Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
File:                     GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft (raw, json)
Hash identifier:          oYcg+lH3mAKyIYiOlFbJhp+M8322mYTHoUd7HX7/upQ=
Subject key identifier:   77:81:94:05:EC:19:4F:0A:EA:47:23:60:9A:B0:CA:AE:8B:71:CF:C0
Authority key identifier: 19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91
Certificate issuer:       /CN=194e32a82e98f22d939ff9984455813be2ba6a91
Certificate serial:       019ED499F7A30AD890527C63D4E453910AAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
Manifest number:          0483
Signing time:             Wed 17 Jun 2026 08:02:00 +0000
Manifest this update:     Wed 17 Jun 2026 08:02:00 +0000
Manifest next update:     Thu 18 Jun 2026 08:02:00 +0000
Files and hashes:         1: BZBAahTREA8Q_3coOvyfGf9sdjY.roa (hash: jde/2VQaoII8kUESbj5JRDjPMDFmOdYKULZBf+Xi1JA=)
                          2: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl (hash: BPXxX0pQmiuNS3nsJMpwA8mIsCl8jda6L6eE6ZBud4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:99:f7:a3:0a:d8:90:52:7c:63:d4:e4:53:91:0a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194e32a82e98f22d939ff9984455813be2ba6a91
        Validity
            Not Before: Jun 17 08:02:00 2026 GMT
            Not After : Jun 18 08:02:00 2026 GMT
        Subject: CN=77819405ec194f0aea4723609ab0caae8b71cfc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f1:73:29:71:65:2d:4a:5f:a4:58:a1:30:c7:
                    1d:15:77:63:2b:21:0d:56:04:6b:79:43:82:75:b8:
                    05:d5:3c:6f:c3:62:0b:4b:f4:8c:6e:ed:6a:4e:07:
                    78:42:48:76:d0:a9:7d:9d:6d:6a:de:b1:91:f3:cc:
                    b8:14:b2:c3:1b:18:39:67:e3:00:36:07:2a:70:f5:
                    ef:8e:4f:0d:60:fb:91:dc:62:1b:d7:63:4d:16:82:
                    8d:1a:83:63:09:4c:bb:3c:54:29:1b:63:d8:ea:46:
                    2f:07:b2:a6:b7:7a:2a:4c:26:ec:f8:15:1b:30:f8:
                    38:b5:dc:2b:fe:a3:8d:33:f6:5f:06:48:18:4f:b9:
                    2f:7d:27:7f:e8:ef:d2:46:2a:e1:0e:f4:4d:5c:71:
                    b2:57:cd:e2:b6:2d:4f:81:c8:9c:ab:33:bd:af:70:
                    80:d7:fd:d0:05:c5:55:12:84:c6:d5:1c:4f:11:09:
                    58:fb:6a:7e:15:61:5d:ef:47:b0:da:13:2a:b2:a6:
                    c1:d4:2f:22:25:1f:3d:84:fe:f8:b7:20:b7:8f:8b:
                    b2:09:3a:cd:a7:20:71:8c:09:df:ff:36:ca:65:db:
                    2f:87:76:4e:15:c7:f4:88:fa:78:e9:9e:5e:5e:29:
                    29:25:c8:9a:a5:53:b0:94:76:db:21:8a:48:de:83:
                    ab:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:81:94:05:EC:19:4F:0A:EA:47:23:60:9A:B0:CA:AE:8B:71:CF:C0
            X509v3 Authority Key Identifier:
                keyid:19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:68:55:8b:8a:2a:26:59:88:7c:77:1f:ea:17:e5:4e:2f:89:
         76:2a:dc:e7:8f:6f:b5:25:d5:aa:9b:e2:89:e7:33:36:e2:9b:
         1d:dc:f1:52:99:ce:f4:a3:c2:22:1a:8b:ef:ed:c7:7d:b5:11:
         e2:cf:63:1b:67:d9:5f:f8:75:dd:cc:5c:5b:54:04:55:65:0b:
         ba:8b:93:16:db:80:89:81:a7:1e:ab:01:d6:b1:6e:ed:de:53:
         76:6b:6b:d0:ad:be:47:5d:62:0e:86:44:6c:ef:60:eb:07:ba:
         7a:65:9f:33:cc:e9:e2:82:81:0b:34:77:6b:40:51:54:e7:c2:
         48:60:e2:d4:09:50:a9:9d:75:e3:c9:2d:b2:5f:79:05:79:fb:
         ed:ab:f0:75:24:d7:6a:a1:10:a7:69:c2:e0:e9:48:fa:d9:de:
         3b:a0:e2:a8:f4:9b:a2:fa:98:f0:d6:75:69:f6:83:6f:3f:03:
         0c:4b:67:ba:06:c1:9c:3b:db:55:fe:46:8d:a6:ea:b6:88:18:
         e3:fb:06:90:59:e5:32:c8:72:f2:bf:ae:9f:c6:bd:50:b6:ce:
         5e:47:e5:61:1b:c6:e4:3b:6b:36:12:0c:e6:fb:4d:91:4d:b6:
         29:53:07:36:66:12:b4:e6:8f:c4:67:4d:8d:86:4b:5a:f2:74:
         c2:1f:97:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 16:52:13 2026 by rpki-client