Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
File:                     GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft (raw, json)
Hash identifier:          1cUeVfRWCnykfB3ouGk/Z8Fny5SC/mE54OGaodsXFTA=
Subject key identifier:   AF:87:81:BD:14:7B:DC:4B:A3:F3:02:68:E3:EB:00:C3:5E:B5:E8:7F
Authority key identifier: 19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74
Certificate issuer:       /CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
Certificate serial:       019D9A3E64031B73759867D011A0D803A713
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
Manifest number:          0D6D
Signing time:             Fri 17 Apr 2026 07:01:13 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:13 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:13 +0000
Files and hashes:         1: GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl (hash: 8xz1xk+xwzmVJaimBBK404erxNuBjJ+hh37b2YFpiZQ=)
                          2: bsIvknt5fmmAnWdhXsBu-Ue2-v0.roa (hash: n3XIzhJt5VMAiTGqI1g3v5Vdsn00DFS2DY6O4jjQGxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:64:03:1b:73:75:98:67:d0:11:a0:d8:03:a7:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
        Validity
            Not Before: Apr 17 07:01:13 2026 GMT
            Not After : Apr 18 07:01:13 2026 GMT
        Subject: CN=af8781bd147bdc4ba3f30268e3eb00c35eb5e87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:db:45:1d:29:eb:e8:ca:a3:68:87:93:48:12:
                    df:b7:36:81:8d:fc:fe:ac:31:a9:da:6f:62:68:cb:
                    20:d7:44:a9:59:a8:72:14:e0:b8:68:b2:7a:19:a8:
                    17:81:b6:34:13:44:d6:56:4d:a8:2f:33:41:cf:2e:
                    ad:2c:32:f1:2d:18:a4:49:cd:7d:42:23:16:5b:ea:
                    ce:43:11:0c:a2:68:9d:fd:53:48:25:38:3c:9d:08:
                    91:7b:f1:a5:bb:e1:cc:2f:22:cd:35:aa:df:94:4c:
                    8d:ab:9c:03:a2:a2:63:8f:78:44:32:1c:20:88:80:
                    4d:ee:d3:ac:c8:37:b4:c7:72:95:66:a7:b1:f5:f1:
                    ad:bf:5d:6f:06:33:e1:ca:b6:d5:fb:c8:b9:96:e0:
                    61:c6:a8:b2:34:2e:c6:c4:f6:23:dc:65:7c:7c:80:
                    ab:bd:06:68:ad:68:e5:23:48:6e:25:de:cb:26:6b:
                    8c:96:d8:90:e9:9e:e8:21:c1:17:1b:83:09:2b:15:
                    9f:35:fa:18:b1:f1:44:f8:de:99:0e:e3:45:e0:ab:
                    c6:4b:3f:58:95:dd:c7:2e:e3:2a:24:4e:21:03:a9:
                    c3:c9:99:38:39:79:d9:f7:89:9e:99:18:79:4b:4a:
                    31:96:82:0b:8b:3b:7e:a5:f2:8e:05:4f:2d:04:7c:
                    05:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:87:81:BD:14:7B:DC:4B:A3:F3:02:68:E3:EB:00:C3:5E:B5:E8:7F
            X509v3 Authority Key Identifier:
                keyid:19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:97:bf:5e:78:7d:8d:70:07:91:ea:82:b9:57:f2:05:cf:68:
         7f:54:76:c1:34:14:5d:e6:5f:4b:76:c2:98:23:08:4f:49:b1:
         59:c7:0c:11:7a:f8:4c:47:b6:45:e4:d4:b5:d6:bf:98:b4:92:
         17:96:01:d0:2a:67:c9:94:59:07:4e:4c:6e:b1:65:f0:13:d2:
         35:24:5b:c1:8d:cc:0d:3b:9d:9b:62:fa:cb:35:4c:f2:74:79:
         b5:de:62:06:3d:f4:97:7f:e3:88:ca:dc:52:7d:a6:43:a3:c7:
         d2:e5:f9:5a:8f:83:70:45:e0:4b:53:d3:06:54:05:81:a5:56:
         92:6a:ad:f7:1c:04:39:88:a1:8b:1a:58:14:42:36:1e:d3:54:
         8e:57:4b:eb:d3:49:66:dc:8b:21:9e:2b:ea:0e:f3:5e:2f:9b:
         08:6d:28:18:49:d0:a2:c8:40:95:1a:5f:79:8f:11:28:f0:c5:
         12:3e:1a:3a:b1:ec:9c:16:f6:0e:fa:84:22:01:ea:a3:eb:e0:
         27:ee:2e:59:f9:b3:f7:52:59:91:86:5b:a6:3e:35:4b:3e:07:
         10:93:04:e2:3a:2b:9a:a8:60:89:99:a0:58:81:82:ac:d8:e4:
         c2:a5:35:36:bf:f0:d7:8e:d8:9f:84:01:4a:cd:16:e7:24:6e:
         a9:6e:2f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:14:03 2026 by rpki-client