Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.mft
File:                     GbiQW6xTUBxccgHgYY3w9F8RSnU.mft (raw, json)
Hash identifier:          waTKwESwYLKyZGGnxBTyIERFPD9Fxt9zUWMGqJznOD8=
Subject key identifier:   33:1A:FF:A8:B5:A7:C9:40:6E:4B:31:12:67:30:E9:7E:27:31:91:6D
Authority key identifier: 19:B8:90:5B:AC:53:50:1C:5C:72:01:E0:61:8D:F0:F4:5F:11:4A:75
Certificate issuer:       /CN=19b8905bac53501c5c7201e0618df0f45f114a75
Certificate serial:       019DA3E68AA7E1FFD69091924D2FB6B81021
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbiQW6xTUBxccgHgYY3w9F8RSnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.mft
Manifest number:          0D
Signing time:             Sun 19 Apr 2026 04:01:27 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:27 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:27 +0000
Files and hashes:         1: 48mZdI5GwAnLSURvpyliOOqttMQ.roa (hash: 31skaXcRsPZrgu8cTQ5ajy3MoKvly3qp6UXzeLtlo7w=)
                          2: GbiQW6xTUBxccgHgYY3w9F8RSnU.crl (hash: pijqVFbkFBZE+5W/Ds8wqYFAKJAGUpt4RoN9X+6p4SM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbiQW6xTUBxccgHgYY3w9F8RSnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:8a:a7:e1:ff:d6:90:91:92:4d:2f:b6:b8:10:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b8905bac53501c5c7201e0618df0f45f114a75
        Validity
            Not Before: Apr 19 04:01:27 2026 GMT
            Not After : Apr 20 04:01:27 2026 GMT
        Subject: CN=331affa8b5a7c9406e4b31126730e97e2731916d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:43:1d:0b:b7:4e:01:0d:76:23:bd:95:7c:d9:
                    57:61:7d:54:a8:46:53:84:ed:87:4e:47:22:a6:6f:
                    cc:d2:97:8f:1a:c1:c6:fd:be:3d:28:b6:79:53:99:
                    61:61:fa:8b:a3:7a:79:16:c6:44:93:0f:8e:6b:9b:
                    0d:bc:fe:fc:2a:83:a2:de:93:89:df:c0:3a:15:94:
                    9d:ea:eb:40:51:6e:23:09:f5:8e:28:1d:ca:68:f8:
                    9d:22:43:0a:d9:bc:ea:d9:52:59:93:4b:60:d1:8a:
                    41:5a:b0:db:bb:17:8f:3b:33:6d:ab:ab:7b:fd:e8:
                    14:59:d3:95:73:ae:e0:f5:f5:5d:1b:ec:fb:35:40:
                    68:04:55:d9:ce:91:2d:dd:7a:41:9e:cf:06:25:f0:
                    1f:e4:99:f4:fc:2b:75:d7:e4:00:cb:ff:22:fd:24:
                    6c:67:74:9b:82:75:90:7e:2d:cf:a0:fb:b2:f9:80:
                    89:8b:81:d4:11:5a:15:5e:77:03:e7:76:b2:5e:a8:
                    50:19:e3:f5:e1:9a:2b:f1:ee:c3:e4:08:f0:df:44:
                    de:20:4f:ea:64:ca:93:61:72:34:46:f3:09:2f:51:
                    38:e1:43:2f:93:f3:35:d2:8d:87:b5:ce:bb:56:cd:
                    af:2b:b3:03:da:d3:dc:b1:cb:67:48:e6:08:23:92:
                    bf:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1A:FF:A8:B5:A7:C9:40:6E:4B:31:12:67:30:E9:7E:27:31:91:6D
            X509v3 Authority Key Identifier:
                keyid:19:B8:90:5B:AC:53:50:1C:5C:72:01:E0:61:8D:F0:F4:5F:11:4A:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbiQW6xTUBxccgHgYY3w9F8RSnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d4b8d8-86b9-4fcd-8ba4-90daff0bd4d5/1/GbiQW6xTUBxccgHgYY3w9F8RSnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:78:f6:2b:38:98:ad:1a:ec:8c:0b:51:ee:79:e7:06:84:e0:
         04:59:0b:9c:b4:a3:cd:d8:04:d8:27:bf:3f:d8:0c:19:d9:e9:
         f0:71:44:a6:d4:08:35:51:13:f9:0c:8b:23:28:98:d6:40:2e:
         d8:ba:9a:13:9c:79:d9:9c:f3:f9:66:8e:90:a5:b3:85:6a:56:
         60:8a:2a:b3:0a:d8:18:88:be:8f:cc:31:2b:cf:7c:35:6a:75:
         15:ee:fa:06:3d:c4:79:88:ce:a7:4a:12:b5:b7:96:0c:f1:37:
         c0:cb:1a:0c:65:0e:6a:74:ab:6d:c7:2a:c3:43:8b:5e:cd:2f:
         35:0d:d9:b2:8d:02:67:00:63:fe:f1:16:e6:24:b5:59:84:ed:
         f7:48:9d:4e:88:3d:86:a8:24:d6:4c:9f:b8:09:36:f7:37:08:
         99:9a:ef:4f:ed:2b:27:a9:ae:5d:5b:94:5e:b2:33:64:59:47:
         cf:54:28:9c:92:2c:57:4e:96:34:6f:4a:d9:0c:39:e9:b2:59:
         6a:82:d9:d8:0c:9b:de:62:6d:0b:16:79:12:2b:f7:04:b8:e0:
         d2:bc:2b:87:48:c4:25:a7:31:96:5f:f9:0d:f3:28:a7:a7:40:
         6a:9b:ca:60:47:d7:02:56:a4:f3:a7:72:e8:46:cb:b7:87:f8:
         97:ca:15:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:27:12 2026 by rpki-client