Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
File:                     GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft (raw, json)
Hash identifier:          2Y0QwaHLfqZGy1cdjfUHLbJC4LupkBabJuIEDbG4/ds=
Subject key identifier:   E5:EF:56:90:0C:91:83:8D:44:46:4F:41:99:7D:72:28:F2:5F:73:DA
Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
Certificate issuer:       /CN=1b098412c984b89be38011a72a3c471975fc47a2
Certificate serial:       019ECABA11FBB3450EE292C9A9447D552F9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
Manifest number:          0B5E
Signing time:             Mon 15 Jun 2026 10:00:52 +0000
Manifest this update:     Mon 15 Jun 2026 10:00:52 +0000
Manifest next update:     Tue 16 Jun 2026 10:00:52 +0000
Files and hashes:         1: 3z35gDmHecdzIYEGmIKw6RYeXEA.roa (hash: j55RlWKFCQCXc2QwhpECXuc0I1p5c8gSybgzQ5rlp3w=)
                          2: GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl (hash: /S6ezQr1lwkm9YcOxvoNbxT47c7mCM0tuKvdjqlmhRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ca:ba:11:fb:b3:45:0e:e2:92:c9:a9:44:7d:55:2f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2
        Validity
            Not Before: Jun 15 10:00:52 2026 GMT
            Not After : Jun 16 10:00:52 2026 GMT
        Subject: CN=e5ef56900c91838d44464f41997d7228f25f73da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2d:5e:3a:8a:d9:02:e0:f3:df:3e:d5:f2:03:
                    60:b2:35:02:27:8b:79:97:eb:a8:12:83:22:fe:fb:
                    13:3e:11:77:93:bb:57:52:0c:97:27:4d:e7:f2:1b:
                    32:45:19:9f:6c:d6:1d:86:35:31:ca:07:16:3c:37:
                    f2:9a:cc:aa:3e:f1:ec:ca:f3:da:87:ff:f1:ae:dc:
                    ce:32:b9:ac:31:e1:4b:15:ed:0e:8f:49:99:e4:bc:
                    15:04:d8:8a:d2:63:48:16:9f:d9:d0:30:86:3a:87:
                    57:d9:7a:51:b5:c9:23:7d:ff:0b:b5:28:ff:c3:10:
                    9e:ff:96:4c:09:49:8b:af:44:11:d0:dc:c3:2d:51:
                    69:1d:a6:b5:35:ae:76:64:6f:7c:71:0b:c4:16:1d:
                    ee:12:c4:3e:c2:10:a2:9e:ec:91:a4:44:70:62:92:
                    a6:de:7c:f7:b7:04:19:e0:2c:e6:01:41:bf:78:f0:
                    8f:da:dc:ce:89:6f:40:ab:55:1f:d7:41:9d:6e:f2:
                    9a:4e:2a:0e:25:93:10:75:cd:2d:0f:6f:34:61:0c:
                    51:d1:54:c8:b0:3e:e5:22:09:41:1e:4e:a7:b2:f2:
                    e9:b2:b5:71:5e:3d:b7:41:f0:2a:51:02:e4:f3:b4:
                    89:d8:31:e2:88:c1:a7:41:11:84:d8:1c:ff:1b:f7:
                    08:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EF:56:90:0C:91:83:8D:44:46:4F:41:99:7D:72:28:F2:5F:73:DA
            X509v3 Authority Key Identifier:
                keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c6:16:60:97:17:94:ab:54:b9:b9:51:a5:c1:ad:40:20:25:
         6e:b9:94:28:f7:3b:09:68:c9:63:ab:ed:29:5a:f3:6c:d9:eb:
         b9:8a:ef:2a:20:9a:b2:0b:c3:be:97:c0:e5:bb:06:62:ce:f1:
         14:2c:14:41:dc:77:63:47:c7:f4:68:2d:a4:a4:da:43:70:77:
         3d:97:37:cd:7d:ab:a7:1e:c4:fa:dc:d4:7f:14:bb:9a:0b:93:
         a4:c2:17:a5:48:de:11:28:d5:7c:36:dd:ce:0d:ad:41:ed:40:
         e1:de:5e:9b:63:fa:0e:63:1f:50:43:c3:8c:a5:11:85:db:95:
         d6:8e:18:0c:4a:0e:94:b4:cf:a9:91:c2:31:93:78:b2:78:dc:
         b3:0c:ab:19:17:4b:da:6f:17:be:2d:ee:68:50:39:e6:23:cc:
         05:cd:7b:87:59:8d:0f:d4:af:92:16:bb:01:a1:f6:52:dd:1f:
         39:30:92:12:d0:60:5a:9a:ba:79:ce:ad:f9:47:6c:57:11:5d:
         22:9a:34:b7:e5:86:77:4a:d6:4e:a9:6e:2d:48:f4:8a:9a:45:
         48:a7:4f:67:ad:9f:d2:0a:57:b9:e8:77:50:52:00:5e:1e:0c:
         1d:58:9f:30:89:56:97:7b:3b:e1:3c:68:73:b2:9d:ca:51:98:
         b8:07:88:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 15:27:33 2026 by rpki-client