Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft
File:                     GxubyMfg_Ee_iwpXLRpXLWppa7c.mft (raw, json)
Hash identifier:          PwdzsI2P11ZIVaROet8L6XwSrFjTuj2VMxpkpF31TK0=
Subject key identifier:   6E:57:8F:30:D8:EF:BF:D0:7F:04:FB:DF:26:79:4B:06:01:64:A3:61
Authority key identifier: 1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7
Certificate issuer:       /CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
Certificate serial:       019D9A3EB4273B515A10AACC77EF1DDEB197
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft
Manifest number:          10E7
Signing time:             Fri 17 Apr 2026 07:01:33 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:33 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:33 +0000
Files and hashes:         1: GxubyMfg_Ee_iwpXLRpXLWppa7c.crl (hash: WDW9ohrULV7hufbxjK8SQc2WW5y0iCBzzu9tTXZFq6Y=)
                          2: o5WYWXJ2IkwoaadQzbiBkbuAmT4.roa (hash: mfr4t7NqJd75xZUt/Qrchf7YDZUSPEjhW2eDYQXX8w8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:b4:27:3b:51:5a:10:aa:cc:77:ef:1d:de:b1:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
        Validity
            Not Before: Apr 17 07:01:33 2026 GMT
            Not After : Apr 18 07:01:33 2026 GMT
        Subject: CN=6e578f30d8efbfd07f04fbdf26794b060164a361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b1:e1:83:51:89:61:e0:fa:0f:58:c0:df:b5:
                    83:0d:29:76:66:d6:55:67:e1:89:fa:ff:a8:33:2e:
                    64:dd:93:1f:2a:0b:36:1f:c5:5f:31:87:b4:dd:41:
                    37:0b:a0:d5:cd:31:a6:d3:5b:45:f1:10:1d:d6:84:
                    09:27:22:62:0f:39:be:3b:d0:3c:ba:73:b2:72:b6:
                    f0:a9:60:b5:73:d6:ec:fc:dd:83:7b:c9:08:3a:81:
                    ff:a8:18:72:55:77:72:2a:38:6f:46:d0:55:9a:a1:
                    91:f0:67:e8:53:7c:5f:9e:0e:80:e4:d7:34:ca:3b:
                    ec:1e:21:37:d7:4c:33:de:42:21:51:17:eb:e7:53:
                    23:ee:2a:58:93:15:b7:1d:4b:46:8c:f5:d2:b5:88:
                    d1:23:5d:0b:4a:62:b4:7e:82:3d:a9:cb:a9:7e:b4:
                    ee:ad:ff:37:58:98:7e:c5:10:69:55:19:eb:4f:3e:
                    d8:dd:5b:d9:80:32:0e:17:0f:de:20:18:ef:1b:24:
                    d4:d9:e3:0f:66:a4:c2:59:2f:53:ae:fb:88:d2:42:
                    c1:07:aa:05:2d:07:f1:99:a3:6b:b8:ba:9a:73:56:
                    73:91:a5:c1:27:db:ed:be:3e:2c:49:c5:be:c5:57:
                    9c:0d:fb:86:a2:6b:29:24:21:7b:37:f9:f0:3c:52:
                    07:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:57:8F:30:D8:EF:BF:D0:7F:04:FB:DF:26:79:4B:06:01:64:A3:61
            X509v3 Authority Key Identifier:
