Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.mft
File:                     GuwRjCU363UtdoXMGf0-xDD1Bfw.mft (raw, json)
Hash identifier:          Uvo6OGSDlrxA1VVNQ0mfu9ZFS2Xnz2dW1NcXJE87+MM=
Subject key identifier:   1E:4E:05:B6:CC:88:E1:8F:53:60:00:23:05:79:0B:BA:91:CB:BB:2A
Authority key identifier: 1A:EC:11:8C:25:37:EB:75:2D:76:85:CC:19:FD:3E:C4:30:F5:05:FC
Certificate issuer:       /CN=1aec118c2537eb752d7685cc19fd3ec430f505fc
Certificate serial:       019D9EBF96D57298287D97217CD1D7B229BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GuwRjCU363UtdoXMGf0-xDD1Bfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.mft
Manifest number:          63
Signing time:             Sat 18 Apr 2026 04:00:48 +0000
Manifest this update:     Sat 18 Apr 2026 04:00:48 +0000
Manifest next update:     Sun 19 Apr 2026 04:00:48 +0000
Files and hashes:         1: GuwRjCU363UtdoXMGf0-xDD1Bfw.crl (hash: wLmax6uyqmLfr14al7sspmoyhsdGHJd2ZRYAFFEw5SU=)
                          2: fyrwpSpHOQ51MD8HtpifeJqSkG4.roa (hash: o8gKMzDK7KI5j5Qki30gQMXdbKnHqlaCMrDbLfOew8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GuwRjCU363UtdoXMGf0-xDD1Bfw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9e:bf:96:d5:72:98:28:7d:97:21:7c:d1:d7:b2:29:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aec118c2537eb752d7685cc19fd3ec430f505fc
        Validity
            Not Before: Apr 18 04:00:48 2026 GMT
            Not After : Apr 19 04:00:48 2026 GMT
        Subject: CN=1e4e05b6cc88e18f5360002305790bba91cbbb2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:46:30:6a:75:66:9e:44:c5:02:97:2f:45:89:
                    86:6d:a9:c6:0c:46:df:d4:fc:4a:76:7a:6e:7a:1c:
                    2c:a0:3c:d9:ca:b6:0c:5f:7c:b2:ff:3e:45:e9:8e:
                    ea:f3:ef:b8:72:d9:71:e8:9b:3f:88:c1:99:69:a3:
                    93:ee:16:bd:ff:33:69:75:87:d3:c1:8f:6f:53:d6:
                    b7:bd:82:13:70:7c:ba:e4:cd:8a:5c:03:cd:37:c7:
                    94:f7:10:6d:d6:6f:4d:f7:09:59:cb:20:3c:5d:58:
                    4b:54:d3:82:29:3a:3a:26:25:e1:01:e0:56:69:d8:
                    57:b7:33:c8:d0:a1:dc:68:a8:c5:0f:83:a9:dd:64:
                    84:e7:91:4a:04:f4:ff:9a:66:40:6a:5d:76:61:92:
                    bb:58:0c:38:7c:ef:54:b7:a6:87:91:2c:bf:18:55:
                    3b:1a:be:c5:07:07:cb:d1:54:0d:4a:1f:5c:0c:c9:
                    ce:ef:8b:fe:c9:c7:6d:1d:53:3c:c1:0d:24:98:85:
                    94:db:e6:bd:c9:fc:b7:03:35:0d:1e:8c:c5:22:81:
                    02:14:80:ea:fe:39:88:64:43:2c:7a:95:a7:42:50:
                    65:20:b9:9c:2b:1e:c0:aa:e1:78:bc:5f:df:b4:66:
                    fd:e1:40:3f:eb:ca:84:c4:c6:a7:1b:25:5c:31:4a:
                    39:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4E:05:B6:CC:88:E1:8F:53:60:00:23:05:79:0B:BA:91:CB:BB:2A
            X509v3 Authority Key Identifier:
                keyid:1A:EC:11:8C:25:37:EB:75:2D:76:85:CC:19:FD:3E:C4:30:F5:05:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuwRjCU363UtdoXMGf0-xDD1Bfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/442932-f2be-447f-9e1a-a3a71dd7ba3d/1/GuwRjCU363UtdoXMGf0-xDD1Bfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:e9:6b:d3:c9:78:20:85:03:38:c6:65:10:46:ac:1b:1f:d1:
         9b:ca:d8:b2:30:ac:6e:10:76:fa:ec:13:e1:0e:d7:e4:c3:0b:
         15:8b:e3:44:a4:7d:97:d6:13:92:1f:e2:e0:9c:d7:e4:33:37:
         19:e3:89:40:4d:96:e9:11:86:18:7a:50:35:3f:fc:bf:b2:44:
         88:0e:d7:3e:f2:81:a2:91:3a:97:a2:37:e3:70:0f:61:c5:40:
         59:53:93:22:4e:83:43:0d:e5:f6:b2:3e:21:15:ee:95:a5:19:
         15:b7:7c:6a:a1:0d:2a:5a:2a:cd:32:3c:d3:b7:41:18:80:1d:
         43:f3:30:26:d4:07:e5:87:e9:26:d5:a9:f4:08:5a:f1:9c:47:
         3d:28:a8:0f:3f:4d:47:77:5f:a6:c6:ea:ad:d0:ea:51:84:6f:
         4b:0a:28:55:6e:f9:d4:bc:2f:36:95:9f:9f:90:3e:7e:ac:90:
         57:3d:06:59:55:fe:eb:49:93:ad:9b:d3:93:e8:9f:5f:c3:fc:
         a4:25:ea:b6:52:2d:ab:1e:c8:c2:13:5f:f1:95:1e:ee:3c:34:
         77:7a:df:25:e8:46:68:37:41:47:f3:9c:f1:fb:d9:d5:51:98:
         81:64:10:db:2d:4f:2a:c3:d3:11:7a:f5:f3:e5:01:ad:cd:d5:
         88:45:3f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:31:38 2026 by rpki-client