Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
File:                     gPPzEUyqjpJigXJfcn1gjZM5URg.mft (raw, json)
Hash identifier:          JYeOuW8pybORHGaOiQQ+vylUkUVcAyZfY1jnfJaK384=
Subject key identifier:   9E:9A:70:13:17:C0:AB:62:B6:07:06:B1:20:57:E2:C4:DB:E3:9D:C9
Authority key identifier: 80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
Certificate issuer:       /CN=80f3f3114caa8e926281725f727d608d93395118
Certificate serial:       019D9C62F1237AF382EC98A085533F4899D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
Manifest number:          050E
Signing time:             Fri 17 Apr 2026 17:00:23 +0000
Manifest this update:     Fri 17 Apr 2026 17:00:23 +0000
Manifest next update:     Sat 18 Apr 2026 17:00:23 +0000
Files and hashes:         1: 9VgFj1U5AyYKHqnm3AK0iZ8EyZY.roa (hash: y0d6gj7QyX83YX1GU3wakz/LTeS7oSLMM+wcVlzLLQc=)
                          2: gPPzEUyqjpJigXJfcn1gjZM5URg.crl (hash: /r0RUrDbmja0/UIrSp9JOjAzMivee/HKxIwDWJp3uhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:62:f1:23:7a:f3:82:ec:98:a0:85:53:3f:48:99:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f3f3114caa8e926281725f727d608d93395118
        Validity
            Not Before: Apr 17 17:00:23 2026 GMT
            Not After : Apr 18 17:00:23 2026 GMT
        Subject: CN=9e9a701317c0ab62b60706b12057e2c4dbe39dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:16:b8:19:ad:30:f2:75:98:09:31:4e:98:34:
                    48:b2:13:c4:69:bd:f4:e2:44:c0:ef:75:58:71:52:
                    90:0a:22:21:dc:50:1d:99:0b:c3:0e:9c:89:5b:2b:
                    e0:c0:e0:a7:34:c3:8e:df:29:6b:40:c9:1d:d2:42:
                    b4:be:13:b3:2c:06:bd:d3:e7:a5:3f:7e:95:6b:66:
                    1a:42:74:6f:78:e5:bf:64:9e:cf:7f:09:27:d4:66:
                    63:12:af:d4:47:11:ae:23:ac:6a:0e:c8:8b:b3:61:
                    f9:fb:a9:58:6c:4a:bc:c6:c9:cc:51:8e:8f:79:44:
                    7c:fc:26:83:52:d7:3b:7a:14:f3:f3:37:b8:5c:40:
                    2e:3f:78:dd:7d:da:84:d9:9f:63:9d:ee:0f:db:7e:
                    21:1b:a0:3c:05:a9:08:c8:7d:11:29:bc:70:f1:08:
                    00:03:55:71:3a:cb:91:f2:1e:a0:76:13:3b:12:4b:
                    8e:9a:7d:0e:7c:82:92:d8:21:21:bd:51:92:db:de:
                    f1:73:db:c5:53:c0:85:65:22:e8:09:17:59:61:85:
                    94:1d:99:cb:2d:f3:15:45:58:79:a8:98:c0:6a:ad:
                    bf:9d:69:7d:56:da:12:cf:3a:a4:d5:54:69:bd:56:
                    9c:bc:7b:ec:2e:4e:bc:83:e5:26:4d:64:d1:62:4f:
                    db:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9A:70:13:17:C0:AB:62:B6:07:06:B1:20:57:E2:C4:DB:E3:9D:C9
            X509v3 Authority Key Identifier:
                keyid:80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:95:f0:e1:df:fa:71:30:48:41:0a:ca:8a:70:25:9a:a6:8f:
         4e:bf:11:40:fc:22:67:78:c8:0b:ac:19:01:0b:55:d9:bd:ec:
         2e:6a:f6:52:31:f2:06:d4:18:a3:87:89:14:99:f1:f9:3e:42:
         e9:79:c6:b1:f1:d9:d6:bb:f3:78:fb:9f:19:8f:e4:fe:bb:e0:
         bf:fb:d7:27:3c:80:d4:3e:15:2a:62:8a:d9:bf:0b:80:f8:e0:
         fb:12:0f:64:52:d9:01:62:76:3c:1c:a4:03:c9:31:72:62:08:
         6e:9f:6a:ee:0f:fc:c7:97:85:cb:ce:72:3e:bd:5f:13:9f:f2:
         dd:d4:f9:1a:7d:44:3e:b6:4d:0a:59:ca:47:94:7b:30:02:a8:
         e0:aa:52:b8:5c:99:c2:29:a0:85:69:8f:45:80:47:53:c4:f6:
         68:39:65:d7:dc:44:52:17:12:4b:88:31:36:f1:06:5e:17:01:
         18:93:7d:f6:32:23:05:98:ca:ae:7c:fd:ce:c9:56:5a:91:b2:
         35:c1:47:ec:24:f2:0e:fe:9a:c3:91:db:f6:59:5c:ab:d6:b7:
         43:eb:81:8f:ea:fe:43:12:49:35:1f:10:1e:8c:6e:fa:cb:c3:
         b0:09:a2:09:9f:c6:ea:43:d4:c4:98:1e:55:ca:b0:f9:16:b7:
         e4:92:45:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:22:14 2026 by rpki-client