Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
File:                     GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft (raw, json)
Hash identifier:          2QFXBPzW7FgFu40ZQ8OTL1thJ9hH3amnnA4fDFkR5QA=
Subject key identifier:   50:CB:34:5C:11:03:24:C7:D8:17:4F:02:19:32:66:22:23:B5:A9:F6
Authority key identifier: 18:8A:87:AB:79:10:19:37:93:B8:AA:6C:3C:1E:E6:6B:DB:06:A7:1F
Certificate issuer:       /CN=188a87ab7910193793b8aa6c3c1ee66bdb06a71f
Certificate serial:       019EC0DBBB05558C6E557144FC41E2757DF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
Manifest number:          01DC
Signing time:             Sat 13 Jun 2026 12:01:26 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:26 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:26 +0000
Files and hashes:         1: GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl (hash: Zti58sFWyh1Y9uMicVKhiZB98lqB9+9HNijHVOKzt7c=)
                          2: dKUSVy6IdXXRjgtpigNGU0J9jeU.asa (hash: CejzruUkEWq9zLEaoAabqikLpPGhjf75ZRntC5aAVpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:bb:05:55:8c:6e:55:71:44:fc:41:e2:75:7d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188a87ab7910193793b8aa6c3c1ee66bdb06a71f
        Validity
            Not Before: Jun 13 12:01:26 2026 GMT
            Not After : Jun 14 12:01:26 2026 GMT
        Subject: CN=50cb345c110324c7d8174f021932662223b5a9f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3d:4d:13:af:77:92:5f:09:0b:0c:60:8f:92:
                    62:91:fe:47:82:e7:41:d9:47:40:f5:38:fb:96:cb:
                    ec:ff:f3:d7:ca:f1:6c:cc:0e:12:e5:51:50:f5:ec:
                    db:9a:95:97:44:13:d8:52:f2:39:58:03:16:b4:7e:
                    19:8b:9a:1d:65:c6:73:6a:5b:60:11:23:bd:5b:b1:
                    a7:07:38:ff:32:50:1c:ba:6a:df:72:5d:28:37:0e:
                    21:13:10:d7:14:ea:8a:90:4f:f6:4d:fe:fc:09:e4:
                    65:fa:a7:be:f8:5d:7f:02:c4:d5:cf:66:c4:6a:a4:
                    61:ab:b1:a3:96:f8:c9:22:1f:f0:bf:40:79:aa:6d:
                    ef:7d:40:0b:c5:6a:c2:ca:f6:dd:5a:12:25:df:a5:
                    c9:1a:32:ec:9c:e1:83:e6:78:97:3e:a4:be:95:40:
                    db:2b:0f:5b:65:d8:ec:68:d5:15:f5:c0:27:90:1c:
                    31:bb:3a:29:e3:36:ed:e3:66:b8:fe:95:bb:9d:e0:
                    46:59:f9:c1:61:5c:71:59:ae:fc:40:84:84:43:e2:
                    37:c6:ee:c8:d0:dc:15:1b:f6:cf:30:07:7e:dd:f3:
                    71:f9:ac:6b:0b:4e:d3:7a:16:2e:cf:13:8a:e1:8c:
                    f3:4d:61:b4:37:30:94:8d:40:7a:84:92:86:70:73:
                    f0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CB:34:5C:11:03:24:C7:D8:17:4F:02:19:32:66:22:23:B5:A9:F6
            X509v3 Authority Key Identifier:
                keyid:18:8A:87:AB:79:10:19:37:93:B8:AA:6C:3C:1E:E6:6B:DB:06:A7:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:20:3f:ae:c4:c3:4f:2a:51:38:0f:c6:4c:33:ad:36:d4:cf:
         39:94:d3:bc:84:09:e8:5a:7a:12:8b:61:fb:1d:64:22:f0:e3:
         95:53:0a:4f:3a:87:55:f7:b2:41:11:d8:0c:d3:a2:06:50:50:
         a4:55:bb:b8:98:35:a9:b9:98:c8:42:b0:6c:99:76:69:75:97:
         79:ef:6b:3e:f6:b1:37:dc:45:8c:a9:e9:10:e4:00:1c:ea:ce:
         c9:4e:05:65:f5:fa:b8:a0:2d:c5:86:9c:6c:04:90:20:26:cc:
         73:4f:82:e5:e4:e4:74:86:8c:a4:8a:31:ca:12:8c:c8:3a:ee:
         7a:af:a3:d7:38:2d:aa:16:08:09:78:54:02:80:24:0e:2f:b4:
         05:cb:2a:32:39:d9:a8:c8:d1:a3:c4:25:75:d4:a7:fa:40:cc:
         62:3d:54:54:d1:c9:8d:04:a1:81:f1:6e:36:ab:ee:c5:de:8d:
         72:ed:b9:67:4f:bc:3e:77:ff:35:92:af:14:d4:a0:8f:bb:a9:
         46:eb:ef:6a:20:c3:4c:ab:0a:18:ff:c1:f4:b3:2e:d6:43:b6:
         ca:32:56:a0:f3:ce:aa:c0:a1:0e:c1:96:b3:65:ad:a1:a2:a3:
         99:9c:90:0b:06:92:90:2e:26:7d:23:35:b1:4d:dc:05:66:a5:
         8a:0a:08:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:40:35 2026 by rpki-client