Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
File:                     gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft (raw, json)
Hash identifier:          NQ+VLwX+00cYMWkmOJBq+Ih2ZSQah00p+RWrfK8TVrI=
Subject key identifier:   AD:29:13:07:9B:CA:9C:C8:DB:F8:C7:4C:39:9A:52:6B:9B:BF:CF:AD
Authority key identifier: 81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
Certificate issuer:       /CN=8166038385b343d55e76b728efe23c0731787668
Certificate serial:       019EC1B6E98CBE2B0D1EE96698E8DCEF8AA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
Manifest number:          125C
Signing time:             Sat 13 Jun 2026 16:00:50 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:50 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:50 +0000
Files and hashes:         1: 8YpwJkM4ApxJ79nY1Tn1a81nlqM.roa (hash: tcShowN5n/wg+sXuZ3o0xwGbFl1QoPNhkaf9D8szQoM=)
                          2: gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl (hash: i3s9cwpWJopjgv7cyg3A62rlk7TpT2BONVGH96MaW3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:e9:8c:be:2b:0d:1e:e9:66:98:e8:dc:ef:8a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8166038385b343d55e76b728efe23c0731787668
        Validity
            Not Before: Jun 13 16:00:50 2026 GMT
            Not After : Jun 14 16:00:50 2026 GMT
        Subject: CN=ad2913079bca9cc8dbf8c74c399a526b9bbfcfad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1e:5f:fd:08:d3:c4:ac:30:cb:ba:09:40:de:
                    51:a6:0a:25:75:8e:30:fd:50:73:18:86:85:b8:a5:
                    3d:61:78:2b:1f:6e:51:35:a0:2e:a9:6b:73:9c:33:
                    75:08:5f:96:db:b1:17:83:f8:7e:cc:6a:42:70:58:
                    f0:b4:13:68:78:cc:ff:ac:0d:99:ad:fb:0c:2f:7e:
                    21:e1:f5:d2:d8:e8:4a:ed:a0:9d:2e:2c:85:1e:17:
                    d3:26:bd:7d:f3:e9:1c:6f:80:88:03:ce:2e:4f:ac:
                    b8:0b:d3:7b:1b:d9:6d:ab:c4:6f:4c:be:f1:f9:5a:
                    3b:23:db:8f:d5:f7:da:30:70:4a:57:cf:46:81:f7:
                    34:ba:82:c9:d6:32:df:ee:a6:d7:f9:5d:e3:26:fd:
                    6b:88:3f:01:e8:5b:c8:96:e9:e5:2b:a6:75:25:e5:
                    ce:93:59:89:e1:d7:27:fd:02:d8:9f:64:dd:2c:50:
                    3d:d7:31:1e:34:77:65:a0:02:5e:0f:e0:8b:eb:3e:
                    ae:01:a3:d7:9e:b7:66:42:74:73:8b:40:76:7b:16:
                    50:94:98:2d:0e:4d:89:43:07:9b:6f:15:8c:bd:41:
                    44:be:18:c6:cd:27:e1:fb:80:86:e7:2c:9a:a2:3b:
                    f5:d9:23:4f:d3:6b:37:69:ef:0c:6d:f6:70:da:90:
                    93:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:29:13:07:9B:CA:9C:C8:DB:F8:C7:4C:39:9A:52:6B:9B:BF:CF:AD
            X509v3 Authority Key Identifier:
                keyid:81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:7a:64:e3:be:62:4e:4d:0d:3c:06:cf:99:34:2a:d3:4a:97:
         c1:d2:a3:6e:6c:c6:1d:c1:f4:29:2e:5f:55:58:4e:08:81:32:
         f5:72:4f:95:73:cc:40:f8:f8:97:4c:ce:9d:54:10:68:24:76:
         52:bc:51:03:ff:d9:81:d8:f5:cb:fd:fe:7b:ea:21:49:ad:61:
         0a:28:0e:e8:fd:1b:75:f6:e2:b1:e3:52:1f:99:94:77:f1:e1:
         76:9a:d6:3d:12:9d:f2:5b:57:60:99:47:da:b4:cb:72:62:7a:
         7f:de:cb:6c:57:19:f8:0e:05:f7:a7:0f:b9:56:11:5e:ea:82:
         f9:ec:96:21:a8:2f:99:ed:75:54:0e:60:1f:49:4b:8f:ab:3b:
         21:0f:82:a5:c1:d3:cb:23:2d:f5:29:37:ee:df:fe:df:c2:ac:
         82:6f:fa:57:80:82:36:f4:87:1b:a1:f2:cb:b3:9c:23:80:79:
         9d:40:7f:60:8f:49:07:f7:4b:30:67:f5:e7:4e:39:4b:7e:e3:
         d2:33:dc:a9:2e:4c:98:90:60:64:73:3a:b2:87:f6:ae:02:53:
         7d:1d:10:ab:3e:34:93:0c:07:11:eb:3f:15:3d:9a:31:b9:84:
         4a:c1:c0:a8:65:ba:04:79:a5:00:9e:a2:6a:34:5b:2e:5c:a4:
         b8:92:50:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:33:45 2026 by rpki-client