee:c5:b2:57:80:c1:35:5e:02:01:33:eb:13:c2:ae:23:39:2e:
         21:d3:61:8b:85:95:9d:10:6e:20:ed:37:77:20:d4:64:ac:3d:
         2a:c6:ef:39:b5:a5:69:e1:e9:bd:79:2a:1f:1d:e3:02:c2:4e:
         f6:84:33:5e:54:dd:a1:64:d8:ea:f2:78:02:99:aa:35:c8:92:
         ef:52:c1:2e:e2:b2:52:e6:08:76:f6:bc:67:60:8d:48:59:e2:
         cd:58:12:21:81:e6:90:d5:dd:36:d2:03:fc:fa:8a:22:d8:c0:
         31:c3:40:68:ee:b7:89:83:7b:22:8d:b1:a6:94:49:2b:c3:dc:
         47:74:f1:4a:a5:35:0e:fb:fd:9b:b1:89:67:b1:c7:d9:ef:b6:
         67:f4:12:d9:0a:f6:cf:53:e7:39:ca:41:67:0b:0b:4e:41:94:
         47:39:2b:20:55:5f:34:71:d5:7e:2c:1c:01:71:a3:ac:ff:9b:
         c6:b7:f3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:49:52 2026 by rpki-client