Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft
File:                     gqo-xYuoRtJ6eXERxVhRUwANug4.mft (raw, json)
Hash identifier:          T6a0buadpMcJMts69cTIRPUffgC5ISXAr6+EA+EwC3w=
Subject key identifier:   21:FD:EE:6A:4A:47:E9:63:63:4F:2A:3C:90:0A:20:C4:EB:DF:3C:F4
Authority key identifier: 82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E
Certificate issuer:       /CN=82aa3ec58ba846d27a797111c5585153000dba0e
Certificate serial:       019D9B87C658E9E10C0AA4CEB22ADB146E8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 13:00:59 +0000
Manifest this update:     Fri 17 Apr 2026 13:00:59 +0000
Manifest next update:     Sat 18 Apr 2026 13:00:59 +0000
Files and hashes:         1: Ue5qGAdMUuZjIAkWiew3rNK7iec.roa (hash: 0R2GCImaNBlpU0Y1AJHIDWb7A+a1HMHsb4hUInCPqe8=)
                          2: gqo-xYuoRtJ6eXERxVhRUwANug4.crl (hash: 1m/SjEnrm8V/aAu5W2k9pphmaoeFB9RXXucpRNG4fSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 13:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:c6:58:e9:e1:0c:0a:a4:ce:b2:2a:db:14:6e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82aa3ec58ba846d27a797111c5585153000dba0e
        Validity
            Not Before: Apr 17 13:00:59 2026 GMT
            Not After : Apr 18 13:00:59 2026 GMT
        Subject: CN=21fdee6a4a47e963634f2a3c900a20c4ebdf3cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f8:05:3d:d2:ca:5a:b0:d6:91:d5:44:2e:f5:
                    4f:cb:3e:61:53:1a:5d:b4:3e:b6:89:43:9a:50:14:
                    b1:e8:47:0f:86:b5:14:50:3b:7e:8a:96:f9:db:28:
                    ee:79:ee:ad:90:cb:f5:8b:73:10:2d:a1:43:02:24:
                    11:0b:a1:7e:93:1f:62:09:23:53:cd:19:91:88:35:
                    3f:88:1b:93:00:9c:29:9a:ab:54:9d:90:3d:5a:07:
                    f7:49:7a:ee:62:ae:fa:dd:ce:b8:ce:ec:d2:03:b9:
                    cd:2b:2d:84:39:47:07:3e:8b:32:3a:69:a2:bb:68:
                    4c:8c:08:f8:80:9d:a0:71:88:a4:33:d4:7a:98:61:
                    65:cd:14:74:ec:72:5f:54:fa:bf:05:30:9f:65:23:
                    b0:ff:46:07:f2:a4:98:c0:1a:9e:f8:7a:2d:5f:b2:
                    7e:03:50:33:91:d3:0d:c0:c5:3d:e0:5e:6f:23:4b:
                    65:b3:6a:59:ad:13:f4:77:03:6e:9e:fd:81:5d:2b:
                    54:8d:24:06:0b:8a:1a:65:65:4b:81:9a:67:c9:b9:
                    2f:19:c5:7f:db:17:00:d5:51:f8:39:67:65:3f:b3:
                    b2:da:3c:5c:38:8b:8a:0d:65:7c:9b:f7:27:f2:c4:
                    fe:af:f3:10:0d:3e:cf:cb:d2:2f:14:fe:2e:c9:9f:
                    fa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FD:EE:6A:4A:47:E9:63:63:4F:2A:3C:90:0A:20:C4:EB:DF:3C:F4
            X509v3 Authority Key Identifier:
                keyid:82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:b3:a5:fe:17:34:ea:3c:25:d6:27:68:d9:f7:0c:11:b5:c3:
         37:bc:7d:26:cf:b9:49:54:6f:e5:4c:0b:3a:e3:34:a9:32:39:
         19:54:7d:1f:c9:77:33:5c:7a:8c:1d:d6:17:bd:2f:c3:c9:d0:
         27:28:e3:de:05:09:01:3a:23:cf:31:27:03:4e:e3:06:e0:d7:
         53:95:46:13:ef:fc:4c:26:f1:71:90:bc:91:1b:04:57:5f:ed:
         41:5f:bb:3b:95:1e:48:46:ed:4c:f2:68:68:c4:be:51:e5:8d:
         9c:00:7f:16:c9:c0:60:81:eb:4f:d8:b4:47:d9:fd:7a:87:8b:
         af:c5:ff:b4:36:2f:79:11:70:5e:d3:21:d1:7e:46:dd:a9:71:
         80:ba:bf:d8:c4:f4:a5:e3:b4:ae:db:66:66:fc:16:ae:75:37:
         0b:a2:1d:47:34:ad:05:1c:a3:44:72:61:cd:43:ee:17:85:72:
         f2:aa:49:7c:a6:60:c4:9a:97:0c:ef:3c:ca:e1:01:70:68:c0:
         be:88:0a:16:61:18:02:a4:b1:24:33:ba:32:ec:f3:3a:42:15:
         7d:a4:e3:69:0b:ec:0c:d7:58:4d:7f:b9:95:c7:bd:8e:dd:de:
         28:e2:51:d5:cc:98:ed:c1:55:f9:fc:99:d1:0a:1b:d9:01:c7:
         61:fa:85:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:45:17 2026 by rpki-client