Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
File:                     GTdDRntNpBxilek1EVMwlYa6I5k.mft (raw, json)
Hash identifier:          U+FPHKjUkPP42PCkZbMZsJ8ZFdAQXITY/+zsWsOqlek=
Subject key identifier:   83:88:E0:2F:1A:F5:25:D4:69:9E:11:36:9D:BA:6F:0D:74:11:B0:CB
Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
Certificate issuer:       /CN=193743467b4da41c6295e9351153309586ba2399
Certificate serial:       019DA377FA7F52828BCE5C1DF0BD16583218
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
Manifest number:          1549
Signing time:             Sun 19 Apr 2026 02:00:42 +0000
Manifest this update:     Sun 19 Apr 2026 02:00:42 +0000
Manifest next update:     Mon 20 Apr 2026 02:00:42 +0000
Files and hashes:         1: ESOn4YVwMvjEwp43_BIg6dF4bME.roa (hash: R9TTpag0gjQGiKGRJHhKu7HUgpmc2rwTNbk37Twi9mw=)
                          2: GTdDRntNpBxilek1EVMwlYa6I5k.crl (hash: ISY2EC5AyVz1oClPgeDG+2Q23Cx0p077DblCNG2GPfY=)
                          3: a1Wzzm6d-RLRzAcChfLkzjD6yj4.roa (hash: u2suJZ9dSTEdpIWAwFWYGCWey0B3AvIkAHlBujdVtCc=)
                          4: bonvg5XaBQcMsNMwCdMc5lDAhv0.roa (hash: ZSoRPjPH88M9xek3/eVzci4XvPHF1Itjvf+UZyNuK0s=)
                          5: h-e8ELzqBHgqs0gO88cD6j4kiUw.roa (hash: IFfM4s3xZcomvpllzauBa/HUt3f3fExXfJyGi7VQ3a0=)
                          6: tgxCEeVuZ-EDQmEz7GRXe-l5ETE.roa (hash: LUh2uL8YOcgSTcCxK3/07PSsvLuQW83QgTZqddE2hIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:77:fa:7f:52:82:8b:ce:5c:1d:f0:bd:16:58:32:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193743467b4da41c6295e9351153309586ba2399
        Validity
            Not Before: Apr 19 02:00:42 2026 GMT
            Not After : Apr 20 02:00:42 2026 GMT
        Subject: CN=8388e02f1af525d4699e11369dba6f0d7411b0cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:81:46:6d:ca:71:36:12:a4:b7:e3:43:a3:f4:
                    70:5d:56:e6:2c:50:43:a4:6a:33:5c:ec:9d:1d:22:
                    4d:b3:6c:db:e4:f6:a6:0a:9f:19:ac:b7:ee:61:49:
                    22:f9:e9:ab:06:4f:da:45:ef:a3:86:e5:e2:25:75:
                    ef:65:8b:3a:29:8a:1f:c7:9e:9e:ec:4b:72:c8:9e:
                    6a:91:4c:64:62:98:24:54:05:55:1d:ae:89:78:a8:
                    c9:fb:fb:11:a8:38:92:05:0a:c4:54:b1:23:74:f9:
                    05:b7:0b:eb:0e:a6:8d:73:20:32:11:1a:fc:fa:c6:
                    3b:9f:66:81:78:70:31:19:88:19:1e:74:5f:f3:f9:
                    6d:7f:ab:4c:1e:43:62:d2:9b:32:fb:68:fe:19:02:
                    9a:be:e7:b9:d0:1a:a9:22:13:6b:43:2f:5f:2b:d6:
                    58:c5:25:10:52:99:2a:f4:b9:0c:54:ed:93:42:4b:
                    e1:5a:e6:4d:22:00:30:d5:4f:22:8d:af:80:7d:74:
                    3d:18:ca:76:2f:0b:d3:d6:0b:97:a4:33:04:e5:83:
                    a6:a8:a4:0e:c2:6e:c6:7b:b8:61:6c:5f:2e:02:4a:
                    99:95:47:e5:9c:c1:86:74:fb:3c:58:2c:87:6f:7f:
                    78:37:03:c6:47:34:df:64:fb:e6:bb:1e:73:bb:44:
                    37:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:88:E0:2F:1A:F5:25:D4:69:9E:11:36:9D:BA:6F:0D:74:11:B0:CB
            X509v3 Authority Key Identifier:
                keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e3:af:01:59:5f:cd:2e:66:6a:c1:54:9c:91:23:40:fa:06:
         14:c9:10:fa:f8:88:af:b1:7d:db:91:41:6c:f0:ee:b7:b0:ec:
         0b:46:4a:8f:ad:a1:95:40:b9:cb:85:08:1c:36:e3:1c:4b:93:
         a5:3d:cf:47:38:16:e0:03:00:fe:d2:0c:03:ec:8b:63:0e:8d:
         02:91:b1:36:62:e7:1d:ce:4b:a0:2d:14:d9:cd:9f:e1:a3:cf:
         5c:af:f7:e2:83:88:08:20:1a:8d:7e:0a:09:99:c3:e3:fa:d4:
         d1:e0:60:18:ed:71:66:5f:f3:2e:cc:f2:5a:86:ac:69:c1:8e:
         af:ec:6a:02:c2:43:cc:36:6a:c4:9d:ee:90:f9:e9:93:7c:e4:
         39:e2:58:fe:89:4d:0b:cd:94:9e:89:98:24:2d:85:11:ab:74:
         a0:8c:93:16:b0:07:1d:b9:dc:05:e4:80:53:aa:b9:b6:f0:d2:
         d1:50:36:c9:2f:36:00:2b:52:80:ab:aa:9f:7e:f7:72:64:47:
         b5:e9:d7:0e:fc:be:ea:6c:b6:2a:f3:0f:4d:a8:37:36:fa:cd:
         5f:7a:39:52:b2:d8:09:98:0c:78:1c:87:8b:e3:d2:3b:95:9f:
         c5:2c:6a:bc:1f:0d:e4:5e:27:7b:46:4a:79:58:5f:99:b6:cf:
         cb:41:54:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:06 2026 by rpki-client