Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
File:                     xVfBW97s57ChtHfh4O6L_1P6_gw.mft (raw, json)
Hash identifier:          H4Nu5XLwIY/WjRaPgPcP2WqIP/g14A2yuFHh5qSTzWg=
Subject key identifier:   0C:8D:27:ED:CE:AB:D1:1C:63:10:C8:3E:C3:48:5C:2A:0E:E5:A5:16
Authority key identifier: C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C
Certificate issuer:       /CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
Certificate serial:       019EC1B6F10AB4E868F50AEA2F425565C3DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
Manifest number:          04E9
Signing time:             Sat 13 Jun 2026 16:00:52 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:52 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:52 +0000
Files and hashes:         1: hKf_RdYBNL00n5n-6RG-3ope_pY.roa (hash: i1hoGLnlnqGNDkEnX87y4lBEOlUW/mrfMdJ23VxMPJA=)
                          2: xVfBW97s57ChtHfh4O6L_1P6_gw.crl (hash: 4u61qrf3BhhGZdDrnK8pK/LfSj30FyCHrFNFDoiVfpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:f1:0a:b4:e8:68:f5:0a:ea:2f:42:55:65:c3:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c557c15bdeece7b0a1b477e1e0ee8bff53fafe0c
        Validity
            Not Before: Jun 13 16:00:52 2026 GMT
            Not After : Jun 14 16:00:52 2026 GMT
        Subject: CN=0c8d27edceabd11c6310c83ec3485c2a0ee5a516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:24:50:a7:69:b8:db:a4:68:a1:70:54:2f:2f:
                    4d:c6:89:7d:24:ed:79:1a:06:ad:92:42:cc:47:4c:
                    c0:3d:b1:05:d8:3c:bf:b6:72:2f:aa:39:2b:5d:a6:
                    97:7f:67:9c:79:92:74:ac:ac:56:61:73:6f:5b:7d:
                    d1:a8:be:24:20:d6:70:75:ee:fe:95:6a:76:91:7e:
                    4f:dd:12:06:7c:d7:15:05:aa:6f:1e:88:f6:7a:2c:
                    cc:6a:a1:96:b6:6d:66:df:d5:9d:bc:5c:b6:5a:1c:
                    78:60:fc:34:86:71:cc:b2:b0:78:af:d5:50:ed:97:
                    63:fc:7d:9a:99:7e:1f:e6:03:ad:5e:e7:62:f4:5c:
                    89:78:6d:13:7b:4c:4d:8d:40:a9:d7:71:70:6c:85:
                    a4:0b:bc:0c:b2:60:80:50:cb:9c:26:0e:b2:86:4d:
                    86:23:cf:39:17:f4:50:cb:a2:78:27:57:97:c3:7f:
                    87:f0:f2:d7:e0:5a:0a:1f:bc:5f:39:82:eb:bf:8a:
                    e2:45:2c:b7:15:78:09:da:e0:03:66:ec:59:56:62:
                    3e:b9:f1:d4:6a:bc:b5:05:2f:fe:e8:eb:5d:21:1c:
                    96:e0:f9:18:7f:3f:8c:21:f5:72:6c:63:d3:35:9f:
                    85:66:3d:85:68:d6:a7:0d:98:2f:66:bd:f2:3e:21:
                    53:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8D:27:ED:CE:AB:D1:1C:63:10:C8:3E:C3:48:5C:2A:0E:E5:A5:16
            X509v3 Authority Key Identifier:
                keyid:C5:57:C1:5B:DE:EC:E7:B0:A1:B4:77:E1:E0:EE:8B:FF:53:FA:FE:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBW97s57ChtHfh4O6L_1P6_gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/32a8dd-39b3-4791-a5e4-dbdbe193c974/1/xVfBW97s57ChtHfh4O6L_1P6_gw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ed:25:e6:22:9f:e0:a5:58:83:21:71:57:28:e5:fc:a0:c1:
         87:f6:7f:6b:e9:a0:8f:a9:a7:59:c8:47:ec:65:d8:ce:55:0e:
         c9:6f:2a:15:3c:12:94:0d:6e:6e:57:ea:e3:d4:f9:b2:b9:0c:
         dd:d9:61:f0:ad:e9:c8:45:56:38:c9:44:c2:7d:2c:6d:13:d5:
         d9:db:ac:8a:d2:c5:f2:a8:a6:00:a9:f7:b4:73:3b:8b:ab:97:
         b2:26:e5:55:c9:54:42:72:d9:c3:0f:72:d2:83:44:01:52:d1:
         95:51:53:bf:d7:47:f9:c4:33:c1:6f:3e:9f:ca:bd:bc:bc:0f:
         c9:ad:a9:e5:9b:b9:7c:b4:ce:6f:9f:2d:d5:9a:16:43:94:a6:
         e0:07:22:9f:f4:79:a0:1c:bb:ce:15:0f:6f:1c:ea:b9:9f:3b:
         cf:d5:72:9c:21:1c:01:8f:9b:8d:a3:91:5f:d0:fe:d1:e5:80:
         23:f2:f1:b3:85:c8:fc:5c:ff:ae:03:c9:c9:9e:a9:48:ab:88:
         7d:5e:d4:ba:a2:34:e5:9b:15:16:4d:8d:72:ee:f9:ad:5f:37:
         7d:65:84:97:bc:9e:c4:59:18:d1:ad:bb:4e:02:48:32:e9:62:
         4f:91:b4:e3:f0:99:2d:74:0f:ab:b5:4e:e8:37:07:5c:38:80:
         49:d2:b2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:59:13 2026 by rpki-client