Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
File:                     GftWrckHHV6f2itmlDi5K_hj5Y8.mft (raw, json)
Hash identifier:          0p1aPsWKscwdlESQAfqonLwWXMlqSkWve2SNys6AjKU=
Subject key identifier:   74:D2:A5:F2:E7:89:F7:48:0A:AF:EE:B1:F1:78:66:10:2F:D2:77:52
Authority key identifier: 19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
Certificate issuer:       /CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Certificate serial:       019D97E256C5F1CC7AFDF2073FF6B1A4EDB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
Manifest number:          13D7
Signing time:             Thu 16 Apr 2026 20:01:26 +0000
Manifest this update:     Thu 16 Apr 2026 20:01:26 +0000
Manifest next update:     Fri 17 Apr 2026 20:01:26 +0000
Files and hashes:         1: GftWrckHHV6f2itmlDi5K_hj5Y8.crl (hash: HkZBMDXnhrSPh3MIkamA1jatXLIfsjH9NEI6BO1zjZk=)
                          2: PvoOGCPl9_uRABB0axn6ZoPjSfw.roa (hash: R0bL5Wz36hlUi6u7PbZBlbeTSW6yCz9pE1JTno5Jnd4=)
                          3: f2RzKPqHeeSwshGgaI03kVuo9ZY.roa (hash: vcuUb/xuMjhKt4KDFSNHCcpL3GkZRwfPEaVwfoajM48=)
                          4: v6DHuOuOQo5ADYQoffR2c_O6QS8.roa (hash: i6eWCZPdAHUsEhQJa4fw9gAODBNNYJr2pgzQXjsynVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e2:56:c5:f1:cc:7a:fd:f2:07:3f:f6:b1:a4:ed:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
        Validity
            Not Before: Apr 16 20:01:26 2026 GMT
            Not After : Apr 17 20:01:26 2026 GMT
        Subject: CN=74d2a5f2e789f7480aafeeb1f17866102fd27752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d7:4e:11:08:af:e4:68:f2:43:79:d7:5b:0e:
                    b9:b2:cc:4e:b8:4f:a4:08:3e:fc:95:9c:9c:d7:35:
                    e7:29:e2:6a:bd:7a:c3:70:25:de:bd:86:7e:ed:6d:
                    d9:4a:34:83:e0:da:cf:b3:39:86:35:9f:b0:a7:da:
                    a0:88:01:c6:46:f6:ac:81:6c:d6:96:66:82:5d:4a:
                    68:3f:e2:55:3a:fb:5e:77:c1:be:b2:15:14:a0:5a:
                    6d:49:cd:26:c3:7b:ff:79:04:1b:d3:98:a1:14:99:
                    08:e6:4b:ae:fe:cf:fc:97:02:e1:5a:78:1c:06:5d:
                    c2:0a:82:4c:07:05:97:57:f9:d1:be:84:51:a6:3a:
                    65:3e:06:e3:d4:7c:6e:e7:84:74:73:e4:e4:0f:4a:
                    33:06:a5:5e:00:b1:81:46:82:73:e9:df:b4:d6:28:
                    4f:8a:04:2d:0d:9d:42:c5:c1:80:6b:f4:9a:e6:40:
                    1b:9f:0f:e7:f5:bc:76:84:cc:04:4e:a3:89:b5:5e:
                    7a:1e:a8:40:cb:68:49:65:c7:37:22:e5:cc:3b:e0:
                    42:aa:a2:99:91:80:3e:70:f7:03:dd:32:b3:fb:da:
                    b6:13:db:1a:b1:fc:67:3d:7d:7c:22:35:10:07:9c:
                    cb:96:80:e4:6b:d1:db:f8:93:3e:3f:e2:ad:16:54:
                    ea:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D2:A5:F2:E7:89:F7:48:0A:AF:EE:B1:F1:78:66:10:2F:D2:77:52
            X509v3 Authority Key Identifier:
                keyid:19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:44:81:85:96:f2:b0:b5:86:9c:f8:2b:20:87:43:07:5f:4c:
         8b:a5:e3:7a:01:24:b0:45:09:72:38:6a:b0:ee:5e:90:40:30:
         ed:ff:c0:b5:f7:35:a1:c3:b4:45:dd:b8:af:0d:dc:8f:15:be:
         a3:32:d5:8a:f2:bb:9a:4a:d1:c4:82:de:c6:a0:f2:86:26:d3:
         34:11:0b:8d:5e:34:10:8c:45:12:fe:a2:71:ed:8b:22:78:eb:
         41:e8:12:6c:f6:6d:9a:9d:14:0f:e1:2d:d2:3f:67:5c:a2:df:
         34:4a:91:ff:bb:62:6d:1a:a8:84:f0:b8:80:30:64:0f:8c:84:
         32:cd:49:6a:e2:f8:79:43:e2:34:5a:0d:f4:a4:bf:e3:60:71:
         f0:ee:44:d3:47:56:c8:56:ae:3f:00:ae:bd:53:d6:a0:bd:6f:
         81:a8:65:8a:cc:23:de:fb:cc:9a:3d:63:cb:00:92:98:d9:47:
         73:61:44:05:b9:76:75:d9:b6:d3:d3:18:00:3e:66:6b:ae:fb:
         dc:ee:0c:a4:ee:60:e2:2d:ce:00:3c:65:80:0b:37:b0:f1:c4:
         fa:46:86:e6:5a:8b:c4:d7:a3:31:50:3a:2b:07:d0:2e:93:62:
         cf:00:28:e3:0e:48:b2:98:bc:13:0d:46:d7:91:d3:97:4f:e3:
         7e:6c:54:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:15:11 2026 by rpki-client