Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
File:                     GbzEB784geKWalSMQys_BAFGmd0.mft (raw, json)
Hash identifier:          E5VWwFm+VKbufuRUZS1zd5w4VgJuQCfh87srkTQZrok=
Subject key identifier:   10:ED:A3:A3:E5:B5:ED:93:CB:DA:15:17:E2:C5:E7:50:47:88:30:DB
Authority key identifier: 19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
Certificate issuer:       /CN=19bcc407bf3881e2966a548c432b3f04014699dd
Certificate serial:       019EBFC90F2D1808F15A58EFB4E89CD096E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 07:01:25 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:25 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:25 +0000
Files and hashes:         1: GbzEB784geKWalSMQys_BAFGmd0.crl (hash: 2tTaU7yHX205S+z9n99Ayab8YxOekHMrmMwXH/w+7kU=)
                          2: SiN-egvtwnZmsIkMnlS_ti2Z8oo.roa (hash: +a9n3GtFyFH5JC8/UIBQoBkf21E3Z0ZTMg3tsgsla2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c9:0f:2d:18:08:f1:5a:58:ef:b4:e8:9c:d0:96:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19bcc407bf3881e2966a548c432b3f04014699dd
        Validity
            Not Before: Jun 13 07:01:25 2026 GMT
            Not After : Jun 14 07:01:25 2026 GMT
        Subject: CN=10eda3a3e5b5ed93cbda1517e2c5e750478830db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:01:ff:bd:e1:14:c3:10:57:10:1d:0d:e8:3b:
                    2e:bc:7a:b8:18:c9:5a:ed:fd:cc:3e:2b:5e:10:eb:
                    f0:47:e9:d2:e7:d0:cc:3a:d9:7a:b1:50:b7:f0:eb:
                    20:4b:11:2b:6b:09:1d:90:a3:3b:f1:63:78:41:3d:
                    b1:89:1d:22:41:5d:7c:4a:20:4c:35:c8:08:f2:7d:
                    ab:68:f5:1f:31:f0:5c:36:11:73:50:8e:c1:64:38:
                    fe:0e:e8:9d:7f:d9:ea:55:ae:1b:61:5c:8e:0b:2f:
                    e9:55:ae:e9:12:88:e7:49:79:05:61:c7:1a:2b:32:
                    be:70:1f:4a:fa:2c:e9:11:78:c8:a4:1f:1c:4b:da:
                    fb:58:85:3d:1f:7a:28:70:ac:60:59:88:ce:83:ab:
                    4f:fa:03:38:88:60:9a:a0:63:b9:65:2b:69:94:36:
                    e3:37:6e:86:40:da:93:fd:04:b5:81:cc:7b:04:a8:
                    bc:ef:e8:6e:3c:b2:38:d2:ec:55:e8:d5:c2:87:a7:
                    1b:b3:0a:99:6d:1c:1c:32:66:05:1f:b6:3a:98:30:
                    a3:02:84:6b:aa:94:37:3c:30:60:9b:15:c7:e3:85:
                    c0:53:d1:32:02:f9:f5:e5:80:07:8e:27:97:29:a1:
                    49:ec:8f:ef:32:7f:fd:59:0c:b7:c3:18:a4:a9:af:
                    05:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:ED:A3:A3:E5:B5:ED:93:CB:DA:15:17:E2:C5:E7:50:47:88:30:DB
            X509v3 Authority Key Identifier:
                keyid:19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:8f:ba:9c:45:5f:73:4b:4e:9b:2f:a0:56:89:a7:10:d3:5c:
         e2:84:cd:f4:b6:a6:e1:21:58:69:a2:e3:d3:f2:01:26:39:8b:
         f4:c1:91:1e:86:a3:9d:66:bb:29:9f:4a:6a:57:b6:f9:5c:c2:
         4a:97:41:e4:cb:7e:59:41:fa:62:ec:5e:9b:64:22:75:ce:ad:
         4f:5e:a1:48:91:db:e2:52:ef:7b:b1:5e:ca:c1:7d:f1:34:f2:
         b7:00:7e:b5:12:b9:7d:0e:ba:d5:62:df:a4:9f:d9:66:4f:38:
         fc:32:50:a9:3a:c7:fc:17:7c:2d:39:3e:15:b4:8f:bd:f9:10:
         e9:5a:0d:b4:71:71:11:77:54:bc:d8:b2:5b:12:ad:ef:b4:a6:
         ba:e3:03:df:8b:e8:54:99:b6:57:5f:99:5b:31:57:71:b0:20:
         0e:c7:e0:6e:e3:4b:98:c7:a9:c8:0e:cc:39:21:26:1b:65:2b:
         4c:3d:29:01:3a:97:56:4d:8a:d6:bc:65:66:71:c5:19:f3:df:
         e0:ce:92:0c:d1:9c:71:ff:50:fb:a0:50:ab:9f:17:67:fe:e9:
         7b:4e:b5:39:27:45:8f:13:c0:6e:95:27:34:74:b4:67:25:b3:
         3b:ff:67:df:fb:15:a7:68:af:b4:55:41:37:de:35:28:fa:55:
         79:e7:5a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:45:02 2026 by rpki-client