Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
File:                     xVfBW97s57ChtHfh4O6L_1P6_gw.mft (raw, json)
Hash identifier:          LcfUaNcXB9EXr4jgRQ2kFXJvZ8UNSzg88c1D4ecbpuc=
Subject key identifier:   44:8E:E6:8B:9D:CD:F9:2B:DE:D7:4E:D8:A1:78:4D:1C:2E:41:37:77
Authority key identifier: C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
Certificate issuer:       /CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Certificate serial:       019EBFC8431989FA9BAEBA2D8C8E8246CB87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
Manifest number:          04E8
Signing time:             Sat 13 Jun 2026 07:00:32 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:32 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:32 +0000
Files and hashes:         1: hKf_RdYBNL00n5n-6RG-3ope_pY.roa (hash: i1hoGLnlnqGNDkEnX87y4lBEOlUW/mrfMdJ23VxMPJA=)
                          2: xVfBW97s57ChtHfh4O6L_1P6_gw.crl (hash: fYQBva/b8+L272rLx3ZL1N11YHEHmWGyO6/0AMw1icQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:43:19:89:fa:9b:ae:ba:2d:8c:8e:82:46:cb:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
        Validity
            Not Before: Jun 13 07:00:32 2026 GMT
            Not After : Jun 14 07:00:32 2026 GMT
        Subject: CN=448ee68b9dcdf92bded74ed8a1784d1c2e413777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6e:b6:e6:bf:87:c7:ff:2d:84:fb:a4:f5:d3:
                    e8:39:86:4c:b5:cb:0c:c8:e5:79:7b:bf:b9:5a:f5:
                    b4:8c:8c:87:0f:5c:34:96:ec:d8:1e:27:cf:9a:98:
                    94:31:a5:b2:87:e3:10:b7:57:5c:aa:d2:8a:43:3f:
                    3d:61:fd:2b:93:30:7c:1e:67:cf:3d:04:e6:e8:c3:
                    8f:18:f0:ad:76:2a:8c:f3:5d:a3:ac:c8:62:9e:d0:
                    c1:49:d2:6b:40:b8:24:2e:b3:f5:54:d7:42:3a:78:
                    29:9b:81:8a:dd:e6:a9:e3:36:35:f9:81:49:da:d4:
                    1a:9a:8f:03:39:d3:48:3c:f2:63:08:94:e3:5e:84:
                    bb:d9:71:f3:43:24:c3:68:a8:89:b5:ca:e5:4b:7f:
                    af:e2:f5:18:d4:39:a7:6d:5f:d4:8e:60:ce:0a:a6:
                    d1:6a:0a:d4:9e:fc:27:4c:d7:46:4a:cf:22:e6:eb:
                    a3:fc:43:54:cd:ac:2d:4f:80:e7:cb:e8:32:ca:8c:
                    d6:ca:d8:0b:ad:ec:ad:0f:e6:b1:64:92:5f:9f:18:
                    ea:e5:f3:38:b2:90:dd:50:2c:2c:87:0d:7f:69:4f:
                    1a:37:cd:0b:da:39:fc:77:6b:e0:bf:31:d5:c5:fe:
                    75:fb:74:1b:df:35:34:c1:dc:0b:86:d0:9e:f8:8e:
                    23:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8E:E6:8B:9D:CD:F9:2B:DE:D7:4E:D8:A1:78:4D:1C:2E:41:37:77
            X509v3 Authority Key Identifier:
                keyid:C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:1a:a0:ae:88:4a:43:74:59:7f:15:58:c5:8e:d8:6c:9b:7b:
         3a:16:5d:ff:2e:7b:f3:92:0f:c8:89:8f:7c:fd:58:51:82:78:
         e0:12:99:15:ef:e3:21:ef:8b:df:9d:3e:59:2f:8a:8c:69:ca:
         db:b6:93:da:73:a2:a2:05:22:85:82:bd:6b:11:06:14:75:1d:
         03:19:b8:ba:0e:ba:81:59:f1:75:c5:94:a9:e3:04:b5:98:2a:
         6f:5d:f8:4c:aa:28:4a:53:19:4d:d3:65:8d:5c:96:9c:fd:3e:
         67:13:7f:8c:f1:e5:38:48:d5:fd:53:2a:df:5d:5c:85:81:85:
         b8:5e:cb:4b:ae:fa:7e:2b:51:e1:91:6d:b0:c0:97:96:df:2a:
         22:17:a1:b0:bb:eb:42:b0:91:7f:fb:a3:c8:bc:28:5f:82:dc:
         05:33:bb:58:e0:e1:6e:c2:1b:8f:e6:cf:61:a7:d2:49:ad:cb:
         02:e8:82:49:98:3d:34:84:dd:bf:1f:56:b3:9f:4c:61:91:a3:
         18:6d:f2:5b:92:80:6a:75:cd:2b:5e:ac:6b:0c:ca:e9:15:6a:
         55:ec:e2:eb:d9:20:3a:92:ad:ba:f7:62:e4:d4:98:b9:9f:05:
         e7:ba:0e:09:40:d2:24:36:51:6a:1d:27:54:a8:93:16:79:37:
         a9:73:14:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:35:29 2026 by rpki-client