Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
File:                     GbsyomYvkFwNi_JH7ODbxnmha4Q.mft (raw, json)
Hash identifier:          Lwq8CmMJY8XMzUZZuxk8IWS18liOxMSu5d/zWaetVi0=
Subject key identifier:   4F:A4:09:23:A6:97:DA:7B:C5:A8:03:F6:56:46:CE:D9:0A:6C:AD:68
Authority key identifier: 19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84
Certificate issuer:       /CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84
Certificate serial:       019EBF232E30F1A0064EEC0C1A34E4EFAEF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
Manifest number:          067A
Signing time:             Sat 13 Jun 2026 04:00:14 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:14 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:14 +0000
Files and hashes:         1: GbsyomYvkFwNi_JH7ODbxnmha4Q.crl (hash: LHw9Xn1pTEk2EqbzNNdim0j7yePeE3Syk34rbT883yE=)
                          2: Ip5f-rtoZ2VJ7SiwM6fpe8-kxhs.roa (hash: VpZtyINbjieT/4qcJpty0j6h8djbUlkDrnIQP/pseyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:2e:30:f1:a0:06:4e:ec:0c:1a:34:e4:ef:ae:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84
        Validity
            Not Before: Jun 13 04:00:14 2026 GMT
            Not After : Jun 14 04:00:14 2026 GMT
        Subject: CN=4fa40923a697da7bc5a803f65646ced90a6cad68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:17:2b:93:ce:b6:b8:80:34:d3:77:f7:f0:d0:
                    eb:94:fc:08:9e:d5:23:99:16:6d:ff:97:2c:81:bc:
                    57:5d:da:32:3e:3d:75:23:a3:6a:9d:a5:10:2b:f9:
                    9d:62:48:ff:95:ac:1a:65:d0:70:b3:bd:31:07:aa:
                    eb:d4:4e:bf:c4:cb:39:64:2b:d0:00:e1:d4:6a:b9:
                    30:2f:34:43:f9:e3:90:87:e3:de:a9:ae:98:52:e4:
                    b5:79:69:e9:4b:9a:0f:0b:63:f5:46:04:c0:7d:d5:
                    aa:75:b5:ec:81:1a:01:b6:7b:83:bf:44:83:1e:2d:
                    6a:32:2d:63:d6:61:07:37:7a:a1:88:a0:3b:cd:60:
                    7a:3e:95:1b:e1:d2:e3:75:6a:51:25:32:2e:30:cf:
                    a2:36:c1:67:b6:17:41:55:01:5d:f2:51:53:07:22:
                    cd:e5:f4:28:b1:97:63:89:ab:d5:88:8c:73:96:36:
                    c2:c5:fe:b0:34:9c:cc:06:68:aa:15:00:14:13:08:
                    57:4a:6e:e2:0c:e0:12:43:e4:f7:0a:db:c2:83:22:
                    9a:62:34:83:c1:9c:f8:22:0d:d8:f0:e3:ff:a3:34:
                    fc:c2:2b:92:03:19:7a:c8:63:4a:ab:c1:e7:a5:0a:
                    24:e0:92:a8:21:d4:bf:57:6e:46:00:f9:b5:1e:8b:
                    9c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A4:09:23:A6:97:DA:7B:C5:A8:03:F6:56:46:CE:D9:0A:6C:AD:68
            X509v3 Authority Key Identifier:
                keyid:19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:74:a0:67:86:42:79:5d:f4:75:d2:13:bc:b4:c2:5f:54:ae:
         20:bb:65:33:c0:c5:50:72:a8:2a:fe:77:4f:b0:fa:03:ba:85:
         b3:d6:c2:d8:4c:a9:07:07:6c:89:41:f4:e4:f9:ff:59:e7:19:
         c6:26:28:fd:57:0a:63:4f:9e:62:48:f6:19:15:d9:6a:98:61:
         2a:2a:db:70:62:b4:ae:41:ed:03:5a:39:cb:48:03:b3:38:7a:
         5b:2b:6a:fc:ce:05:36:15:1d:a3:19:1d:c3:66:c1:61:9e:67:
         f4:b0:3e:5a:ea:cf:09:23:ca:e2:98:59:26:ac:a4:68:26:fc:
         8d:b2:01:3f:1b:86:41:db:7c:70:e3:ea:a8:19:c4:f9:92:71:
         44:cb:e2:a3:65:75:e0:c8:82:a0:d4:e0:63:06:59:54:f2:be:
         9a:b5:8c:94:d8:43:75:7c:ca:88:3a:8a:c9:e6:1a:9f:87:3e:
         92:7f:b3:fe:41:cc:be:fd:c4:77:ba:7a:0d:4e:c2:56:1f:5d:
         e2:ac:8b:98:8c:97:aa:c5:d5:ba:dc:3b:8b:af:a0:2e:b6:db:
         c5:dc:bf:5d:5d:9c:71:5f:46:60:2c:98:70:f1:2c:97:a6:90:
         8c:dd:62:64:21:5e:cd:e8:35:50:d8:df:00:3f:88:e8:5a:84:
         1e:bc:9e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:36:48 2026 by rpki-client