Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
File:                     GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft (raw, json)
Hash identifier:          QBkwcjeKYozaCcIGgp1fTuUq7xjqf37oLHjomqEsiIY=
Subject key identifier:   4B:4E:91:D9:62:94:1F:81:C4:DB:EE:06:3B:BB:BF:22:97:25:23:D0
Authority key identifier: 19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C
Certificate issuer:       /CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
Certificate serial:       019EBFC88C5810140A65248F87366B209903
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
Manifest number:          04EE
Signing time:             Sat 13 Jun 2026 07:00:51 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:51 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:51 +0000
Files and hashes:         1: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl (hash: k8zB5C4Nb5BXbzN3nZQ6hwb8Qi0doWOoSYS719iXb14=)
                          2: aKJTM1Uf5WiFwk0xaQDn_EEx6LY.roa (hash: Bk0oWK0Lkt5p+4sdJT9WxyXxSp/0EFpvdzicJ3h6H0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:8c:58:10:14:0a:65:24:8f:87:36:6b:20:99:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
        Validity
            Not Before: Jun 13 07:00:51 2026 GMT
            Not After : Jun 14 07:00:51 2026 GMT
        Subject: CN=4b4e91d962941f81c4dbee063bbbbf22972523d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:05:fb:45:cf:0a:1d:6d:3e:bd:6b:fc:e1:a8:
                    83:0a:f3:b2:45:0e:37:03:07:99:3e:3c:5e:b7:9f:
                    38:47:f6:96:7b:07:37:4d:b7:ab:4f:35:ef:14:2a:
                    bd:85:b6:dc:18:31:6e:3f:59:2d:e4:95:18:4b:25:
                    9d:84:cd:da:16:7a:70:ea:93:4d:9d:27:fd:41:27:
                    aa:63:38:de:a5:b9:15:cb:35:88:05:f0:03:e6:40:
                    46:da:ad:99:82:4d:36:83:85:16:4b:a6:1d:6a:5f:
                    46:3e:fb:1a:fe:13:96:d7:c7:cb:c3:1f:8f:ff:e0:
                    7f:03:fb:80:c7:f2:c6:55:3d:07:2f:98:30:09:b3:
                    7c:5b:53:d1:38:d0:85:00:7f:20:c3:74:6b:56:43:
                    de:a3:aa:54:bc:53:fe:47:13:e2:92:a9:f3:1e:20:
                    af:a5:4b:8a:43:a1:ac:6e:5d:96:e5:8c:10:f4:4e:
                    84:a6:14:0d:e6:68:4a:64:48:43:c2:63:ea:21:6c:
                    61:5e:5d:62:75:40:92:9f:26:8c:b4:6c:56:ab:0f:
                    bb:a8:20:59:3a:d2:4f:c6:87:9d:6b:e2:14:11:8b:
                    f3:a9:ed:27:a4:6f:f1:12:58:42:3f:58:08:a4:8d:
                    32:da:ec:73:97:21:ea:5f:3f:bd:c0:43:3c:11:ce:
                    fc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4E:91:D9:62:94:1F:81:C4:DB:EE:06:3B:BB:BF:22:97:25:23:D0
            X509v3 Authority Key Identifier:
                keyid:19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:dc:bb:db:98:12:56:c0:59:2a:fc:d3:42:95:3b:57:34:6d:
         0e:25:5d:33:13:a8:2b:f6:dd:75:3a:d1:be:6f:bf:dd:7b:fd:
         59:5b:64:c1:88:6f:df:12:f6:17:f4:2f:b9:f3:01:98:a3:c8:
         91:6c:d3:b3:cc:3f:94:cc:12:e4:6a:65:a1:b7:83:74:42:9f:
         34:24:24:84:64:8d:ee:b0:c2:36:2c:88:2d:c8:87:41:84:46:
         90:2e:4c:52:bd:c6:e6:2f:91:9a:34:41:64:65:b8:3f:8e:ac:
         45:e0:f2:62:20:b1:63:80:7e:27:17:eb:b4:6f:7c:7b:f5:75:
         1c:65:4e:0d:52:48:a3:b3:40:92:e7:ee:21:4f:4e:32:aa:12:
         73:ce:b0:44:26:e2:6b:69:91:b3:48:dc:fd:f9:f8:33:39:e9:
         15:4d:a7:09:b1:fa:05:54:2b:a2:de:9e:57:50:84:93:23:5b:
         e3:4b:4e:54:1c:e3:4e:4b:87:8a:73:74:8b:06:ae:85:d9:5b:
         7d:64:51:a6:70:3d:e2:fd:94:8d:31:8e:4f:b3:92:2a:16:f2:
         02:f5:85:74:8b:be:27:6f:1c:c5:08:e3:81:7e:63:81:2a:c9:
         52:61:81:5b:f2:45:de:9b:f8:27:a5:d7:a3:d1:d4:c3:05:bb:
         48:8d:37:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:09:26 2026 by rpki-client