Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
File:                     GPijrw2MDVHeLd0mWtVNq5e95s4.mft (raw, json)
Hash identifier:          eXSPMvLQDSJqBM4yt2ERxdO38/+vFy3iGm3EzaL6Qh0=
Subject key identifier:   24:EE:1F:1D:EE:CD:18:D9:79:55:F6:FA:C3:D9:F0:A4:13:9A:38:CA
Authority key identifier: 18:F8:A3:AF:0D:8C:0D:51:DE:2D:DD:26:5A:D5:4D:AB:97:BD:E6:CE
Certificate issuer:       /CN=18f8a3af0d8c0d51de2ddd265ad54dab97bde6ce
Certificate serial:       019FAAF583050181AB4A41D9291FBE2CC304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
Manifest number:          0281
Signing time:             Tue 28 Jul 2026 23:00:44 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:44 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:44 +0000
Files and hashes:         1: GPijrw2MDVHeLd0mWtVNq5e95s4.crl (hash: 6/7lrpWvB7iMOUcBcZdYyYYPZzaRLf7iGluTJjZl/vE=)
                          2: q-3PkcuXvbxG2AJOGo6sUKyZOAU.roa (hash: a1DkrhlznASzhUP99TVl/s5bY4rDfTZ4JGlmLv4QaHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:83:05:01:81:ab:4a:41:d9:29:1f:be:2c:c3:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18f8a3af0d8c0d51de2ddd265ad54dab97bde6ce
        Validity
            Not Before: Jul 28 23:00:44 2026 GMT
            Not After : Jul 29 23:00:44 2026 GMT
        Subject: CN=24ee1f1deecd18d97955f6fac3d9f0a4139a38ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:33:4a:cf:45:1d:a0:1b:b1:50:18:b9:62:36:
                    45:39:9c:ed:46:7a:8f:7c:e9:db:55:11:d1:23:af:
                    59:59:8f:1b:23:05:d2:69:c3:1f:7e:e7:2e:7b:f3:
                    bf:70:4f:e3:ac:58:c6:79:c9:08:6f:d3:a5:05:e9:
                    dd:c4:1e:af:a3:01:8b:2b:00:0a:51:d0:10:42:e2:
                    88:1b:6c:d4:d7:93:ec:9f:23:ae:71:95:43:8e:da:
                    74:f4:70:0d:e1:93:c7:2b:22:17:8a:3b:dc:7a:95:
                    58:6f:bb:24:aa:bf:5e:2f:f2:23:c3:da:7d:73:52:
                    0d:88:47:4a:d0:75:e9:0a:7a:32:56:7c:09:23:ab:
                    97:04:6f:99:bd:e6:97:19:81:ce:74:a9:f0:5d:54:
                    f5:70:37:e9:ba:b5:3f:96:fc:a7:61:b1:df:6b:f8:
                    f4:b0:07:2a:75:0b:6c:fc:71:a1:94:91:c3:5d:d6:
                    8c:06:2c:bf:7f:8e:f2:12:27:23:8d:5d:5e:31:e7:
                    97:0a:e1:69:a6:9a:80:40:4a:ff:d3:3f:e3:f4:7e:
                    4f:19:76:f8:a6:fd:65:df:5c:b1:92:eb:e8:55:2f:
                    c9:93:c7:07:5a:d4:32:8b:29:10:47:70:1c:25:49:
                    4c:6b:56:d6:3f:51:d7:1e:d8:20:e3:30:21:dc:06:
                    12:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EE:1F:1D:EE:CD:18:D9:79:55:F6:FA:C3:D9:F0:A4:13:9A:38:CA
            X509v3 Authority Key Identifier:
                keyid:18:F8:A3:AF:0D:8C:0D:51:DE:2D:DD:26:5A:D5:4D:AB:97:BD:E6:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:26:b5:77:aa:1f:5e:a6:48:3b:94:61:38:f3:6f:8e:74:62:
         41:1f:d7:5c:b1:f4:da:d0:94:37:8d:92:0b:98:a0:78:94:28:
         db:fb:61:12:cd:6b:f1:88:99:0e:ea:be:8a:ef:03:42:a0:13:
         9d:07:92:7d:66:6b:6b:c1:f0:d1:a1:30:0e:74:1a:30:87:69:
         c3:1d:57:8c:86:63:5e:ae:96:fd:86:da:26:1f:90:26:d5:96:
         f7:e6:d5:4c:53:8b:5c:6e:6d:d3:a8:8e:e4:8b:d7:9d:cd:33:
         f7:fe:d4:66:80:cb:6f:58:18:a7:23:6f:b1:88:a1:f2:97:df:
         80:c2:fe:d1:c7:81:84:ed:4e:06:89:ca:c8:ac:83:a9:37:f0:
         6a:fa:87:b2:1b:8c:4d:5d:8c:1b:0c:43:f1:e3:02:b2:2c:31:
         09:a4:06:13:03:73:9e:18:40:ae:5d:80:67:b0:52:29:4c:85:
         15:58:7b:b0:5d:84:32:22:fb:b5:e6:84:44:5c:9c:e1:24:5c:
         a8:e8:9e:6a:e8:e5:ac:f1:b6:19:44:5d:13:9f:47:c1:26:75:
         5d:88:8f:66:9f:47:5a:14:9f:f6:62:f4:fa:db:18:5c:7a:02:
         5f:8b:e5:dc:08:eb:23:34:a8:24:58:42:d4:96:f6:03:81:ef:
         f9:fa:1f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:58:25 2026 by rpki-client