Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
File:                     gWZdbPJtk3SE27RjN0PgZX7M3F4.mft (raw, json)
Hash identifier:          hgcJqkcj6zy04SONBeSbQKl3MQIdKZpHyM3O4KE2Hic=
Subject key identifier:   30:A4:F0:2D:9D:27:A7:FE:59:AE:B5:7E:95:E9:D1:B4:A1:8A:5F:41
Authority key identifier: 81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
Certificate issuer:       /CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Certificate serial:       019EC1124A68E6A00C05221185F6A019B753
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
Manifest number:          1928
Signing time:             Sat 13 Jun 2026 13:01:01 +0000
Manifest this update:     Sat 13 Jun 2026 13:01:01 +0000
Manifest next update:     Sun 14 Jun 2026 13:01:01 +0000
Files and hashes:         1: 5st_HHpLD54WE6_4L8XNFgUjL_w.roa (hash: JHjXO9P1p0iqaGPwSoXPmKvMaRiV2yvxi6yn0kC2stg=)
                          2: gWZdbPJtk3SE27RjN0PgZX7M3F4.crl (hash: ye/ExWzfF+l9qU5+Y5OGVHZ+Gj8+ETedmzRrGV+99CA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:4a:68:e6:a0:0c:05:22:11:85:f6:a0:19:b7:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81665d6cf26d937484dbb4633743e0657eccdc5e
        Validity
            Not Before: Jun 13 13:01:01 2026 GMT
            Not After : Jun 14 13:01:01 2026 GMT
        Subject: CN=30a4f02d9d27a7fe59aeb57e95e9d1b4a18a5f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4c:d7:d5:71:3d:03:67:b9:cc:0d:a6:c4:c2:
                    b1:13:ae:35:7b:98:0f:de:b0:e7:89:2e:2c:09:7f:
                    78:1f:11:33:9e:2f:f8:33:56:c4:3c:90:9c:b6:fc:
                    34:84:d1:76:37:c0:df:9b:1f:94:0a:8e:03:94:53:
                    54:25:b0:7b:d4:34:d5:32:86:70:5e:45:9c:fe:6e:
                    b8:be:fe:24:ed:27:0b:c9:19:5d:f3:9a:11:8d:3c:
                    7e:9c:56:5c:ae:cb:33:b2:b7:04:3e:ee:a0:24:c5:
                    15:39:04:a6:5e:dd:37:7c:ac:f1:20:ac:55:b2:b6:
                    f9:88:83:ff:91:8e:8b:a7:b8:ee:8f:d7:71:53:be:
                    6b:5c:6c:a5:4e:2a:a7:72:26:9d:79:ad:a0:e0:ad:
                    d2:3c:85:11:aa:2e:b9:b7:94:89:b5:3f:90:75:ac:
                    ee:f7:9a:f6:fa:cf:ea:21:4d:fd:94:69:36:ab:c3:
                    55:b9:f2:b9:18:96:cd:a4:5a:c6:37:cb:30:96:0c:
                    85:cc:6b:06:0b:d9:34:12:e0:8a:0d:01:bf:b8:e8:
                    bf:e7:38:2c:86:49:0c:cb:74:6b:7c:dd:2f:0d:79:
                    4f:89:06:6f:0f:87:36:5f:bb:e1:dd:01:72:0f:75:
                    eb:a0:b9:9d:32:4c:e2:70:cf:77:10:6f:d5:5a:cb:
                    1f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A4:F0:2D:9D:27:A7:FE:59:AE:B5:7E:95:E9:D1:B4:A1:8A:5F:41
            X509v3 Authority Key Identifier:
                keyid:81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:59:35:74:f2:bf:5e:33:fe:96:25:35:f8:6a:5f:1a:75:7b:
         c5:2f:7f:df:83:fa:ba:ba:3c:e5:d1:17:66:f0:c0:86:fa:cd:
         e9:ed:d4:11:f2:a6:30:37:0d:d7:19:2c:f8:6a:29:f6:0f:82:
         df:3e:2b:02:1b:3d:bb:60:01:8c:00:1b:e3:f4:2e:b1:1c:3a:
         7f:70:db:11:6c:5c:3f:0d:e3:46:6d:32:1d:1e:b7:71:fd:58:
         55:35:92:60:1a:88:a1:6d:ba:c1:cf:29:16:8f:c5:33:fc:42:
         81:44:47:87:87:b5:d1:ad:50:71:8a:b6:5b:cb:f9:ac:e4:a9:
         a8:38:4a:c7:8f:95:7b:ab:6d:df:3c:47:43:8a:ad:98:33:12:
         29:80:f6:c0:01:91:40:48:6b:fc:d5:16:c2:09:05:b9:b4:34:
         65:59:31:8f:e0:61:50:c6:37:fc:3e:63:66:d8:f7:22:6c:8b:
         44:6d:89:7f:b9:e2:2c:a7:1b:d9:61:a9:7c:f1:a3:82:00:3b:
         f7:1a:50:12:a9:77:87:c3:61:c5:2b:c3:e5:0a:61:35:dd:6e:
         cb:fa:51:4d:80:38:3b:52:a7:8b:f9:cd:61:f8:bc:35:08:57:
         1f:bb:2e:52:4c:4a:47:79:91:64:de:e3:42:fc:d6:42:88:b8:
         6c:50:e2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:30:13 2026 by rpki-client