Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
File:                     gtqmUAcIPsylkSj9XwMdNQMrV0k.mft (raw, json)
Hash identifier:          65ztblnDLMwiT07FeC0eroviczZEPoSt3mqzqNiqANw=
Subject key identifier:   CE:2D:10:39:2A:D1:C9:76:CD:98:67:E6:23:F4:3E:89:7F:E8:E0:1C
Authority key identifier: 82:DA:A6:50:07:08:3E:CC:A5:91:28:FD:5F:03:1D:35:03:2B:57:49
Certificate issuer:       /CN=82daa65007083ecca59128fd5f031d35032b5749
Certificate serial:       019E9A3B5F2AEA265FDCA26A2D38DB252B03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
Manifest number:          51
Signing time:             Sat 06 Jun 2026 00:00:42 +0000
Manifest this update:     Sat 06 Jun 2026 00:00:42 +0000
Manifest next update:     Sun 07 Jun 2026 00:00:42 +0000
Files and hashes:         1: Qr6lJM203NhFGKZShnscSCdGFno.roa (hash: jbJSkdqG0TP7acpwCoEzRW1DcU+dJ+gbIy2PJggIZmM=)
                          2: gtqmUAcIPsylkSj9XwMdNQMrV0k.crl (hash: iVJQhTDXrhipQ3fUN+GjfjTbZKUX5yealgXpqjq6F54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9a:3b:5f:2a:ea:26:5f:dc:a2:6a:2d:38:db:25:2b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82daa65007083ecca59128fd5f031d35032b5749
        Validity
            Not Before: Jun  6 00:00:42 2026 GMT
            Not After : Jun  7 00:00:42 2026 GMT
        Subject: CN=ce2d10392ad1c976cd9867e623f43e897fe8e01c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9f:58:c0:88:a5:9b:06:51:81:34:dc:63:ec:
                    06:f6:f4:18:22:b7:b3:50:72:0a:52:0a:6d:2b:eb:
                    eb:64:83:54:ab:d2:86:ff:36:a6:71:26:86:c3:6c:
                    68:96:57:63:0a:9d:7f:5d:17:a7:ec:1d:94:6d:dc:
                    89:15:5d:f9:39:66:87:72:bb:2e:1c:b2:c2:17:67:
                    c9:3e:35:c1:c7:ea:d4:51:5a:11:ec:d6:ca:49:e8:
                    45:80:86:62:8d:f0:81:1a:6e:53:54:9b:ca:80:cd:
                    b9:2f:82:ad:6b:b8:1c:cb:f2:5f:50:67:d4:ed:4c:
                    fa:9b:99:82:70:1c:29:c0:a4:87:24:18:46:14:08:
                    45:69:07:11:ab:0e:ff:91:2b:7c:36:93:86:b2:f0:
                    f8:84:a7:54:27:e4:b4:61:41:5e:d3:97:80:31:3a:
                    79:f4:10:8d:d2:13:bf:07:67:05:05:f3:42:1d:3a:
                    05:0c:2e:90:97:bd:8f:5c:50:c9:ea:49:81:60:e2:
                    98:6f:dc:92:99:d3:10:c4:df:a5:95:f9:72:e6:5c:
                    b4:72:f3:24:63:f9:77:43:39:67:db:97:80:79:db:
                    bf:07:51:8b:f3:b7:5c:e8:79:d1:d3:a0:07:21:07:
                    da:11:59:33:c0:83:fe:08:34:ad:32:32:4c:b6:9a:
                    f7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2D:10:39:2A:D1:C9:76:CD:98:67:E6:23:F4:3E:89:7F:E8:E0:1C
            X509v3 Authority Key Identifier:
                keyid:82:DA:A6:50:07:08:3E:CC:A5:91:28:FD:5F:03:1D:35:03:2B:57:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtqmUAcIPsylkSj9XwMdNQMrV0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/625ad6-ce2b-4314-ac78-aa5aa6d74b4e/1/gtqmUAcIPsylkSj9XwMdNQMrV0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:3a:75:e7:7e:c1:c0:c1:7f:97:5e:6e:f3:ea:dd:b8:d5:8e:
         f1:f1:51:32:65:25:42:9f:13:08:94:c5:60:b0:95:0a:e6:41:
         a4:f0:5a:68:1a:e1:f0:0f:6c:88:79:d9:e7:11:7a:26:13:b3:
         70:72:57:53:dd:54:af:e1:e2:84:c5:72:1f:2e:82:e2:9d:0b:
         49:58:29:79:23:8c:15:ff:f9:b4:b1:84:5f:22:7b:ae:61:da:
         58:68:fd:e4:a8:36:44:07:90:e9:23:2a:1c:5a:aa:84:38:94:
         b1:50:54:08:38:60:9f:f2:99:dc:86:c1:e0:c3:7b:b0:de:36:
         04:6e:a4:85:92:ab:e7:84:c2:02:14:df:43:92:7e:25:26:7d:
         62:bc:76:62:cc:59:9e:69:ef:7f:4c:55:4a:d8:a2:c6:c4:e8:
         b9:67:b3:36:94:49:b8:3d:f5:a0:8c:62:73:9b:04:71:7d:62:
         8b:58:3d:6c:f7:6a:4b:05:fb:58:4f:ce:35:7e:95:24:02:f9:
         47:43:93:00:d3:c8:8c:1b:e9:d5:c6:64:0a:f9:71:75:18:15:
         b8:5e:e1:b1:d4:29:ab:b1:51:77:d7:18:89:79:06:56:8c:55:
         ef:cd:cc:c0:c0:98:2c:6d:fa:c1:93:a0:82:e1:01:f1:9a:ae:
         fd:f3:7d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:39:02 2026 by rpki-client