                keyid:1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:a7:4c:bb:a5:03:b2:5d:e9:22:af:21:51:74:02:ba:b3:3e:
         34:dc:99:1c:78:58:de:91:2c:15:a8:28:a7:16:4f:28:de:46:
         da:b8:38:b1:8f:ba:3b:12:ae:b4:83:2a:a5:5e:e8:1d:79:5d:
         bb:b2:e6:d9:c8:cb:d3:fd:ac:26:b3:84:0e:3d:76:9b:fb:f0:
         50:cb:d5:e1:13:9d:8b:6e:48:de:f3:90:5d:13:28:9a:9e:03:
         1e:5d:c6:63:d0:2d:9d:d1:34:ac:52:a4:87:4f:ba:1b:fd:2f:
         f9:99:74:f1:e3:b9:90:bb:52:26:fc:5d:37:22:7c:f7:29:3e:
         a1:5f:50:0a:74:bd:72:e7:5e:02:c0:60:60:a9:bb:a5:0e:55:
         b5:26:8d:42:16:18:77:af:ee:a7:77:db:4b:0a:54:ac:a3:8b:
         c3:ab:b8:02:29:c8:ff:23:b9:5f:51:35:94:a0:da:af:8f:4e:
         fc:97:a0:b5:10:0b:a2:5f:69:d5:3a:b3:43:49:81:5b:79:b7:
         00:62:cc:07:c1:cf:36:16:85:3d:f6:c6:56:d2:fb:58:9a:f7:
         23:a8:34:5a:58:96:32:54:56:34:11:35:01:12:ef:b1:bd:04:
         06:67:b9:85:66:89:76:4d:c5:b4:ae:23:59:6f:85:77:c2:e7:
         32:a9:23:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPrQnO1FaEKrMd+8d3rGXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMWI5YmM4YzdlMGZjNDdiZjhiMGE1NzJkMWE1NzJkNmE2
OTZiYjcwHhcNMjYwNDE3MDcwMTMzWhcNMjYwNDE4MDcwMTMzWjAzMTEwLwYDVQQD
Eyg2ZTU3OGYzMGQ4ZWZiZmQwN2YwNGZiZGYyNjc5NGIwNjAxNjRhMzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7Hhg1GJYeD6D1jA37WDDSl2ZtZV
Z+GJ+v+oMy5k3ZMfKgs2H8VfMYe03UE3C6DVzTGm01tF8RAd1oQJJyJiDzm+O9A8
unOycrbwqWC1c9bs/N2De8kIOoH/qBhyVXdyKjhvRtBVmqGR8GfoU3xfng6A5Nc0
yjvsHiE310wz3kIhURfr51Mj7ipYkxW3HUtGjPXStYjRI10LSmK0foI9qcupfrTu
rf83WJh+xRBpVRnrTz7Y3VvZgDIOFw/eIBjvGyTU2eMPZqTCWS9TrvuI0kLBB6oF
LQfxmaNruLqac1ZzkaXBJ9vtvj4sScW+xVecDfuGomspJCF7N/nwPFIHjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5XjzDY77/QfwT73yZ5SwYBZKNhMB8GA1UdIwQY
MBaAFBsbm8jH4PxHv4sKVy0aVy1qaWu3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3h1YnlNZmdfRWVfaXdwWExScFhMV3BwYTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80ZDJhOWYtNmY3OC00Y2M2LTlhZDYt
MGY2Yjg0NjhjNzlkLzEvR3h1YnlNZmdfRWVfaXdwWExScFhMV3BwYTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80ZDJhOWYtNmY3OC00Y2M2LTlhZDYtMGY2Yjg0NjhjNzlk
LzEvR3h1YnlNZmdfRWVfaXdwWExScFhMV3BwYTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqdMu6UD
sl3pIq8hUXQCurM+NNyZHHhY3pEsFagopxZPKN5G2rg4sY+6OxKutIMqpV7oHXld
u7Lm2cjL0/2sJrOEDj12m/vwUMvV4ROdi25I3vOQXRMomp4DHl3GY9AtndE0rFKk
h0+6G/0v+Zl08eO5kLtSJvxdNyJ89yk+oV9QCnS9cudeAsBgYKm7pQ5VtSaNQhYY
d6/up3fbSwpUrKOLw6u4AinI/yO5X1E1lKDar49O/JegtRALol9p1TqzQ0mBW3m3
AGLMB8HPNhaFPfbGVtL7WJr3I6g0WliWMlRWNBE1ARLvsb0EBme5hWaJdk3FtK4j
WW+Fd8LnMqkjcw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:38:20 2026 by rpki-client