Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
File:                     gHmvy6Wodi-3n05eDXo17oTNPfQ.mft (raw, json)
Hash identifier:          bhos1sTb5EYGnTHmLp4aJXtJwZCvm/EIg5K4NDsSn9I=
Subject key identifier:   08:FC:41:8A:97:A0:89:E3:18:E6:2D:9C:54:31:77:29:AA:1F:DC:FF
Authority key identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
Certificate issuer:       /CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Certificate serial:       019DA53003427B5C516B6EDB7B351B4637B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
Manifest number:          0F44
Signing time:             Sun 19 Apr 2026 10:01:20 +0000
Manifest this update:     Sun 19 Apr 2026 10:01:20 +0000
Manifest next update:     Mon 20 Apr 2026 10:01:20 +0000
Files and hashes:         1: 3WDU47d2fLscnSW7F3hgvaXG5ss.roa (hash: BfORbJGgiA+wWZ0EeMRYkEWvSYxDk7NkNvd7Q4xSZco=)
                          2: C5clDNKWWV0HBKYFKcpzORw8EhA.roa (hash: XUJvNLXyYDdL2C6nEB+rx6DsIA04Nnq77ZyzZhlVv1Q=)
                          3: E50tmVkqcKJ8hvkMgzElVUsN-nk.roa (hash: v6/X+2RH7lba53xOm7erhTp0p/yhNOGtKRcVvRlqm6o=)
                          4: gHmvy6Wodi-3n05eDXo17oTNPfQ.crl (hash: bBWodDRzFiOO4OwKvD6FAVh7WZnDEbdWw1xAXEYeTy8=)
                          5: ppKOK1k4bpVipnmImPdupSEmNC0.roa (hash: F13uVr28Hl5+Q/lhAirlIzj/fvyS+AXLflKOQ84sZ2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:30:03:42:7b:5c:51:6b:6e:db:7b:35:1b:46:37:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
        Validity
            Not Before: Apr 19 10:01:20 2026 GMT
            Not After : Apr 20 10:01:20 2026 GMT
        Subject: CN=08fc418a97a089e318e62d9c54317729aa1fdcff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:96:b8:11:8d:50:9f:8f:04:2a:99:76:0f:ad:
                    58:6f:4a:30:25:9a:7f:b0:c4:29:aa:9c:b6:c4:ec:
                    87:e9:a3:be:13:a1:53:fc:07:9f:55:69:bc:f6:e8:
                    5d:00:4e:e6:a5:a5:30:a1:72:ff:7c:84:8d:74:e6:
                    d2:94:b5:bb:7a:c3:c2:5d:1b:8a:a5:65:d1:50:06:
                    90:b3:cb:33:0c:95:b8:a8:fb:d7:6f:22:ad:09:90:
                    01:f4:18:fc:b3:a7:7e:3f:ff:e0:5b:74:f5:45:8d:
                    5c:c4:55:da:08:53:40:48:10:02:05:a1:1f:f5:fa:
                    f1:56:f0:1b:22:3e:16:79:d9:06:13:50:54:09:57:
                    34:16:26:e0:16:a3:15:44:c0:a8:d7:2f:d9:22:23:
                    a0:42:cb:04:28:26:8e:b9:13:97:66:73:62:22:73:
                    ca:ce:72:25:23:bc:c9:09:35:51:0e:9b:de:7f:5d:
                    f3:05:c7:8c:4f:95:af:8d:6c:1b:12:5f:00:5e:d0:
                    fb:b6:dd:a1:0b:93:18:0f:18:7a:ec:1e:29:bf:32:
                    0e:a5:20:72:e6:75:d3:77:2f:54:12:42:f2:90:09:
                    1f:87:66:a8:2d:0d:1a:a0:09:30:8e:20:ba:d3:2b:
                    20:9b:e5:01:1b:32:7b:80:c9:52:61:2f:ad:70:6c:
                    18:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FC:41:8A:97:A0:89:E3:18:E6:2D:9C:54:31:77:29:AA:1F:DC:FF
            X509v3 Authority Key Identifier:
                keyid:80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:32:f6:a0:eb:81:ab:27:74:f1:17:84:e1:b8:06:11:48:5f:
         b4:86:48:a7:d7:f7:9f:15:f8:14:66:71:ec:95:20:d1:2a:19:
         0d:cf:ab:c8:e5:ed:2c:48:a9:24:00:71:40:8b:e9:5f:7d:2f:
         95:af:b5:a6:69:ad:3a:14:e4:5e:f7:90:e4:5d:b3:10:64:47:
         ac:6c:c8:3c:ad:15:d0:3b:de:c3:cb:73:dd:5d:91:9b:5d:47:
         43:2d:54:dd:65:bc:a7:c7:e0:cf:f1:63:6a:5a:67:52:d6:f2:
         a3:13:f5:9b:ff:23:f7:92:5a:ee:94:d1:24:87:d7:40:35:df:
         6f:cc:9b:e5:46:e9:34:c6:3d:57:53:5a:90:f1:21:04:7f:73:
         37:67:73:15:a6:cf:a7:8a:7b:57:19:64:0d:8b:25:e8:9d:f6:
         b2:99:ac:7a:57:45:3c:24:d6:c8:7f:a1:6b:2f:78:e1:13:b8:
         c9:23:7b:5a:29:f5:51:c6:7e:d6:a5:93:03:71:a0:2e:8b:83:
         f5:c8:8f:aa:90:59:81:59:c9:b3:94:92:d2:7d:4e:d9:cf:6f:
         81:e6:e0:36:49:4a:1c:85:36:93:87:16:d9:e9:53:37:05:2f:
         39:81:d8:c4:03:38:20:0a:12:d9:88:a1:73:d1:7b:d9:ea:a7:
         8b:ef:7e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:17:25 2026 by rpki-client