Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
File:                     GCJBwqTNGwi_W6VBLUkcScjrh40.mft (raw, json)
Hash identifier:          RUvIA/eAkk6R++d08GDqXjP6L2TjTu7R9gS0/dTlUO0=
Subject key identifier:   1C:A4:25:35:B8:52:89:5F:70:5F:34:68:B9:FD:03:09:43:03:00:0E
Authority key identifier: 18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D
Certificate issuer:       /CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
Certificate serial:       019FAC3EDD2C0B43BE0BC597454604AA59E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
Manifest number:          06BA
Signing time:             Wed 29 Jul 2026 05:00:28 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:28 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:28 +0000
Files and hashes:         1: GCJBwqTNGwi_W6VBLUkcScjrh40.crl (hash: 0WRV3CcS73W9RIgmXMo5bN0a+0HpAUk3NiXpua6a55I=)
                          2: PeoNHXokHMDq2XG5umTEZp1JMkI.roa (hash: knYWEfrEJBE1/OQa/3XQPBybR/ExGW5sYDHbUzsYQWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3e:dd:2c:0b:43:be:0b:c5:97:45:46:04:aa:59:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
        Validity
            Not Before: Jul 29 05:00:28 2026 GMT
            Not After : Jul 30 05:00:28 2026 GMT
        Subject: CN=1ca42535b852895f705f3468b9fd03094303000e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:19:89:ac:25:6c:fd:b6:81:7a:a5:c7:19:52:
                    c9:2b:dd:58:43:60:92:96:94:3e:56:76:bc:b2:38:
                    d3:1d:50:4e:25:98:54:e6:bb:8e:31:33:98:85:f9:
                    93:d0:4b:3c:45:2b:20:18:46:48:bf:a2:4a:a5:81:
                    f0:60:2c:e7:c4:f0:6f:93:bf:e0:65:c1:65:31:ea:
                    b0:8c:42:dd:9b:e4:45:92:df:73:91:0a:47:e3:02:
                    31:79:f0:5c:31:36:43:89:e9:1b:fa:ae:4b:b2:52:
                    b6:e3:62:4d:c6:cc:4f:63:f1:e7:0b:08:b2:5d:cb:
                    db:ce:6a:55:f8:0c:e5:5e:dd:3e:e2:e6:f0:18:9d:
                    1f:35:f2:c6:85:73:bf:3e:b7:d1:91:0e:04:d8:0f:
                    bc:47:8d:b9:b1:03:b0:f7:99:70:18:16:73:16:59:
                    1f:fa:8d:ed:a3:f3:ab:fd:bc:63:86:ef:aa:3b:bb:
                    72:38:21:d1:86:a1:81:83:00:9f:51:a0:72:6b:b5:
                    be:a4:0c:f3:39:dc:4c:6d:b6:ca:8a:0c:b3:89:f2:
                    2b:44:80:db:c0:54:0a:42:8e:9c:9a:fb:0b:f4:be:
                    3c:23:55:28:50:e0:15:ea:77:b9:27:7d:cd:47:82:
                    32:46:d0:9b:98:15:f7:df:52:f7:26:62:fa:ff:bb:
                    55:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A4:25:35:B8:52:89:5F:70:5F:34:68:B9:FD:03:09:43:03:00:0E
            X509v3 Authority Key Identifier:
                keyid:18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f1:88:7d:65:ce:1f:39:a5:35:03:7d:ed:f7:b8:d8:9a:34:
         e9:9b:8e:78:c0:83:4c:fb:c3:a3:d7:d9:fa:56:d6:1b:f3:fd:
         22:d3:8b:50:96:01:ab:b7:c3:5a:50:55:1d:05:5f:31:d9:f6:
         39:89:43:7a:46:16:90:f8:7b:57:08:be:c0:44:5a:30:e4:bb:
         97:c4:69:43:c9:ed:95:0a:90:81:a0:fa:12:16:7c:10:09:ee:
         f9:52:01:9b:11:45:41:be:e6:66:d9:e3:cf:4a:b9:48:68:c3:
         77:0e:21:6b:c5:c3:10:49:20:34:fa:b0:ed:bb:72:0b:6c:08:
         c5:42:5b:4e:1c:e8:6a:ae:bf:83:80:7d:2b:dc:a2:73:ef:26:
         3b:6f:f6:4a:6f:6a:6d:8d:39:37:96:c6:cd:d9:39:2a:22:6d:
         b6:c4:4f:3f:75:78:f5:4c:c6:ee:58:b7:1c:bd:cc:ea:64:90:
         ad:a4:a7:a8:75:3c:5c:25:23:b2:4f:61:72:1f:ee:85:5e:b4:
         9d:f1:d0:e1:19:6e:e0:37:0b:0c:5f:ba:b4:07:03:8f:bc:10:
         3b:3b:64:61:aa:1f:ea:21:3d:82:ae:87:a0:77:1f:d1:6b:59:
         39:ba:5d:a0:e0:1b:76:9c:a3:7c:1a:cd:59:c6:30:92:23:e4:
         dd:76:8f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:08:10 2026 by rpki-client