Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
File:                     gLWnciaEnxty0GO-Y4mX-wnK21E.mft (raw, json)
Hash identifier:          j2vZ4Lq3Pcre6Wtcq5l4L24n4zUeHrA4oNf60IUIAc4=
Subject key identifier:   6B:3E:7D:4F:52:24:C6:63:16:8F:D8:D2:53:F3:0F:EF:49:89:27:EC
Authority key identifier: 80:B5:A7:72:26:84:9F:1B:72:D0:63:BE:63:89:97:FB:09:CA:DB:51
Certificate issuer:       /CN=80b5a77226849f1b72d063be638997fb09cadb51
Certificate serial:       019EBFC88E02D124422F50BDFA3842079583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
Manifest number:          66
Signing time:             Sat 13 Jun 2026 07:00:52 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:52 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:52 +0000
Files and hashes:         1: gLWnciaEnxty0GO-Y4mX-wnK21E.crl (hash: Tp1shUvL/xARf6uQdZyK/dPZV74UVI8qRzSN/yQ2VTc=)
                          2: nTAeOQ1yfLeE7UobuYd95qQsnDc.roa (hash: MGx/T2ybNPO76ocB/JBxy+Dt6X73selrSnb5nBMcig0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:8e:02:d1:24:42:2f:50:bd:fa:38:42:07:95:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80b5a77226849f1b72d063be638997fb09cadb51
        Validity
            Not Before: Jun 13 07:00:52 2026 GMT
            Not After : Jun 14 07:00:52 2026 GMT
        Subject: CN=6b3e7d4f5224c663168fd8d253f30fef498927ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:07:cf:31:45:17:a0:3f:d7:c7:c8:ca:f0:e2:
                    bf:1d:ec:42:12:37:ad:f7:ee:3a:01:51:67:b7:8e:
                    e4:1a:39:ae:7c:ee:88:21:b6:11:44:9f:c4:09:f5:
                    12:83:33:3b:57:d7:75:3a:54:3d:54:63:e5:d8:10:
                    6c:ee:18:33:bd:b0:8f:19:a7:97:08:d1:b6:39:65:
                    29:71:9e:ae:47:eb:70:89:af:b7:1f:a3:8a:00:79:
                    33:d0:46:e0:5c:1b:82:c5:14:91:eb:f2:5b:c3:51:
                    54:0b:51:a3:2b:96:68:ee:91:08:bd:6d:4d:fc:b5:
                    9c:c2:39:b8:72:c6:24:f1:32:40:33:bc:13:43:ef:
                    9b:ec:7f:1d:96:07:0d:bc:9e:86:73:74:41:d9:13:
                    46:66:03:11:36:3e:3e:95:dc:23:aa:31:33:7b:1a:
                    b6:63:b3:47:d8:c0:9e:e4:e3:2b:eb:f6:77:5f:f1:
                    f3:1b:85:1f:d0:d1:7d:d4:e7:d4:39:6e:c1:46:cf:
                    1e:2e:e1:6f:41:6a:16:38:99:a8:e6:60:01:1e:df:
                    50:a5:6c:6c:3c:e0:fa:4d:3d:93:91:87:48:6c:a4:
                    96:14:7f:a7:d7:5b:aa:84:ba:91:1d:14:6b:fc:a6:
                    63:85:fe:ef:f6:13:09:2b:ea:e1:f0:8e:c0:ed:9e:
                    aa:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3E:7D:4F:52:24:C6:63:16:8F:D8:D2:53:F3:0F:EF:49:89:27:EC
            X509v3 Authority Key Identifier:
                keyid:80:B5:A7:72:26:84:9F:1B:72:D0:63:BE:63:89:97:FB:09:CA:DB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e9:ea:12:51:b9:aa:ae:e4:50:de:7a:c1:a2:bc:79:80:43:
         72:01:0c:12:78:6e:fa:98:d1:a4:0d:52:b8:1b:8d:13:49:cd:
         3b:f2:23:bb:d7:0f:2a:1b:49:dd:a3:d6:54:81:b7:86:bc:e2:
         3d:28:a8:c3:d2:6c:d1:32:67:3f:97:e1:e9:f1:33:a6:fe:30:
         dc:89:7c:b6:99:6f:c7:67:6d:47:17:7a:51:fb:c3:25:45:db:
         07:a7:d8:3e:d7:48:20:59:b8:0d:75:c2:f9:8f:ce:e2:12:29:
         a4:83:e1:2a:27:36:21:11:e4:29:98:cd:51:6c:4b:74:b1:9e:
         bf:48:9a:00:b6:30:63:46:08:01:d4:5b:97:f2:df:7e:1f:e4:
         7e:fe:40:e1:2f:8a:8d:36:a2:1c:20:89:11:00:21:8f:0d:9c:
         ec:de:61:d5:c4:f1:6b:a0:bc:33:ad:06:d6:80:e7:e2:7c:82:
         18:b9:db:2c:f9:6a:59:8c:a2:7e:d7:a8:29:9b:23:9c:dd:14:
         94:bf:8a:22:7a:2b:7b:07:96:15:2c:0b:ba:a5:93:c9:5f:9f:
         ba:fa:f6:14:d3:e1:bd:32:5a:0f:cf:ef:d7:98:e5:70:33:64:
         20:4f:55:fa:02:12:99:47:26:b1:e2:2c:d5:78:12:af:c1:21:
         d3:39:b0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:38:57 2026 by rpki-client