Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
File:                     gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft (raw, json)
Hash identifier:          KvyfEPwJKq6xAbU7OFj2V7RrlVimIghYaaEBBRBqxaA=
Subject key identifier:   54:7D:96:19:3C:A2:3E:31:1F:0F:A3:59:1C:B3:23:66:28:0E:C8:92
Authority key identifier: 81:52:38:88:EE:D5:31:1F:92:A1:66:15:EF:2C:F0:17:5C:6F:E4:1E
Certificate issuer:       /CN=81523888eed5311f92a16615ef2cf0175c6fe41e
Certificate serial:       019D9B51368422330AFEA3D05FF379BAD2E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
Manifest number:          104F
Signing time:             Fri 17 Apr 2026 12:01:23 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:23 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:23 +0000
Files and hashes:         1: 7ly9B-spICGtf03biM302y-qv8c.roa (hash: Q9wd8lqO1aqbdvOMhFFtm6Se5dFT3mbOpspfd9Kex7s=)
                          2: gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl (hash: JZhA9c/HfVL5E6hCpUIo1bWPV9FJowcPoHPkp9/ah5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:51:36:84:22:33:0a:fe:a3:d0:5f:f3:79:ba:d2:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81523888eed5311f92a16615ef2cf0175c6fe41e
        Validity
            Not Before: Apr 17 12:01:23 2026 GMT
            Not After : Apr 18 12:01:23 2026 GMT
        Subject: CN=547d96193ca23e311f0fa3591cb32366280ec892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f7:ad:45:b1:1a:ae:86:50:40:9d:5e:70:c0:
                    c9:29:7a:3f:61:0c:95:3c:13:a3:d9:26:23:34:f5:
                    6e:d2:2f:5a:63:1e:c7:87:cb:3b:30:bd:2c:5b:20:
                    b7:c5:38:d1:dd:43:14:7c:06:4d:00:28:ad:1b:75:
                    5f:53:04:90:32:9a:45:14:1b:74:97:01:98:8a:c3:
                    eb:75:a6:5d:d7:19:0f:fd:31:fc:8e:8a:74:48:1f:
                    14:0a:ce:ed:f0:b5:1f:13:65:a0:f4:96:93:f6:52:
                    f8:4c:21:3e:68:cc:ec:f9:82:b3:9b:85:f9:66:78:
                    b0:f6:c6:88:e7:c7:bc:cb:61:c6:6b:09:9a:58:62:
                    5d:6f:07:97:e8:b7:04:3d:e3:a7:63:3a:5b:dd:94:
                    83:b5:d5:13:87:b3:7b:b5:32:7b:8b:6a:ac:8f:5d:
                    a0:58:c8:a9:6e:15:27:5f:5e:bf:3f:3a:a7:99:c3:
                    19:49:3c:0e:81:2d:73:57:97:7c:f7:8a:ce:e0:84:
                    e2:48:15:5f:fc:df:c0:69:a7:87:37:b4:6d:be:20:
                    d9:82:ca:3c:15:e2:d5:a2:b1:13:6d:6c:81:24:10:
                    ce:f2:cb:22:ab:a1:85:ec:ae:14:92:53:47:08:32:
                    6f:42:34:44:e8:20:a5:42:83:61:f3:2e:50:40:c4:
                    b1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7D:96:19:3C:A2:3E:31:1F:0F:A3:59:1C:B3:23:66:28:0E:C8:92
            X509v3 Authority Key Identifier:
                keyid:81:52:38:88:EE:D5:31:1F:92:A1:66:15:EF:2C:F0:17:5C:6F:E4:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ea:2c:32:08:c8:4f:03:e7:5e:86:19:a3:26:ee:2c:e2:5c:
         aa:1a:a4:6a:5c:54:7c:ff:92:24:d8:f5:9c:c6:54:08:55:e8:
         23:c9:8f:de:c5:07:6b:df:19:1f:5d:24:42:6c:11:4b:91:67:
         54:e2:e2:48:92:94:e8:86:c1:3e:d9:98:73:a8:1c:18:f9:24:
         92:a3:65:25:d1:ca:39:25:74:cf:c3:bb:a2:dc:53:62:5b:ae:
         cf:52:b8:96:4d:32:5a:5b:77:e5:fe:29:41:9e:a7:bd:24:b3:
         8f:7b:e9:a3:2d:18:2f:b3:2b:5f:0d:87:8a:e8:4d:97:77:cb:
         79:72:2b:c6:fe:b6:d7:f7:6e:f1:c9:7d:f0:65:c4:4a:5d:0e:
         76:14:69:b9:91:ef:26:bf:a4:68:51:bb:a4:fb:03:5f:25:f7:
         4d:05:76:da:a2:31:18:01:10:9b:a8:a9:70:ce:e2:09:61:85:
         11:4c:f6:3a:d7:e9:71:2d:ed:dd:ee:d5:cb:6b:f7:ce:e2:41:
         cb:cb:e6:1f:90:88:ac:bc:bb:61:9d:fd:c9:ef:cd:88:a4:a2:
         d9:06:49:7d:e8:a5:fd:0d:c4:ea:38:a8:0a:48:03:43:ba:39:
         72:30:a6:c6:91:51:19:9b:47:ab:73:77:d3:2e:24:8d:59:bb:
         a2:05:ca:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:22:18 2026 by rpki-client