Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
File:                     gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft (raw, json)
Hash identifier:          djK7YCSJIRd3doer8cwU5p0FZU+piWayqLrGgooNgbs=
Subject key identifier:   48:B0:0F:4A:AE:76:C8:24:71:C8:68:2F:59:39:57:A1:22:0E:88:3D
Authority key identifier: 83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94
Certificate issuer:       /CN=83020637e89655e299d91843769254af07714994
Certificate serial:       019DA3E62F0C45154E8130BA97E31B05404E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
Manifest number:          0D2F
Signing time:             Sun 19 Apr 2026 04:01:04 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:04 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:04 +0000
Files and hashes:         1: gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl (hash: Z3m4VHFL0sc3SLd9/5p8ixoKk6Z9R/P3AoZKe51Sw9E=)
                          2: wyOe-kBLzrVKspKdZubryPdenk8.roa (hash: t5x0Z3ogkqDWsaKAMSpmWX7JpOr9Rc3hWNswuA+qbps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:2f:0c:45:15:4e:81:30:ba:97:e3:1b:05:40:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83020637e89655e299d91843769254af07714994
        Validity
            Not Before: Apr 19 04:01:04 2026 GMT
            Not After : Apr 20 04:01:04 2026 GMT
        Subject: CN=48b00f4aae76c82471c8682f593957a1220e883d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5e:0a:c0:4a:a4:c4:e3:63:59:bd:a6:75:29:
                    09:80:09:04:25:db:cd:84:e8:09:55:ca:00:3b:26:
                    a6:d1:a8:a5:e3:f6:3c:9b:fa:79:13:c3:83:5d:46:
                    e6:74:8d:eb:87:77:67:61:c3:d4:90:b3:f4:d9:39:
                    fd:d8:02:4d:3e:25:18:59:84:45:6d:a3:30:cf:59:
                    4b:d1:0f:ef:f7:33:93:08:7d:05:6e:d7:cb:ca:6f:
                    45:80:3d:04:87:3c:e6:a3:f9:e5:ae:8b:d3:ca:c4:
                    dd:85:f6:88:b8:cc:4e:2e:0c:17:2d:52:15:2b:7a:
                    52:2f:d7:2d:26:da:40:af:d8:32:1e:fb:33:94:35:
                    47:06:50:31:29:ad:5b:9d:2b:17:73:b0:3c:20:b8:
                    5b:93:64:f2:c4:d3:c3:7e:54:c2:e0:5a:1e:73:43:
                    10:95:8b:9f:fc:c0:73:c1:11:09:97:5a:8a:10:53:
                    33:8c:42:84:c7:1c:ee:fb:0c:c4:c7:f9:90:56:70:
                    98:ae:2b:01:9f:9c:97:3b:65:40:7a:d5:ec:7b:8c:
                    72:aa:fe:ce:d2:9a:fb:63:ad:20:39:de:52:2c:3f:
                    f5:b9:8a:4e:f5:44:39:f2:dc:f2:b2:bc:21:a1:2c:
                    bc:c0:41:b4:a9:3c:d5:0b:24:c6:d7:6f:a9:0a:cc:
                    fc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B0:0F:4A:AE:76:C8:24:71:C8:68:2F:59:39:57:A1:22:0E:88:3D
