Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
File:                     gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft (raw, json)
Hash identifier:          tGSXMG2rn3T+a3aq81nGqisyVEbkO80UOEa+V4Ew8UY=
Subject key identifier:   26:A6:04:7D:CB:DB:28:06:61:12:97:41:32:AC:37:3D:C6:99:C4:B5
Authority key identifier: 81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20
Certificate issuer:       /CN=81b65a230d6927dbac201097f949e2eaa2731220
Certificate serial:       019DA37807EAFBD2FBD8BA05FCF1A3EE8900
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
Manifest number:          0E5E
Signing time:             Sun 19 Apr 2026 02:00:45 +0000
Manifest this update:     Sun 19 Apr 2026 02:00:45 +0000
Manifest next update:     Mon 20 Apr 2026 02:00:45 +0000
Files and hashes:         1: QeR12R9Z_jTNrUpQr1ODF5IR7mc.roa (hash: 8rRLxS0jjdwQyV6rT5Us1y0eR8TYGMlqxEVb79Eceds=)
                          2: gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl (hash: B82E3+mPUMYDI/sj20FGXzNU/BfxzAiGg3pa5DyEvos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:78:07:ea:fb:d2:fb:d8:ba:05:fc:f1:a3:ee:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81b65a230d6927dbac201097f949e2eaa2731220
        Validity
            Not Before: Apr 19 02:00:45 2026 GMT
            Not After : Apr 20 02:00:45 2026 GMT
        Subject: CN=26a6047dcbdb28066112974132ac373dc699c4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:09:f3:4d:44:4d:d1:75:3b:91:2c:b2:36:84:
                    45:cb:5e:b8:bc:f5:d4:d3:c7:ab:3b:b5:1a:d0:c6:
                    9f:d6:63:d1:12:ba:34:48:ed:66:4e:20:e8:ba:08:
                    46:7b:71:1d:04:a4:30:2b:2d:8f:ee:be:19:30:58:
                    cb:9d:6b:d0:5b:e6:29:9e:72:ea:5e:1a:e2:54:45:
                    09:68:dd:ed:17:9b:75:f3:1b:40:55:d1:63:cf:0b:
                    f5:4b:93:de:69:87:c6:8c:0f:70:20:b3:a9:56:04:
                    9a:96:c2:37:23:57:59:10:e9:e5:3d:c0:f3:49:02:
                    83:5e:ee:4b:ff:4a:97:b3:16:18:57:1c:a3:5f:5c:
                    0c:8b:17:ae:97:88:16:d5:22:f7:de:c2:f6:0d:ba:
                    c0:31:36:2d:3d:8f:c9:57:dd:c7:40:97:fd:b1:f1:
                    5d:8e:79:0f:ce:6a:1b:1d:5b:be:fe:7c:e2:21:7f:
                    15:42:e5:a0:72:f3:86:79:cc:0d:c0:08:b4:3a:fe:
                    67:1e:9e:1c:11:81:1f:48:b1:33:d0:9d:70:eb:91:
                    39:ae:ba:87:d5:b0:8f:92:27:94:d8:18:c2:18:1f:
                    7f:5c:33:cc:44:56:4f:5d:19:64:cd:a5:00:5e:3b:
                    06:f7:8c:db:55:18:58:d3:04:19:1f:9b:c9:2d:89:
                    f4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A6:04:7D:CB:DB:28:06:61:12:97:41:32:AC:37:3D:C6:99:C4:B5
            X509v3 Authority Key Identifier:
                keyid:81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:08:69:59:58:1b:6e:93:8d:6d:04:fa:b7:d9:c3:73:84:04:
         fb:1a:8d:fd:43:ea:fc:d2:07:1d:0e:8f:f5:f3:6b:37:51:30:
         32:7b:37:26:44:7f:ed:86:44:26:25:94:8a:13:2c:f8:fc:c2:
         e2:b7:f0:fb:33:f4:13:8f:0e:88:6a:d6:b3:db:84:91:25:2b:
         8b:18:e9:d8:03:5e:f7:69:1f:4e:62:0b:dd:aa:20:f6:50:74:
         93:5c:55:96:8b:d3:00:ab:f8:fd:41:71:fb:1c:85:50:d1:ce:
         9e:98:59:66:a8:18:da:06:18:ba:d1:07:18:8d:de:50:d5:fd:
         ce:f9:fc:0f:15:e7:28:c3:ba:31:46:76:c3:54:8b:8d:97:7e:
         90:7a:74:29:55:46:7b:23:79:18:39:fe:a4:bd:1c:61:95:fd:
         f9:37:54:3c:9b:b8:17:54:54:03:92:6e:fe:dd:11:32:94:26:
         85:8f:4d:bd:cb:c0:60:dd:f7:e6:fa:31:18:b1:17:be:8d:bd:
         ae:54:11:63:ae:fe:59:ad:99:dc:a5:7b:62:90:4b:2d:d1:3a:
         c4:ff:5a:ba:1a:f4:e9:b0:c4:75:d6:f8:94:7b:c0:74:fd:30:
         da:d3:27:2c:5b:dc:ce:e2:1e:33:e5:e1:0f:32:39:39:22:63:
         f0:3a:83:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:25 2026 by rpki-client