Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
File:                     Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft (raw, json)
Hash identifier:          xLp7/FP6jOHxa3QTiWNzslyZi+xnzMXv0CZH2dhzrIM=
Subject key identifier:   5E:F0:56:4B:08:9B:CD:8F:C3:E1:3F:92:D2:9B:96:45:41:6E:FD:94
Authority key identifier: 1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
Certificate issuer:       /CN=1a9b70ef99760a0659deaefa660345a0e6115423
Certificate serial:       019D992B5622FEB4D18E435CF4EE871DCD79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
Manifest number:          1853
Signing time:             Fri 17 Apr 2026 02:00:47 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:47 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:47 +0000
Files and hashes:         1: Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl (hash: eK1bBvIH16Nh/lt2NuByPw8vEtE3/rZffQh8k6GHYBE=)
                          2: ZohyHfqFv67z4908u3_QeIT8zVw.roa (hash: F/BjQl+7N2tQfUywKhEzc2DzriEJ3gerXgEGzUTdIDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:56:22:fe:b4:d1:8e:43:5c:f4:ee:87:1d:cd:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a9b70ef99760a0659deaefa660345a0e6115423
        Validity
            Not Before: Apr 17 02:00:47 2026 GMT
            Not After : Apr 18 02:00:47 2026 GMT
        Subject: CN=5ef0564b089bcd8fc3e13f92d29b9645416efd94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8d:dc:c8:ed:d1:86:4e:01:27:f4:e8:da:cd:
                    ba:99:7e:67:86:91:e0:38:fc:23:43:70:53:e7:42:
                    25:83:25:f1:bc:ab:86:5d:1b:d5:66:d7:0a:84:08:
                    ed:fb:9e:d6:2c:fa:c5:85:e0:7f:f4:dc:e1:50:91:
                    b6:22:11:d2:94:78:ae:5d:d6:d6:8e:f4:40:d9:52:
                    5b:0f:34:38:57:de:51:7f:10:d6:71:6b:90:1e:14:
                    8c:a1:27:c3:bc:ab:59:26:7f:4b:cf:9c:62:9d:35:
                    1c:87:58:36:64:e3:f3:8a:57:a6:07:c9:ac:e9:81:
                    32:bd:da:42:38:9e:f7:f7:f2:98:6f:fd:92:8d:ca:
                    a8:b7:67:6b:e2:de:65:63:be:af:1f:78:57:51:49:
                    66:dc:d5:20:c4:7c:c3:94:09:a0:72:b0:01:f5:24:
                    98:fd:07:bc:2d:df:25:68:f3:72:20:c7:86:0a:55:
                    d6:8f:ae:3c:23:16:7d:4d:a6:a0:fb:9b:48:88:5e:
                    0b:b9:3c:45:4a:1b:5f:9b:e6:65:78:51:18:87:11:
                    bb:19:8b:9f:68:65:dd:42:10:c2:31:8c:04:d6:bf:
                    e0:7f:36:42:78:e1:cb:e2:13:a8:c0:95:86:39:ca:
                    3c:3c:d6:c8:38:29:ea:9e:a0:53:b9:c3:aa:17:76:
                    0e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F0:56:4B:08:9B:CD:8F:C3:E1:3F:92:D2:9B:96:45:41:6E:FD:94
            X509v3 Authority Key Identifier:
                keyid:1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:e6:7e:d1:2d:d2:90:55:b0:a4:e9:fb:f8:89:28:84:1e:3c:
         34:83:3b:64:73:1d:ab:98:03:ac:6e:6f:d4:09:c9:07:5b:44:
         1f:d3:12:53:8b:ac:ed:58:76:e1:7b:43:2a:d7:4a:9c:05:5b:
         6b:ac:e0:22:7e:bb:63:26:b4:fe:a5:11:02:d6:07:36:3e:e9:
         29:74:34:31:a4:41:6a:eb:a9:a2:5a:f8:4d:d0:8a:7b:1c:f3:
         28:b9:c5:66:4a:b2:e7:13:80:29:27:d4:6b:7a:92:36:2b:44:
         c6:0c:db:12:f2:65:00:59:3c:59:e8:a8:96:64:c4:32:ba:a3:
         9f:f6:2e:6f:a5:16:2e:0c:e7:8f:43:6e:7e:63:f1:a4:56:f6:
         86:9c:3f:f3:51:b5:f8:da:d6:67:68:4d:8f:74:fb:78:d9:fa:
         4d:79:b8:35:c6:9a:46:aa:e2:49:fd:59:0a:6a:5e:c5:2c:c5:
         bf:e1:06:ea:d0:52:f8:7c:4a:5f:63:54:cc:e3:e2:dc:00:41:
         34:64:71:a2:63:80:4c:11:76:f2:d0:12:ff:e2:e4:68:d7:84:
         3a:fd:53:34:29:09:da:cf:09:15:73:da:ca:8f:6a:7f:05:bc:
         4a:fd:c2:a0:17:97:34:19:38:1e:69:93:91:4c:70:32:09:7c:
         98:59:10:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:46:10 2026 by rpki-client