Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
File:                     GtwAk8WviUz1ILWTbjCyFQkN6fg.mft (raw, json)
Hash identifier:          +QHt9vwOtx79OLD4/BlJB05Q5YYzgpSExiBdQAf5iSg=
Subject key identifier:   52:8E:0C:AC:38:62:DD:B9:9B:0A:E3:44:82:CF:3C:12:1E:8D:86:E1
Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
Certificate issuer:       /CN=1adc0093c5af894cf520b5936e30b215090de9f8
Certificate serial:       019D9BF5AA51CCD5BE5AB0FE7910A0BC052C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
Manifest number:          1088
Signing time:             Fri 17 Apr 2026 15:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 15:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 15:01:01 +0000
Files and hashes:         1: 22DYdmOvCLM948EoyfkUAxlACZo.roa (hash: kciKnNjBgHwlkB4sn576VFqmz6xPQ5AioU9khsx436M=)
                          2: GtwAk8WviUz1ILWTbjCyFQkN6fg.crl (hash: XbKwk6B9NyQ/hRZjK6wwENmobZef8/Gyr/5AkGoUW/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:aa:51:cc:d5:be:5a:b0:fe:79:10:a0:bc:05:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8
        Validity
            Not Before: Apr 17 15:01:01 2026 GMT
            Not After : Apr 18 15:01:01 2026 GMT
        Subject: CN=528e0cac3862ddb99b0ae34482cf3c121e8d86e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:87:28:0d:17:b6:41:5b:c1:b9:8c:c8:5d:ed:
                    f0:ac:2b:ec:69:64:18:a7:8d:30:ae:a9:d4:bc:7f:
                    a9:28:d2:00:df:fc:48:d6:9b:18:5d:83:5c:3f:eb:
                    98:4b:b2:5e:89:92:cd:95:0e:0d:41:4e:ce:60:5d:
                    d7:8f:4e:68:54:6a:3f:f0:9c:b6:41:c5:7e:60:86:
                    98:e2:d6:1c:02:03:5a:be:9d:88:b8:46:28:1a:5f:
                    b8:ea:52:ab:e1:07:5a:a5:02:fc:da:c7:a2:91:2c:
                    a0:b2:f8:17:7c:63:66:1e:92:38:71:13:ee:70:30:
                    c6:f5:88:05:83:12:bb:3e:ee:42:e6:49:0f:48:7a:
                    85:2c:b7:e0:bc:17:91:b6:b3:07:94:28:05:5a:cf:
                    26:69:04:43:3a:63:d6:4e:97:b3:e5:7f:07:a2:a5:
                    3a:d9:03:14:5c:16:aa:15:65:7d:e7:a0:3d:86:65:
                    de:19:ab:e3:12:11:7b:93:de:b4:93:0d:ff:30:0d:
                    a4:e5:45:d5:c1:38:7a:fd:af:77:de:ac:96:e4:0f:
                    f4:8e:de:c1:d2:f5:de:d2:38:12:8c:dd:44:d0:c7:
                    5c:ea:78:59:43:7b:ce:3b:ae:46:20:9e:aa:28:9c:
                    f6:f6:e3:83:e8:7c:f1:3c:9a:98:10:74:f4:95:c9:
                    6d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8E:0C:AC:38:62:DD:B9:9B:0A:E3:44:82:CF:3C:12:1E:8D:86:E1
            X509v3 Authority Key Identifier:
                keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:92:b6:ab:08:39:3e:90:33:aa:90:94:d5:58:32:90:94:46:
         ee:7c:7e:8f:75:80:8c:1c:f9:71:08:49:37:d4:c3:51:7e:7e:
         6e:bf:ad:b2:bb:5b:1c:7a:53:44:c6:9c:cf:26:fd:de:bf:d9:
         f5:9a:ab:e4:36:b5:8b:20:ff:dc:64:9d:db:fc:db:43:3b:53:
         89:63:6b:d7:e2:62:23:62:f4:51:11:05:36:ef:1c:32:9a:d9:
         c3:64:d2:ad:33:6b:21:2f:40:42:57:f5:61:7f:b5:86:0e:6e:
         2a:0a:b9:12:98:67:a7:20:14:5d:d9:49:13:4d:6b:aa:51:70:
         f9:99:bd:ff:b6:85:2c:e3:14:92:83:8b:5a:c4:a8:f3:5e:98:
         0b:7a:e3:db:21:27:27:ae:3a:d1:3f:17:69:2c:06:d9:c1:3d:
         ee:e7:02:23:7b:1a:b9:34:ef:88:31:99:da:9f:51:84:32:1d:
         13:4f:e1:39:54:47:00:f7:8e:8d:2d:3d:e8:5e:2d:48:1b:9b:
         a5:6c:4f:fb:23:c4:a9:2e:9a:6a:1d:b3:9b:2e:90:2b:58:f7:
         9c:d1:c6:d2:94:7b:db:95:53:c3:21:29:45:75:5a:1b:2a:95:
         0d:4d:76:63:c5:bb:a1:7c:8c:67:ef:48:0d:c1:eb:11:4b:c8:
         6f:ed:3b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:40:24 2026 by rpki-client