            X509v3 Authority Key Identifier:
                keyid:83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ca:aa:01:b4:29:8a:d4:3b:60:7d:65:2e:5e:82:bf:ef:7b:
         f9:58:e1:df:b3:f6:ed:90:55:a8:dd:f1:46:a2:fd:d5:2f:b6:
         ea:70:3d:ad:b1:59:74:3c:cd:1e:a9:08:56:ee:51:9c:78:7a:
         83:54:7f:33:0a:93:c9:f4:11:d9:1d:9d:0f:99:21:b2:a6:7d:
         17:70:49:d2:b2:b8:34:46:87:2e:ad:0a:b7:aa:94:74:92:2e:
         e4:e6:8f:8b:22:ff:e4:71:24:bd:64:51:e9:38:80:54:f7:09:
         53:db:94:9a:9c:e9:a3:78:5e:b1:db:49:36:47:5d:ba:a9:e7:
         52:56:5b:11:72:2d:3e:6d:a1:8d:bc:6d:05:e7:36:d3:a8:16:
         b6:ef:73:23:7c:5b:49:c9:0f:da:57:d3:44:78:13:85:1a:d2:
         53:81:1d:b7:14:e6:bc:e0:76:43:cf:5b:19:57:ec:40:21:7b:
         5f:b0:f8:7f:0a:c6:81:32:84:81:27:28:32:a2:ad:db:d6:ac:
         25:b7:d5:f8:3b:e9:eb:c5:35:38:2c:9b:06:34:13:93:f6:4e:
         b5:84:db:0d:c1:6b:a2:88:61:15:d0:41:a9:11:91:ad:3e:45:
         30:70:68:28:71:02:37:c4:43:e2:d7:1d:3e:72:48:ec:0d:0a:
         0e:24:46:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5i8MRRVOgTC6l+MbBUBOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDIwNjM3ZTg5NjU1ZTI5OWQ5MTg0Mzc2OTI1NGFmMDc3
MTQ5OTQwHhcNMjYwNDE5MDQwMTA0WhcNMjYwNDIwMDQwMTA0WjAzMTEwLwYDVQQD
Eyg0OGIwMGY0YWFlNzZjODI0NzFjODY4MmY1OTM5NTdhMTIyMGU4ODNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV4KwEqkxONjWb2mdSkJgAkEJdvN
hOgJVcoAOyam0ail4/Y8m/p5E8ODXUbmdI3rh3dnYcPUkLP02Tn92AJNPiUYWYRF
baMwz1lL0Q/v9zOTCH0FbtfLym9FgD0Ehzzmo/nlrovTysTdhfaIuMxOLgwXLVIV
K3pSL9ctJtpAr9gyHvszlDVHBlAxKa1bnSsXc7A8ILhbk2TyxNPDflTC4Foec0MQ
lYuf/MBzwREJl1qKEFMzjEKExxzu+wzEx/mQVnCYrisBn5yXO2VAetXse4xyqv7O
0pr7Y60gOd5SLD/1uYpO9UQ58tzysrwhoSy8wEG0qTzVCyTG12+pCsz8WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiwD0qudsgkcchoL1k5V6EiDog9MB8GA1UdIwQY
MBaAFIMCBjfollXimdkYQ3aSVK8HcUmUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3dJR04taVdWZUtaMlJoRGRwSlVyd2R4U1pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MjFkMTItZmU3YS00ZDk0LThmYTkt
YjJiZmFjM2IzMjA0LzEvZ3dJR04taVdWZUtaMlJoRGRwSlVyd2R4U1pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81MjFkMTItZmU3YS00ZDk0LThmYTktYjJiZmFjM2IzMjA0
LzEvZ3dJR04taVdWZUtaMlJoRGRwSlVyd2R4U1pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcqqAbQp
itQ7YH1lLl6Cv+97+Vjh37P27ZBVqN3xRqL91S+26nA9rbFZdDzNHqkIVu5RnHh6
g1R/MwqTyfQR2R2dD5khsqZ9F3BJ0rK4NEaHLq0Kt6qUdJIu5OaPiyL/5HEkvWRR
6TiAVPcJU9uUmpzpo3hesdtJNkdduqnnUlZbEXItPm2hjbxtBec206gWtu9zI3xb
SckP2lfTRHgThRrSU4EdtxTmvOB2Q89bGVfsQCF7X7D4fwrGgTKEgScoMqKt29as
JbfV+Dvp68U1OCybBjQTk/ZOtYTbDcFroohhFdBBqRGRrT5FMHBoKHECN8RD4tcd
PnJI7A0KDiRGLg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:18:12 2026 by rpki-client