Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
File:                     G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft (raw, json)
Hash identifier:          ggB5ug3q74kyNkESQLJWOtJAIBlyu5IKEbVwmpb6US0=
Subject key identifier:   81:EA:68:27:9C:72:16:D2:4D:35:7E:61:BF:FA:80:99:B4:12:A0:43
Authority key identifier: 1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3
Certificate issuer:       /CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
Certificate serial:       019D9AE33646A871C0081B1C6A56C37B45D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
Manifest number:          0D87
Signing time:             Fri 17 Apr 2026 10:01:14 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:14 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:14 +0000
Files and hashes:         1: G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl (hash: s2p5IF4ae7Zty0L9v3SiknqsG855BQ9OE3wer0XqIRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:36:46:a8:71:c0:08:1b:1c:6a:56:c3:7b:45:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
        Validity
            Not Before: Apr 17 10:01:14 2026 GMT
            Not After : Apr 18 10:01:14 2026 GMT
        Subject: CN=81ea68279c7216d24d357e61bffa8099b412a043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d5:1f:7c:a9:dc:ea:d3:06:06:46:4d:66:f0:
                    c2:dc:79:41:4f:60:64:e3:41:5f:d2:14:65:6c:ba:
                    79:25:91:8a:30:a5:1e:41:1d:4b:89:ec:56:8a:97:
                    78:3b:ba:52:89:32:e0:aa:0a:c1:9f:25:c5:54:95:
                    4c:15:e3:54:d7:cf:be:1b:54:e9:5f:66:42:f8:5a:
                    4f:aa:01:83:77:e5:96:1f:68:33:13:c5:6d:4b:94:
                    ac:14:06:95:1c:55:7e:9e:56:9e:09:c9:10:69:e1:
                    9f:fe:3b:62:4b:0d:78:ff:4f:c8:c2:95:79:ca:58:
                    b1:02:5f:d2:c8:30:b2:c7:a2:c7:88:c7:09:f0:ea:
                    a1:cf:7f:90:dd:21:53:1c:b4:31:2d:a6:ba:56:9f:
                    28:52:5f:5b:a4:cf:3a:25:89:8c:7e:40:9f:8c:f6:
                    90:8e:48:47:ca:3d:fb:ee:c1:7f:62:b5:7b:cc:e6:
                    c4:59:33:02:47:08:2f:04:e4:e4:af:18:52:f7:74:
                    fd:ae:97:4b:ea:11:5d:96:27:43:e5:75:bb:9b:89:
                    70:89:78:6d:72:4e:b5:a8:3d:72:01:71:d6:1c:da:
                    c5:ee:0d:61:4f:dc:da:4c:b9:ad:77:db:f6:f8:bf:
                    fa:46:03:37:0d:bd:c8:e6:11:0b:13:bb:1c:79:06:
                    7e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EA:68:27:9C:72:16:D2:4D:35:7E:61:BF:FA:80:99:B4:12:A0:43
            X509v3 Authority Key Identifier:
                keyid:1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:01:5c:54:77:e9:4a:fc:64:1f:e3:bc:79:3f:49:1d:69:de:
         dc:65:b8:ed:d6:08:75:61:68:88:6d:24:f2:29:34:e1:cb:ba:
         30:ff:47:8c:f6:96:ad:f7:79:39:7d:b2:2a:6c:20:d2:43:57:
         bb:43:42:ed:b8:90:92:11:fa:f9:e1:96:e1:73:f7:4a:f2:a9:
         36:ec:7c:89:56:0c:4f:d8:14:91:c9:2b:d8:2d:48:db:3d:2a:
         7d:a7:aa:53:a7:7b:e3:86:10:e2:85:53:a5:dc:77:e6:c5:f2:
         64:cb:dc:db:be:91:f4:73:1d:02:eb:c8:cf:48:73:9d:db:d4:
         11:6e:d2:ef:48:25:86:69:f8:cf:51:19:3e:93:69:7d:9e:fa:
         b8:ae:9e:68:51:c1:1f:94:70:00:4b:a7:ca:04:d9:c1:4d:5d:
         62:8c:cc:b8:17:f4:cb:6c:fb:e4:f4:a2:3e:f3:13:53:9c:6b:
         bd:e6:aa:56:5b:85:b5:72:4b:fc:f0:e2:82:aa:3c:cf:81:88:
         59:48:19:4f:c2:68:16:c8:e7:27:ae:b9:10:8c:6b:5b:05:41:
         9f:eb:8e:de:d5:d0:04:8e:8a:41:94:4b:12:09:bb:e9:13:a6:
         96:d7:e6:ac:7b:bb:7e:5a:27:89:c2:b4:ee:a6:78:2b:07:88:
         7c:57:af:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:34:39 2026 by rpki-client