Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
File:                     gPI_QpUEIDwYlzeiB05T8u_GT8c.mft (raw, json)
Hash identifier:          mEtKkj4jYj7hZQhOyYrMtA7swC4CbKTEH65d+iXGk/w=
Subject key identifier:   69:18:E0:E5:CA:CB:98:3D:91:8F:43:CC:04:60:E7:1F:09:BD:AE:54
Authority key identifier: 80:F2:3F:42:95:04:20:3C:18:97:37:A2:07:4E:53:F2:EF:C6:4F:C7
Certificate issuer:       /CN=80f23f429504203c189737a2074e53f2efc64fc7
Certificate serial:       019D9C2D3ED27116B91D12B2A30B71CE3280
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
Manifest number:          0368
Signing time:             Fri 17 Apr 2026 16:01:44 +0000
Manifest this update:     Fri 17 Apr 2026 16:01:44 +0000
Manifest next update:     Sat 18 Apr 2026 16:01:44 +0000
Files and hashes:         1: gPI_QpUEIDwYlzeiB05T8u_GT8c.crl (hash: 65jIvc3oymyAHW5FquU6t5uyu9KkhD3+a+PnTaJa8nQ=)
                          2: rng8GtvhW_7ZteA0FnuaZ2OXfUE.roa (hash: kHUVVB4FBTKzzPlqingwFv/L2jPUQKZj58gnh5dBOiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2d:3e:d2:71:16:b9:1d:12:b2:a3:0b:71:ce:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f23f429504203c189737a2074e53f2efc64fc7
        Validity
            Not Before: Apr 17 16:01:44 2026 GMT
            Not After : Apr 18 16:01:44 2026 GMT
        Subject: CN=6918e0e5cacb983d918f43cc0460e71f09bdae54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:87:f3:d6:90:02:28:a7:4b:41:df:fe:59:a3:
                    ea:a7:04:06:73:b0:bf:41:15:72:84:09:53:67:57:
                    c5:0f:a6:6a:b4:1e:31:1b:d6:c5:c1:4c:d1:41:1f:
                    73:4f:c0:c2:cd:45:1a:93:15:71:17:38:15:32:7d:
                    89:ae:ce:cf:0c:dc:05:ed:25:97:d1:34:2d:bf:32:
                    f1:0e:e7:2d:82:a5:67:8e:eb:87:d5:b0:fb:00:3b:
                    18:77:8a:00:4c:55:af:d9:e6:1c:11:10:f3:a8:8d:
                    1c:07:33:53:62:b5:dd:2d:fe:08:48:03:90:a4:79:
                    ae:6f:65:b8:d3:ae:83:b5:e5:5d:7a:e1:28:01:fe:
                    69:11:de:af:bc:89:47:0d:c3:32:8d:84:4e:aa:c1:
                    45:fa:58:da:b4:87:ec:44:c0:3f:39:27:d9:33:87:
                    b8:5a:43:07:ea:2d:d2:a5:81:2e:00:22:b3:49:f7:
                    53:7d:12:65:c7:77:c8:be:54:a5:f1:6f:cc:5f:ba:
                    07:01:6c:32:28:7b:29:35:72:d3:d3:91:41:5d:fd:
                    ed:b1:aa:07:81:e4:ea:59:09:5a:7e:9e:50:f3:f8:
                    5f:0c:6a:9f:c0:b2:b3:4d:cc:48:6c:24:73:60:f3:
                    61:2c:66:a3:1e:37:a4:a2:f1:88:34:35:e8:e2:26:
                    b6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:18:E0:E5:CA:CB:98:3D:91:8F:43:CC:04:60:E7:1F:09:BD:AE:54
            X509v3 Authority Key Identifier:
                keyid:80:F2:3F:42:95:04:20:3C:18:97:37:A2:07:4E:53:F2:EF:C6:4F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:19:c9:e8:b3:90:2c:dc:44:e6:e8:a3:fd:80:3d:f2:33:ab:
         56:cd:af:21:91:8a:5d:7d:a7:23:2c:10:3d:37:85:b9:10:f3:
         bb:60:0c:ad:e6:1b:e4:85:3d:67:2d:fd:3e:ba:63:0d:46:cd:
         56:a1:db:89:75:0d:82:2e:a8:7d:10:77:6c:38:f3:82:e2:75:
         1f:ad:4e:52:b5:cc:9e:ce:3f:f7:b6:8e:d4:dd:f8:d3:f7:9f:
         31:d6:e8:f6:6a:45:94:b4:9d:5e:4b:5c:57:e7:31:c3:9a:28:
         f7:54:ea:5f:e5:d3:cd:1c:38:fd:33:bd:79:40:14:88:61:71:
         ff:2b:22:e6:88:8e:e4:a6:d1:f7:a6:87:9e:e2:9d:23:52:20:
         13:6e:b9:33:d4:29:5b:cb:32:91:82:f6:df:a6:b6:89:fe:bb:
         97:12:82:58:f4:a4:2d:73:50:ac:65:89:07:49:32:79:4d:6c:
         49:91:85:2e:9e:2d:9d:54:ab:d8:41:92:09:7a:ed:61:1d:f7:
         06:0b:02:6d:d4:36:63:a9:9d:af:09:b4:87:50:c5:4b:38:fc:
         0c:97:d5:c5:84:f1:42:98:b6:06:68:7f:3d:80:8c:69:e2:0c:
         c0:8b:22:87:7d:e3:17:b0:0c:36:0f:71:f6:db:7e:af:2b:43:
         d3:c5:f4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:12:17 2026 by rpki-client