Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
File:                     GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft (raw, json)
Hash identifier:          7F7Jf6eFTrg542RgiSZ03GkcSSpob2RC6Z/Kq6qeisE=
Subject key identifier:   EA:9E:73:A6:19:9F:CC:C6:37:3C:11:3D:BD:7A:F4:01:67:83:26:C9
Authority key identifier: 18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
Certificate issuer:       /CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Certificate serial:       019D99D0D06D9E87C83D89ABE7152313D6DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 05:01:32 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:32 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:32 +0000
Files and hashes:         1: GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl (hash: GsWw8nIU6p06CXLDPd8KGjbajtdjYq1aoMWpGUbXawY=)
                          2: abbbV0XVk995UrsAzYOq3iQxcEk.roa (hash: 4xNlKWkY5oZiKT7584PwOX/H1wHQW2fuOn1s1+Y8Eus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:d0:6d:9e:87:c8:3d:89:ab:e7:15:23:13:d6:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
        Validity
            Not Before: Apr 17 05:01:32 2026 GMT
            Not After : Apr 18 05:01:32 2026 GMT
        Subject: CN=ea9e73a6199fccc6373c113dbd7af401678326c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d8:c8:72:1d:e3:15:30:da:31:2a:9c:7e:95:
                    bf:e9:a7:55:0b:f1:62:78:3b:e8:2f:23:c6:b6:73:
                    98:3d:2e:71:86:93:81:34:d7:8d:b8:db:5e:3c:5b:
                    2a:bb:b2:b0:54:e2:d1:09:a9:71:60:4e:48:cc:aa:
                    86:7f:31:0e:c1:45:1f:c1:00:38:98:56:e1:e7:b1:
                    c3:bc:0e:d6:5b:02:9a:58:c6:a7:b1:32:7a:4e:15:
                    9a:f5:0d:6e:5b:0e:d8:0f:bb:77:d0:89:11:0c:48:
                    b9:24:2c:96:90:72:c8:c5:11:8b:e1:39:3d:e5:4f:
                    1b:9c:b0:b8:81:56:52:19:8d:13:56:22:df:78:d4:
                    eb:29:87:4c:e1:8a:dd:02:1b:47:9b:86:07:e2:06:
                    8a:70:4f:c0:8d:85:42:38:5d:9c:55:5d:88:8f:df:
                    4d:da:e0:f0:72:a5:a4:cf:37:98:fe:5c:cf:e3:36:
                    8c:db:8a:96:e9:09:82:62:5c:58:02:6f:9e:a0:11:
                    af:f6:34:b5:0b:9f:3b:10:7f:d5:cf:fd:d2:5f:e7:
                    13:3d:51:a6:5e:ac:52:99:96:26:84:e8:f0:da:3a:
                    ae:d8:0c:22:4d:94:a3:c1:f2:3f:72:be:3e:f4:2c:
                    12:3b:6d:4b:07:3c:6b:87:b5:de:23:fa:24:f4:b7:
                    31:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9E:73:A6:19:9F:CC:C6:37:3C:11:3D:BD:7A:F4:01:67:83:26:C9
            X509v3 Authority Key Identifier:
                keyid:18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:42:54:0a:a1:3f:15:34:c7:bf:13:40:73:4e:34:ec:e8:cd:
         dc:1e:e7:b4:67:38:48:a2:45:6e:f6:6a:f7:96:6a:96:dc:ba:
         37:11:a7:6f:c9:27:8e:51:36:86:a8:32:42:dc:83:46:c3:63:
         c3:da:bc:77:da:58:4d:c6:ff:eb:30:8a:89:06:a7:84:1a:87:
         6a:f5:f0:af:63:44:f2:47:98:15:e4:1f:cc:17:f8:dc:f3:63:
         64:e7:12:4e:e0:1d:1d:a2:b0:58:c0:30:07:c1:65:01:64:97:
         13:85:23:14:d4:ee:21:de:a0:40:d3:88:65:5d:36:3e:72:d4:
         79:5d:5e:ec:e5:25:a3:e6:fc:1b:f2:e6:cb:f6:75:0e:88:65:
         e3:ad:e8:5e:41:56:41:3e:62:9a:bd:f4:55:40:b1:76:24:1e:
         ce:ef:cc:16:3b:0f:a8:f1:b6:70:02:b7:d2:f7:f8:12:9e:d1:
         30:25:51:0a:17:3b:1d:8e:5d:0d:9e:1f:49:49:82:e6:c2:aa:
         df:0b:35:ff:54:85:47:98:b8:e7:ab:23:98:79:a8:ba:aa:5f:
         d3:4a:a6:85:71:3a:af:12:1c:a1:f8:af:df:6c:01:a6:20:84:
         1a:af:0b:78:8c:be:a5:ff:c3:91:1f:4b:e8:6d:8e:73:81:c8:
         0a:46:21:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:35:50 2026 by rpki-client