Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
File:                     gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft (raw, json)
Hash identifier:          bB8bxnAMYSRH10iukNEJw+idsbzQplBGKXrgcjAFaQc=
Subject key identifier:   A5:57:6D:21:69:77:9D:EC:3E:C8:FF:3A:7C:0C:FA:5A:E7:A9:6A:3F
Authority key identifier: 80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E
Certificate issuer:       /CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
Certificate serial:       019D9B50B1D41A84865AF4C06E94ADB49700
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
Manifest number:          07D6
Signing time:             Fri 17 Apr 2026 12:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 12:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 12:00:49 +0000
Files and hashes:         1: 6_jxkWbS4mo_dqKSpUzPD-or2bk.roa (hash: oZKz7hjKw33KEtnhKq1VS8pa2G32Hvyj9HFGHRr0tYo=)
                          2: gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl (hash: UtqdQEqihh3cN6ERGkD3D5aLnHEd4BawX/Qe1pLnClM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:50:b1:d4:1a:84:86:5a:f4:c0:6e:94:ad:b4:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
        Validity
            Not Before: Apr 17 12:00:49 2026 GMT
            Not After : Apr 18 12:00:49 2026 GMT
        Subject: CN=a5576d2169779dec3ec8ff3a7c0cfa5ae7a96a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7e:1a:a8:85:15:38:55:5e:dc:48:a1:96:c0:
                    7e:5b:13:e8:ff:86:9b:02:ab:a2:59:2b:e3:bb:73:
                    56:38:c0:c7:3b:60:fb:32:fa:5b:91:73:9f:47:40:
                    c4:6c:4a:8b:c1:26:cd:09:a6:19:8d:af:cb:3f:40:
                    59:f8:06:62:c3:75:3f:e2:52:e6:f7:62:78:64:55:
                    7d:17:fe:af:3e:bf:2a:c2:43:69:b1:ad:30:ce:d8:
                    0d:eb:3d:60:5c:26:ab:ab:e3:e2:a6:a9:8e:96:4b:
                    90:fe:78:7e:86:f3:b0:c5:b9:e2:4f:da:22:bb:f5:
                    88:e9:52:e0:38:33:81:13:6e:36:81:f8:42:e1:61:
                    4e:88:a6:79:87:9f:d7:00:f3:b1:5a:c6:4c:55:c5:
                    6d:1c:9b:fb:00:1b:0b:36:ab:6a:77:56:0d:89:0b:
                    e6:8a:28:dc:27:5c:32:b3:1f:d1:9d:8b:58:05:23:
                    89:c1:00:41:bc:3f:8a:3b:57:e1:1b:36:cd:47:7b:
                    94:07:a5:c1:73:b9:ea:38:7d:39:f5:91:52:73:31:
                    99:fa:79:e0:cb:5c:08:01:9a:a4:d2:9d:26:79:58:
                    21:73:b2:a6:b2:51:46:d6:bb:df:15:bd:84:df:a5:
                    77:58:30:cb:5d:d6:b2:2e:8c:1d:ab:8f:96:b8:ba:
                    68:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:57:6D:21:69:77:9D:EC:3E:C8:FF:3A:7C:0C:FA:5A:E7:A9:6A:3F
            X509v3 Authority Key Identifier:
                keyid:80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:80:0a:c3:d5:5e:50:94:e4:54:8f:ab:b4:47:44:c6:49:d0:
         68:ff:cc:ad:82:61:e9:2c:b2:2b:00:be:83:4e:00:72:8a:3b:
         dc:e8:97:12:3a:c0:c7:66:45:be:e2:f1:63:f3:b3:5b:fc:f8:
         85:a1:be:5f:32:ff:a0:78:98:ca:12:64:5a:eb:3a:69:a6:f4:
         1a:9e:45:9b:6d:ae:03:47:ee:f8:10:ff:16:f1:1b:15:2c:f1:
         dd:84:88:f4:26:05:9a:35:e6:f1:99:ea:c5:9b:9a:94:2b:22:
         f3:ba:62:0c:0c:4e:74:c9:9f:4e:03:8d:8c:3b:bb:08:99:1e:
         8e:30:bb:30:3e:35:a4:7e:8e:09:7e:89:b2:7d:30:79:50:6c:
         d2:35:19:1c:9a:46:55:85:b0:12:c0:ee:20:54:f0:63:64:e9:
         84:c1:e3:56:71:c0:49:d3:70:88:f8:2c:98:cd:05:46:27:c9:
         83:7c:b0:01:28:19:9b:96:fd:ff:6f:31:ad:c5:1f:46:4a:68:
         6b:4a:df:30:d7:99:06:8e:4c:94:ee:87:28:71:52:ba:9d:22:
         de:a9:24:d6:e7:f7:12:c9:e2:b4:c9:38:2b:92:7d:af:18:3b:
         ea:df:5b:cd:18:29:f5:c8:76:55:51:b9:be:41:98:10:8a:39:
         b1:e0:fe:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:06:33 2026 by rpki-client