Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
File:                     Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft (raw, json)
Hash identifier:          vC335K81YRqe9AeJVzfaUzs1imqkyj+BL4eFQqqW9hc=
Subject key identifier:   E3:0D:71:3B:A4:87:0A:19:E0:A7:C7:13:67:84:2C:9F:81:1C:71:BE
Authority key identifier: 1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43
Certificate issuer:       /CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
Certificate serial:       019D9B878E4CC4D1AA64E9609B2263369167
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
Manifest number:          18BF
Signing time:             Fri 17 Apr 2026 13:00:45 +0000
Manifest this update:     Fri 17 Apr 2026 13:00:45 +0000
Manifest next update:     Sat 18 Apr 2026 13:00:45 +0000
Files and hashes:         1: Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl (hash: dXYpaXqyf0gMER+BQx9ibeuRiaboi7H9S0dS74LBGyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:8e:4c:c4:d1:aa:64:e9:60:9b:22:63:36:91:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
        Validity
            Not Before: Apr 17 13:00:45 2026 GMT
            Not After : Apr 18 13:00:45 2026 GMT
        Subject: CN=e30d713ba4870a19e0a7c71367842c9f811c71be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:71:b3:0c:37:e2:38:cc:c0:df:d9:2b:18:9d:
                    2a:69:6f:a5:7d:7d:06:aa:bc:ba:d0:07:63:fc:12:
                    19:44:3d:89:6e:e8:1f:14:e2:5d:8c:13:40:6f:af:
                    12:19:e9:d1:67:94:80:81:30:84:b1:7e:ad:92:fe:
                    3d:21:34:4b:e8:4b:d6:2c:8f:2b:00:d9:54:27:c8:
                    10:d3:ea:ff:f5:dc:68:6d:58:4e:26:5e:15:f4:d0:
                    9c:90:36:28:b7:7b:20:54:77:64:24:2f:65:a3:e4:
                    f0:8b:66:16:cf:92:78:43:de:02:1f:8e:6f:6f:87:
                    4e:a9:58:2b:27:83:7b:31:56:43:81:a1:a5:e6:97:
                    49:48:38:80:b0:cd:09:a3:6d:12:52:f7:9f:93:2e:
                    74:2f:2e:4e:e0:fa:29:db:6d:0a:07:3e:c6:fa:42:
                    20:b3:80:b1:bf:e2:8f:ac:47:bf:c4:03:47:a6:d7:
                    ef:62:bf:fe:83:35:b5:42:56:89:2f:12:5c:c0:4f:
                    0c:59:64:b1:13:c8:89:c2:40:3f:e4:c6:97:37:af:
                    3e:6f:c9:80:ce:85:24:83:eb:18:7b:c5:22:e2:d4:
                    1b:ad:be:5d:29:9a:ba:b1:03:18:b0:20:d8:b9:95:
                    b3:54:87:84:de:ee:6e:a0:17:a7:5e:f3:db:7b:2a:
                    7c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0D:71:3B:A4:87:0A:19:E0:A7:C7:13:67:84:2C:9F:81:1C:71:BE
            X509v3 Authority Key Identifier:
                keyid:1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:c3:2e:7a:90:81:41:b9:aa:2b:ba:dd:8e:e6:30:5a:89:ba:
         87:4c:2b:b0:25:38:7c:fb:83:cf:43:c3:aa:e9:b4:02:74:d9:
         41:d5:22:88:ff:e0:91:84:a2:4e:e6:ce:32:c4:99:d9:dc:3e:
         b6:9d:0b:b3:1d:14:13:65:2a:f2:ed:42:6f:9f:3b:a7:d2:4e:
         a3:71:57:0d:eb:f7:1e:56:c0:5d:99:43:fd:ae:d3:02:8f:8d:
         ea:f2:11:cb:46:c2:fd:04:b5:f1:f0:b3:1d:1c:42:c7:d8:2a:
         4b:71:57:dc:e6:98:ae:0d:64:65:28:e2:56:6e:62:39:8d:d5:
         17:a7:dd:aa:71:1f:e4:54:49:65:a0:83:35:8d:84:ad:76:75:
         ba:43:32:7e:d3:7c:16:4d:95:97:57:ac:6e:ad:ba:55:e2:31:
         b5:82:18:71:cc:85:f8:50:8c:57:7f:12:96:a6:52:88:b5:4e:
         a9:df:bb:2c:be:50:4c:6d:b7:ae:2d:f2:c3:31:75:e7:86:df:
         c7:8d:dd:4b:cd:24:a3:df:77:f5:1e:5b:19:e2:4d:91:32:92:
         f2:ce:8c:6d:e1:40:4e:15:a9:cb:3b:3d:ed:d1:0c:ae:cd:03:
         92:63:52:d8:f9:4d:5c:6d:14:8d:c1:be:5a:f9:90:7c:34:42:
         85:53:b1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:45:44 2026 by rpki-client