Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
File:                     GvujiocH_SMcOIfkpSvc3tqyAyM.mft (raw, json)
Hash identifier:          4ApGY/hI1pByknSmd+jrUbJHs+xxAEoxarq+mKS0IJE=
Subject key identifier:   E6:E6:94:C2:93:9F:C9:AB:D4:41:90:7B:BA:DE:20:E0:19:1C:DD:DA
Authority key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
Certificate issuer:       /CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Certificate serial:       019D9AAC181942F050406DFF50802FA117EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
Manifest number:          0A22
Signing time:             Fri 17 Apr 2026 09:01:02 +0000
Manifest this update:     Fri 17 Apr 2026 09:01:02 +0000
Manifest next update:     Sat 18 Apr 2026 09:01:02 +0000
Files and hashes:         1: 0eyjF4LKH08gSHwI8t81kvl7qf4.roa (hash: OAQ9yLlIfIoZMZDTNkGDPEhOI6wA3fmO9jqPZiRRR1M=)
                          2: GvujiocH_SMcOIfkpSvc3tqyAyM.crl (hash: JTn3nMxvEIFfyyEvUve0fzC/Kp8pPLeEEyonXrKvhSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ac:18:19:42:f0:50:40:6d:ff:50:80:2f:a1:17:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1afba38a8707fd231c3887e4a52bdcdedab20323
        Validity
            Not Before: Apr 17 09:01:02 2026 GMT
            Not After : Apr 18 09:01:02 2026 GMT
        Subject: CN=e6e694c2939fc9abd441907bbade20e0191cddda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5b:f7:74:29:95:cd:24:f2:1c:39:32:ae:4e:
                    5b:07:34:84:3a:16:b9:12:12:f0:0c:49:c8:de:07:
                    20:9b:23:d1:5e:ba:8f:17:d3:e9:35:42:6d:64:85:
                    18:67:1d:52:b7:36:9c:f2:19:af:ad:85:c4:c9:f0:
                    f8:db:e0:17:55:09:1a:02:26:7c:db:75:db:ac:90:
                    22:97:94:97:0d:c9:20:34:80:8b:3b:2f:d9:21:45:
                    d0:94:96:37:cd:76:ae:9e:cb:75:12:c9:5c:71:84:
                    c1:fb:be:cf:86:d7:5b:41:5b:18:ea:60:68:80:23:
                    2f:69:08:3f:e3:0d:4f:48:39:76:55:6d:ad:ec:83:
                    23:ae:b8:fa:90:df:4a:40:d5:4c:15:63:cf:f6:ff:
                    bf:25:9e:d1:40:7f:11:b1:58:69:e7:0e:94:f6:7b:
                    b3:16:4f:54:e4:29:bf:53:1c:b9:3c:dc:fd:cd:ef:
                    37:ea:34:bf:08:d1:31:57:05:9a:60:16:65:4f:ec:
                    6f:c7:6e:88:4f:c2:a5:3e:98:65:2f:16:02:18:d6:
                    e1:54:55:17:82:e8:15:a0:2d:7f:9d:0b:15:76:62:
                    a1:3a:e6:95:c7:7f:1f:15:c8:4b:10:37:e6:46:86:
                    1b:2f:04:55:0f:9f:55:a0:4a:2d:e3:ec:5c:c0:93:
                    f6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E6:94:C2:93:9F:C9:AB:D4:41:90:7B:BA:DE:20:E0:19:1C:DD:DA
            X509v3 Authority Key Identifier:
                keyid:1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b4:2e:2d:62:fc:00:3b:92:a4:82:63:d0:c4:ea:9a:92:f6:
         6b:09:92:22:54:0a:91:ad:b2:ad:41:7a:75:98:b6:a7:20:03:
         1b:c4:f9:f9:0d:a2:e5:77:5f:b6:4e:cf:f7:eb:d5:ec:1c:3b:
         1a:c2:b5:ec:da:5c:bc:a8:af:16:0e:a9:15:ef:e6:fb:5e:ef:
         06:91:5f:4e:1f:07:3a:ac:dd:f6:8a:70:56:27:e7:e0:ff:ed:
         69:6e:6c:08:10:4a:3f:4e:9c:1c:bf:fd:87:19:a3:b0:c3:f6:
         8c:db:6c:a5:ce:1b:07:a7:50:6b:ac:c0:8b:85:7e:de:0e:bb:
         b6:75:68:bc:2b:05:82:b4:f1:83:e3:f7:9c:11:50:1a:87:59:
         1b:ec:83:22:3d:ed:0c:6b:38:f2:ab:46:26:c9:d1:1a:ae:4c:
         37:5e:f2:8a:ca:74:82:6d:32:d9:17:a0:8e:77:89:14:36:aa:
         e2:4f:82:5c:be:e6:6b:bb:c7:33:95:b9:90:ab:bf:46:a8:39:
         34:cc:cf:ad:fb:22:3a:f0:00:1d:f8:ca:4f:35:c5:e4:c2:28:
         37:ac:54:cc:15:53:0d:bb:47:29:b7:ca:f3:95:e3:35:91:26:
         34:3a:5d:fb:2e:a9:eb:85:82:f9:c3:88:91:ed:fe:91:58:cd:
         bc:fa:13:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:19:17 2026 by rpki-client