Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
File:                     GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft (raw, json)
Hash identifier:          o0+5GuB1CCL7htwrcc0PIRXfGZYUDSs8iiO6vC9Kl8w=
Subject key identifier:   6C:0D:88:49:E8:93:73:00:10:8D:16:DD:FA:63:B1:71:6B:01:50:58
Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
Certificate issuer:       /CN=1b098412c984b89be38011a72a3c471975fc47a2
Certificate serial:       019D9B512EE021F17418418D385A5D0DAA8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
Manifest number:          0AC0
Signing time:             Fri 17 Apr 2026 12:01:21 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:21 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:21 +0000
Files and hashes:         1: GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl (hash: ov8K9+euNVnKqfsQDF++mssK8ldL5tKvo++wgs5zYXM=)
                          2: JZaH_jpSvzp_LB_dT1bUbnV7u6Y.roa (hash: PBsKlZt/RhXzdnMDW9mk8dmSBPIc5dC6MxwZF8UDWyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:51:2e:e0:21:f1:74:18:41:8d:38:5a:5d:0d:aa:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2
        Validity
            Not Before: Apr 17 12:01:21 2026 GMT
            Not After : Apr 18 12:01:21 2026 GMT
        Subject: CN=6c0d8849e8937300108d16ddfa63b1716b015058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:d0:32:18:eb:dc:81:13:67:0d:02:2e:84:
                    64:e6:06:9a:e3:ae:5b:89:b1:56:57:f6:7e:4b:8b:
                    9e:1d:4b:01:90:70:7e:a3:c1:63:a2:c5:87:50:38:
                    87:9b:7a:86:a2:c7:fe:a0:06:5b:a4:17:78:50:c6:
                    25:03:5a:5b:df:48:c4:d0:a4:c3:25:88:20:d5:fb:
                    9c:08:b6:e5:75:34:b4:0d:12:d0:26:60:25:69:27:
                    59:29:69:0b:8e:ff:c8:6d:27:46:8d:c6:27:68:5e:
                    9a:96:46:92:18:94:26:8d:a4:1e:45:96:d1:0f:76:
                    65:d2:f4:22:dc:5b:90:a2:b9:88:ff:6f:64:62:31:
                    26:d6:18:cf:b9:35:1a:2b:9c:bc:b4:c7:7d:8f:23:
                    eb:64:3a:b4:24:3c:90:c3:c5:50:84:d3:01:f0:9d:
                    34:d2:a1:71:b3:81:4a:ef:bb:ef:77:36:e7:1c:e7:
                    29:90:66:f3:2d:6e:db:81:4d:03:1b:76:03:07:5c:
                    70:52:12:1c:0a:86:91:49:93:d2:8e:de:25:b2:43:
                    e4:c6:c3:c0:f7:7b:ea:bd:5d:9e:60:d7:42:be:c7:
                    ad:f8:0b:e0:64:fb:92:1d:07:ce:67:df:8e:a6:78:
                    53:cb:d9:e1:64:10:c6:2d:12:aa:02:0a:8a:50:72:
                    1d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0D:88:49:E8:93:73:00:10:8D:16:DD:FA:63:B1:71:6B:01:50:58
            X509v3 Authority Key Identifier:
                keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:69:51:dd:53:24:d5:90:84:e8:bc:fb:f2:ba:1e:fb:8c:6a:
         b8:b2:48:db:36:21:7b:63:23:26:79:d6:27:c1:32:16:6b:a3:
         38:ff:63:c7:62:21:b5:48:5c:6d:3c:87:bd:1e:9f:3c:e4:18:
         27:99:09:9f:06:02:1a:2a:f1:aa:c6:6e:8c:6d:0f:a1:f0:9c:
         5d:8b:4a:1c:e9:39:c4:99:f5:3d:85:9b:14:a1:a0:1c:9c:a5:
         c9:43:6e:47:e1:82:c8:b0:4d:8b:24:ba:9e:ad:31:b0:0a:34:
         27:6a:c5:0c:f8:c0:71:b5:da:46:7b:c3:81:a5:e6:64:78:51:
         59:9a:25:66:c4:17:82:e1:68:a1:d6:2c:54:51:1d:2e:44:5d:
         7e:f2:b5:8e:7d:5f:9f:08:8d:39:0b:f7:e4:be:11:3f:02:75:
         f3:61:cd:5d:f2:de:39:d5:b9:31:bd:79:58:33:b1:f3:2a:d6:
         23:c0:ca:08:de:12:df:9e:4f:3d:31:4b:37:b5:c6:2b:41:8e:
         0d:34:3b:7b:fe:ac:2e:d9:bf:66:bb:34:88:4e:bd:9c:63:fe:
         9f:54:bd:e1:9d:e8:9a:df:cf:b8:2a:6a:38:dd:0c:f8:e8:41:
         13:d1:d5:0f:e9:c9:61:ec:7b:fa:cf:77:37:1e:05:3a:7f:64:
         06:dd:bf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:14:44 2026 by rpki-client