Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
File:                     GmoUZyI70xUQwU8hvTPX12mCnSg.mft (raw, json)
Hash identifier:          adwwVUkc2B/+YxJj+7FHX2KgFHbxoWlMOeqA28W55Jo=
Subject key identifier:   A3:F6:17:C9:67:D9:3B:0B:59:AE:03:1F:11:CF:0D:3E:4E:A7:D1:84
Authority key identifier: 1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28
Certificate issuer:       /CN=1a6a1467223bd31510c14f21bd33d7d769829d28
Certificate serial:       019EC41313B12B2AAFE70B576D677DA966CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
Manifest number:          0357
Signing time:             Sun 14 Jun 2026 03:00:44 +0000
Manifest this update:     Sun 14 Jun 2026 03:00:44 +0000
Manifest next update:     Mon 15 Jun 2026 03:00:44 +0000
Files and hashes:         1: GmoUZyI70xUQwU8hvTPX12mCnSg.crl (hash: LU8X7bsIcw5F6PnW7OBwIgvgamHrSwbsyqIQ/r6Y0ro=)
                          2: yMHe_AcZ7t0DOCfavN3ISgqxc3c.roa (hash: 9DwkTaaH9QdGqF+hvGsRneF8svXbKCB6hQgeZ0/mVuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:13:13:b1:2b:2a:af:e7:0b:57:6d:67:7d:a9:66:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a6a1467223bd31510c14f21bd33d7d769829d28
        Validity
            Not Before: Jun 14 03:00:44 2026 GMT
            Not After : Jun 15 03:00:44 2026 GMT
        Subject: CN=a3f617c967d93b0b59ae031f11cf0d3e4ea7d184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:03:1d:b6:1b:89:51:fa:f8:ca:2c:ce:a5:11:
                    dd:de:c9:46:77:3e:d5:1b:96:f4:d5:e5:52:4a:3b:
                    c8:21:17:8a:0e:5f:bb:2f:61:f0:8e:41:21:d0:8b:
                    77:00:4b:c6:92:c3:b5:14:11:f9:92:f2:dc:d1:f7:
                    68:a3:0d:75:fc:03:90:60:96:8a:0c:f7:43:47:02:
                    f7:1a:16:9c:8b:dd:e2:b3:45:d3:12:2a:31:fe:7a:
                    31:11:90:6d:2b:a7:b5:d9:f2:aa:99:5f:63:77:c7:
                    fc:d3:90:0c:5b:05:41:51:02:9a:c7:82:07:90:31:
                    31:3e:39:bc:54:5b:24:fd:2e:1a:bc:25:05:61:e4:
                    ee:71:ec:72:35:ad:0d:1b:b6:85:0a:9e:95:a8:7d:
                    30:d9:50:3b:47:21:6d:be:23:61:f7:15:e5:47:c1:
                    fd:89:04:98:aa:de:55:d3:c8:28:e6:d0:d7:4e:94:
                    3c:bc:54:29:54:ac:17:4b:28:a6:59:59:a2:d2:87:
                    b9:6d:30:00:7f:cf:a7:fd:a5:05:02:b0:76:26:6f:
                    d1:55:87:67:35:dc:0d:47:b3:66:9f:a3:a5:a3:7d:
                    35:d7:bd:e1:c9:35:59:b5:ac:8f:1c:ce:f7:38:98:
                    48:ff:5b:4e:39:60:2b:c5:11:05:6c:19:f9:a3:8a:
                    83:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F6:17:C9:67:D9:3B:0B:59:AE:03:1F:11:CF:0D:3E:4E:A7:D1:84
            X509v3 Authority Key Identifier:
                keyid:1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:bb:33:9b:d8:65:22:16:7f:97:2d:75:59:97:81:ef:9d:53:
         bf:77:b3:23:06:56:43:e9:92:7c:33:02:ea:bf:97:4c:38:33:
         b1:d5:de:8f:c3:9f:c8:d2:01:cc:52:65:19:0e:40:5f:d1:41:
         70:76:fe:26:97:28:0d:8c:9c:37:9b:81:ff:0d:f7:8c:8a:c8:
         48:2b:c0:e8:79:14:16:9e:5e:50:3b:c7:b9:aa:c8:e7:4c:2a:
         c2:70:57:69:20:6d:f8:5d:2a:e1:3c:09:37:76:a0:e0:e9:55:
         97:21:b2:35:19:16:b7:57:32:32:77:ad:81:d3:fa:25:61:28:
         13:6c:48:4c:e6:cf:c7:3b:66:a3:ec:17:fd:d5:b4:36:66:d4:
         e0:53:31:fb:4a:24:06:80:63:97:d1:4f:93:76:38:42:29:fc:
         8b:bd:2f:e2:6e:29:eb:c5:73:be:07:0e:f9:a0:5e:1c:1d:d0:
         c5:42:e7:23:61:57:b1:8a:8c:12:d8:fa:c8:b4:10:38:4a:9b:
         00:39:19:1b:27:f5:88:51:db:d1:90:f9:21:a4:93:a9:8a:ea:
         bb:7a:63:40:56:77:ca:8e:54:45:80:a0:1a:5e:9b:14:97:8c:
         fb:a5:d9:fe:cb:14:ba:5d:89:c9:65:4a:ee:2a:d8:76:ec:df:
         b2:aa:49:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:13 2026 by rpki-client