Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
File:                     GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft (raw, json)
Hash identifier:          YDc0ehklHRlUNMMa9YeLmNgAAV6nw8zxgZ8zpLyPde4=
Subject key identifier:   60:14:7E:3D:CA:FD:7D:F1:DF:9C:23:DD:F8:2B:D8:4C:54:BF:C2:1A
Authority key identifier: 1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F
Certificate issuer:       /CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
Certificate serial:       019DA11C7476C35D52FB18E395683AEDC963
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
Manifest number:          1393
Signing time:             Sat 18 Apr 2026 15:01:29 +0000
Manifest this update:     Sat 18 Apr 2026 15:01:29 +0000
Manifest next update:     Sun 19 Apr 2026 15:01:29 +0000
Files and hashes:         1: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl (hash: uGOBzt34QoIQaNdw8tUxIrB+UANpdqH5iFm3kpz4+bM=)
                          2: VF3A5uqK3baTRWsNVPe20tVkhMU.roa (hash: oCRuLVCgV+aXZr+hRj4Ct4VJ7B5cjA1VYigwMKDagmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 09:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a1:1c:74:76:c3:5d:52:fb:18:e3:95:68:3a:ed:c9:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
        Validity
            Not Before: Apr 18 15:01:29 2026 GMT
            Not After : Apr 19 15:01:29 2026 GMT
        Subject: CN=60147e3dcafd7df1df9c23ddf82bd84c54bfc21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:51:93:f8:f3:e5:ee:f8:93:f7:fc:ff:e6:dc:
                    0c:ad:c1:10:53:6a:1a:b6:50:e8:2c:bc:8c:54:1f:
                    a7:8f:81:55:79:70:e0:93:97:ad:10:48:4a:3b:e0:
                    90:02:15:2c:16:23:43:ec:7f:2a:6b:06:36:3f:6a:
                    a2:1f:09:ce:31:de:e0:8e:69:71:9a:bf:83:e5:0f:
                    4b:10:56:cc:c0:ed:86:30:39:a4:bd:a5:ca:84:a0:
                    39:43:f8:7f:dc:ee:4d:cb:81:ff:7b:8c:a9:c8:15:
                    89:14:69:e9:09:4b:d9:37:c4:1c:d0:4b:8a:20:32:
                    e0:f7:4f:2f:11:e1:36:73:a0:b6:f9:b8:45:21:60:
                    f1:07:ff:c3:88:71:e9:9d:66:40:1c:02:d1:52:fb:
                    d1:13:6f:de:d3:1f:3c:53:0d:b6:b4:4a:15:1c:ab:
                    6d:90:a0:98:45:a6:0b:5e:53:e7:f2:a1:1e:d3:73:
                    76:54:de:11:45:b9:8e:56:c7:92:f0:1b:1f:a1:fe:
                    c3:bf:b6:8a:5d:cf:0d:06:38:b9:60:0d:cd:dc:37:
                    d5:2a:f3:04:c6:f9:a4:66:23:22:19:73:62:35:b2:
                    c7:b3:72:34:6b:ec:92:46:4e:d4:a0:80:71:e9:fc:
                    24:71:4d:aa:28:a1:4c:63:38:4f:a2:7f:b9:88:7a:
                    1e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:14:7E:3D:CA:FD:7D:F1:DF:9C:23:DD:F8:2B:D8:4C:54:BF:C2:1A
            X509v3 Authority Key Identifier:
                keyid:1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:3d:4b:4c:62:87:de:e9:14:ef:f4:fe:e3:a4:0a:a7:cd:66:
         f3:56:4a:48:82:e4:06:1b:f1:80:87:f5:4f:13:4e:5f:47:ba:
         78:e3:65:08:6b:6c:5f:17:d5:2f:8a:e3:80:1d:95:f5:42:43:
         53:07:a0:56:88:57:0c:b4:b3:df:b7:5f:8e:1a:92:ce:0b:f9:
         3d:4f:56:8e:77:c2:2b:95:0a:a9:19:04:0b:46:f3:af:78:39:
         66:72:87:89:3a:66:d7:39:8d:ff:ec:82:e8:d4:47:00:7a:47:
         aa:65:7c:f4:cb:29:99:f6:2f:62:f6:7a:45:cb:03:44:44:90:
         1a:68:39:e8:06:ba:44:ee:ee:8d:8e:0f:fa:03:3c:d1:4f:22:
         d7:b1:e1:12:b4:6f:18:62:57:30:b6:6d:e1:9f:ab:5b:7b:ea:
         a4:b4:ef:9c:40:86:e2:fe:26:2c:f2:d5:b5:96:76:0f:2a:ec:
         9e:c1:e3:11:7a:a4:4a:bc:ae:a8:0c:3d:1d:86:f3:f0:2d:44:
         98:4f:70:e5:1a:65:6a:45:46:76:52:94:d6:d5:0c:74:7c:46:
         a5:d4:59:35:97:0a:e1:d9:d4:1a:77:c1:d5:70:35:da:48:d8:
         4e:75:c9:95:ab:96:54:dd:43:63:d8:4e:d3:e9:8e:dd:3a:c1:
         37:c9:20:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 18:26:16 2026 by rpki-client