Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
File:                     GYNgTwg-WMPNGdOUgLqq3zihm2M.mft (raw, json)
Hash identifier:          P2khUAv/qMMmazSMtOrUSeb+nFn0UXuXvbCcohq9Hbk=
Subject key identifier:   E6:A1:B8:5C:D4:C4:BF:A0:5C:AC:5D:FC:01:66:B4:94:7B:92:F1:49
Authority key identifier: 19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63
Certificate issuer:       /CN=1983604f083e58c3cd19d39480baaadf38a19b63
Certificate serial:       019EC111E6AA79E1682008A9CD533BFDB511
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
Manifest number:          0BE5
Signing time:             Sat 13 Jun 2026 13:00:36 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:36 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:36 +0000
Files and hashes:         1: GYNgTwg-WMPNGdOUgLqq3zihm2M.crl (hash: pq2Hr+ChjXKeKSOVjOk5r/O5TG8+RkLAkCvMAQPcm10=)
                          2: oWw98f4bNM9LtIQxRub1EWETvac.roa (hash: aAOilAHbjhSIlksDdDQYiXq9fjYiWz1hB658OU9itjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:e6:aa:79:e1:68:20:08:a9:cd:53:3b:fd:b5:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1983604f083e58c3cd19d39480baaadf38a19b63
        Validity
            Not Before: Jun 13 13:00:36 2026 GMT
            Not After : Jun 14 13:00:36 2026 GMT
        Subject: CN=e6a1b85cd4c4bfa05cac5dfc0166b4947b92f149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5a:ed:28:56:86:3e:47:4b:ff:5f:8a:f3:df:
                    60:81:e5:14:fa:e0:88:25:bd:d3:0a:66:58:75:91:
                    3b:84:5a:74:99:dc:9e:63:63:dd:c8:1e:ab:7d:b0:
                    16:3a:86:97:cd:e3:44:65:f5:d4:ac:b5:79:a2:c4:
                    77:39:20:7d:ae:2c:af:a0:ea:ef:10:aa:0e:ae:7e:
                    23:24:22:51:f2:5f:41:2f:60:c3:80:4e:35:4b:fa:
                    2e:b7:20:2f:d9:61:c7:e3:69:8e:48:b8:be:43:60:
                    c4:98:85:23:62:98:b6:2a:b0:07:81:14:13:bd:0c:
                    b0:f7:80:45:27:dd:33:35:a7:a3:68:70:97:b4:60:
                    b4:2c:b0:1f:e0:7d:c1:ef:1c:02:37:87:e7:8c:0f:
                    02:79:dd:18:91:c5:10:1a:eb:04:75:a6:88:20:c6:
                    79:7a:5f:71:b9:2d:c1:ca:e2:78:9b:98:1c:b9:8a:
                    bd:65:2e:03:f8:93:bd:b6:cc:8e:2b:fd:ac:ce:4a:
                    77:99:a5:9d:4f:e5:bb:fe:4f:8f:e5:e5:13:89:e9:
                    e5:92:f7:9c:d7:8d:b6:34:10:39:1d:f1:90:48:d8:
                    04:7c:81:01:5b:13:d0:ed:3d:32:f0:2a:0b:f9:f0:
                    5d:db:7d:7e:8d:5d:ed:bc:6d:b5:f0:c4:6d:a3:fe:
                    bc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A1:B8:5C:D4:C4:BF:A0:5C:AC:5D:FC:01:66:B4:94:7B:92:F1:49
            X509v3 Authority Key Identifier:
                keyid:19:83:60:4F:08:3E:58:C3:CD:19:D3:94:80:BA:AA:DF:38:A1:9B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYNgTwg-WMPNGdOUgLqq3zihm2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9ac86a-85ed-4a1c-873f-752905330392/1/GYNgTwg-WMPNGdOUgLqq3zihm2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:3c:14:d9:4f:9f:23:40:c2:a3:c2:08:58:ee:83:6c:7d:ca:
         f5:10:5d:83:c4:f1:1c:6e:63:6e:6a:50:97:16:c8:3e:c6:5e:
         93:f7:4c:20:44:b3:b7:b8:e9:e1:93:0f:ff:92:f2:64:3a:19:
         87:22:cb:88:3d:db:c6:40:67:e8:3d:d1:b8:4c:41:67:18:03:
         35:5d:ae:0a:5f:87:97:46:2d:85:74:79:49:c3:63:e8:ff:89:
         f9:c0:b2:f8:b1:bf:3b:65:db:0b:c6:f9:fb:82:33:bc:8c:cf:
         6b:ce:4f:da:39:de:ee:66:32:e5:92:e9:c9:a5:ab:1c:ac:62:
         22:c6:9e:e2:fb:5f:d2:44:33:e3:8d:3a:c4:f9:73:9b:2b:2e:
         0c:da:71:7b:e8:1b:17:15:a2:64:6c:96:39:97:a0:9b:d4:16:
         b5:ca:bc:f5:c6:eb:08:fc:5a:af:f1:c4:fb:72:26:25:99:15:
         25:eb:79:80:2b:2a:ee:c9:4a:c0:76:c1:44:07:2d:f1:24:43:
         69:f5:60:fa:8a:9e:fa:e7:38:06:81:90:a2:92:f8:4a:cf:d2:
         9d:d3:d4:17:65:22:c7:2c:b3:e4:83:09:75:f4:9d:d3:4c:b1:
         a7:82:4c:99:79:db:f4:0a:08:38:03:9a:1f:12:f6:84:2b:8f:
         a2:90:12:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:28:31 2026 by rpki-client