Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
File:                     GTdDRntNpBxilek1EVMwlYa6I5k.mft (raw, json)
Hash identifier:          c2MFJmSGWgro213bF5umaJZuR5dfF27G4pQx6XeWRpw=
Subject key identifier:   C7:15:3C:6B:52:94:34:4D:87:C3:6A:0A:82:BF:F1:7D:A3:43:0B:27
Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
Certificate issuer:       /CN=193743467b4da41c6295e9351153309586ba2399
Certificate serial:       019D99CFBE99F97E5712459FE182D8D4151C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
Manifest number:          1544
Signing time:             Fri 17 Apr 2026 05:00:21 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:21 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:21 +0000
Files and hashes:         1: ESOn4YVwMvjEwp43_BIg6dF4bME.roa (hash: R9TTpag0gjQGiKGRJHhKu7HUgpmc2rwTNbk37Twi9mw=)
                          2: GTdDRntNpBxilek1EVMwlYa6I5k.crl (hash: 7ZJgwu7AaPs0UpLfcbyipM3Q7GD+Tw+15nmkP4bqJIk=)
                          3: a1Wzzm6d-RLRzAcChfLkzjD6yj4.roa (hash: u2suJZ9dSTEdpIWAwFWYGCWey0B3AvIkAHlBujdVtCc=)
                          4: bonvg5XaBQcMsNMwCdMc5lDAhv0.roa (hash: ZSoRPjPH88M9xek3/eVzci4XvPHF1Itjvf+UZyNuK0s=)
                          5: h-e8ELzqBHgqs0gO88cD6j4kiUw.roa (hash: IFfM4s3xZcomvpllzauBa/HUt3f3fExXfJyGi7VQ3a0=)
                          6: tgxCEeVuZ-EDQmEz7GRXe-l5ETE.roa (hash: LUh2uL8YOcgSTcCxK3/07PSsvLuQW83QgTZqddE2hIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:cf:be:99:f9:7e:57:12:45:9f:e1:82:d8:d4:15:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193743467b4da41c6295e9351153309586ba2399
        Validity
            Not Before: Apr 17 05:00:21 2026 GMT
            Not After : Apr 18 05:00:21 2026 GMT
        Subject: CN=c7153c6b5294344d87c36a0a82bff17da3430b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7e:15:8b:88:c7:36:df:9c:4f:42:54:55:74:
                    53:31:54:2d:48:ae:7e:c4:ec:4c:91:5d:0e:e3:de:
                    61:50:a1:2c:24:d8:1c:b3:e7:be:90:bb:d0:df:7e:
                    67:cd:95:7f:e6:9e:3d:ac:0e:a6:f4:8d:c5:45:06:
                    9f:fc:aa:1d:92:64:89:9e:3b:ac:24:ae:dc:8a:c7:
                    75:ee:a0:52:be:f7:ee:14:7a:b6:b9:b2:89:ac:9c:
                    3f:9b:33:15:f3:86:0c:b2:65:8a:9a:81:12:b0:b3:
                    74:5d:9c:83:b9:44:f5:36:fb:18:e6:67:9d:96:8d:
                    de:9f:c8:ec:1a:dc:9d:aa:7c:fd:73:a4:bc:11:0e:
                    c4:3b:45:bc:c4:d2:4d:0a:c1:64:a0:b8:d5:ea:d4:
                    7a:3a:aa:62:5a:6e:d8:ee:21:ba:50:e9:f5:2b:01:
                    bd:3c:9c:bd:58:eb:83:c7:73:49:fd:41:ed:b0:19:
                    31:bd:9f:90:e2:2f:1f:27:ab:73:cb:31:4f:a8:9b:
                    86:ff:3f:06:24:ae:4a:fb:32:3f:49:99:ae:25:6b:
                    04:36:8b:ef:3b:66:20:23:8e:cd:93:8f:00:2f:08:
                    ff:2e:62:ee:28:ed:3a:e1:df:ac:76:30:6a:6b:e1:
                    6b:d2:20:40:2d:8d:00:da:d0:cc:5a:28:e6:35:21:
                    ad:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:15:3C:6B:52:94:34:4D:87:C3:6A:0A:82:BF:F1:7D:A3:43:0B:27
            X509v3 Authority Key Identifier:
                keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:cc:10:c6:06:43:a6:50:26:f3:e0:d6:14:8b:55:22:fe:d9:
         67:fc:1d:11:cc:4a:df:89:73:e1:dc:41:4f:f1:18:50:f5:c7:
         81:c1:7d:13:03:51:1f:62:d2:a4:fb:9f:a6:35:bd:58:61:ae:
         36:e9:e0:fa:38:34:3f:2f:96:5c:67:cd:bf:bf:c3:e8:8a:0a:
         3e:1b:26:f4:79:60:5a:4e:35:4e:97:11:c2:0f:ab:8e:a0:5a:
         e5:47:c3:aa:2a:05:99:b3:c5:7a:a8:b8:59:30:0d:a0:d9:d7:
         00:14:62:01:eb:80:19:a7:24:82:16:2b:8a:6d:72:9f:14:d1:
         77:20:91:42:52:07:64:53:b6:8e:11:82:80:8d:99:dd:16:49:
         f1:cb:68:2e:03:e3:9f:a9:7e:01:95:87:67:51:b6:39:59:a7:
         e7:2c:f7:e9:1c:b0:1c:d1:42:eb:c8:06:c7:83:96:cf:4e:96:
         31:8d:a6:4d:3b:51:26:1b:41:94:f9:0b:91:01:a6:31:fb:75:
         37:b7:be:d0:f8:41:f6:75:a2:8c:87:c7:29:4f:cf:85:e9:73:
         16:98:ba:d2:2f:d8:a5:39:c9:31:20:22:16:b8:bd:7a:97:28:
         96:67:13:5d:31:da:20:c1:2b:a0:48:19:ca:95:9f:d4:b9:24:
         ea:59:57:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:47:34 2026 by rpki-client