Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
File:                     gvjR2XuYaTmDMZTuI04MTZW1KJM.mft (raw, json)
Hash identifier:          T0XbDUX+x1Fweytpap1fXu4fYfOVVAvllZck7uhADOw=
Subject key identifier:   DE:0F:77:A8:2D:23:AE:5A:B1:46:0B:AB:57:F9:C5:EF:0C:9F:AF:DB
Authority key identifier: 82:F8:D1:D9:7B:98:69:39:83:31:94:EE:23:4E:0C:4D:95:B5:28:93
Certificate issuer:       /CN=82f8d1d97b986939833194ee234e0c4d95b52893
Certificate serial:       019D9999465E0C628EADF60A2071F11BF015
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
Manifest number:          0545
Signing time:             Fri 17 Apr 2026 04:00:52 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:52 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:52 +0000
Files and hashes:         1: IxrbbUnr4NlEBFXv08akYoNTGj0.roa (hash: 8fPL/kdOuu7kLO2qxK2P+1Epd0kmxJSFJNXEkM34RBM=)
                          2: gvjR2XuYaTmDMZTuI04MTZW1KJM.crl (hash: jNktzsGmZU5VAhhufCgQxoxkkBF4hNxJiYXapSvbhH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:46:5e:0c:62:8e:ad:f6:0a:20:71:f1:1b:f0:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82f8d1d97b986939833194ee234e0c4d95b52893
        Validity
            Not Before: Apr 17 04:00:52 2026 GMT
            Not After : Apr 18 04:00:52 2026 GMT
        Subject: CN=de0f77a82d23ae5ab1460bab57f9c5ef0c9fafdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:86:54:82:63:44:19:1a:99:12:f3:3a:3f:
                    61:b2:24:20:10:e1:d5:f0:fd:82:4a:23:67:cf:d4:
                    69:64:c7:d4:96:a2:5a:b0:c9:0f:54:ab:e6:d4:9f:
                    83:03:53:b5:5b:42:b8:95:54:02:19:06:f0:4a:de:
                    c2:5c:b4:1a:97:31:11:0d:2f:54:b3:0b:62:7a:1a:
                    13:2d:f6:fb:7e:8a:79:b7:f1:04:be:e6:ea:bd:dc:
                    7e:f5:bc:82:bb:37:21:6e:69:7e:dd:ed:c4:1b:fe:
                    84:d2:d0:04:f8:3d:b6:98:3c:9e:b4:1f:c7:ea:6e:
                    b1:07:76:de:97:00:4c:e4:e6:e6:e5:2c:48:a8:ca:
                    c4:de:cd:f5:a0:c5:cc:12:65:4b:57:a4:f7:ff:bb:
                    12:02:93:bd:7a:d1:ce:51:87:27:9d:5c:4e:87:8e:
                    fe:82:16:61:2c:ef:c8:ff:1b:7d:b4:c5:ec:30:0c:
                    da:6b:9f:eb:b2:4f:3d:3c:a8:97:00:16:3b:13:7f:
                    cc:01:f9:c6:6a:b1:65:7d:00:64:1f:fc:dc:85:40:
                    1c:a3:ba:38:c6:54:8a:75:e2:11:7e:dc:69:6b:9f:
                    2a:88:07:f0:04:a3:aa:9d:8d:a8:48:df:f5:bc:b8:
                    c1:e5:c2:e7:de:9d:53:56:63:2e:f2:fa:1a:c7:34:
                    2d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0F:77:A8:2D:23:AE:5A:B1:46:0B:AB:57:F9:C5:EF:0C:9F:AF:DB
            X509v3 Authority Key Identifier:
                keyid:82:F8:D1:D9:7B:98:69:39:83:31:94:EE:23:4E:0C:4D:95:B5:28:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:1a:59:50:7f:bd:a0:22:cf:8a:25:9a:98:e8:a1:80:7c:1f:
         9b:91:e3:9b:44:81:ae:29:56:da:40:07:61:da:e9:9a:2b:31:
         f0:f2:eb:dc:44:57:8a:91:19:2e:73:60:7a:81:4c:02:ef:22:
         42:1b:aa:6a:a2:60:1a:94:bf:7b:ed:0f:6a:70:28:42:4e:65:
         f8:7d:11:b6:32:db:1a:b9:93:c3:cc:93:39:81:64:b6:36:43:
         d3:6d:51:5f:71:67:48:d2:a6:5d:bb:99:67:5c:f9:41:6f:9d:
         4c:c8:2e:73:2f:7d:9c:57:c9:52:13:47:28:87:4d:d3:17:6e:
         18:61:ab:e1:cd:23:03:9f:59:77:a2:9c:5b:e6:e7:97:0a:2a:
         b6:61:a3:6c:32:e0:55:be:fa:74:b7:e0:bd:9d:74:5b:7d:a6:
         d5:c1:cb:7f:50:35:d4:cd:be:29:f1:d2:7c:02:e4:94:55:a5:
         96:47:ed:14:08:ed:5e:99:2c:51:1b:0e:bc:0f:89:ce:fd:e1:
         81:44:fd:da:68:db:b5:ce:a5:9f:b5:3c:e2:c4:4b:f5:fd:4b:
         9b:4c:0c:78:09:a2:1f:f8:f4:33:03:eb:3a:e3:48:e1:ff:5d:
         81:d1:d0:f2:9b:a8:5c:0a:6d:f2:0b:5e:02:6b:7f:65:81:19:
         98:55:b2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:10 2026 by rpki-client