Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File:                     GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier:          qRdQLsfYT7tvSlCSc/hpRNPvufL6FeXHNseDONzFPns=
Subject key identifier:   20:71:51:82:1B:63:9D:E4:10:93:6D:0B:46:1E:71:DE:D6:51:75:53
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer:       /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial:       019EBF23CB15EDF76F95D7BC6ECCC0F3EB7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number:          18ED
Signing time:             Sat 13 Jun 2026 04:00:54 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:54 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:54 +0000
Files and hashes:         1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: 9z0FRazZzXZ9A7oApQ8lin5GylG4Z21b8+9rY8QhwkE=)
                          2: Z2umXdj8rXKQHGCd4mt2FC6IjeM.roa (hash: hNS38512ED5SaAduPnnfGixmvuVAAKqHK4KB5eSeNCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:cb:15:ed:f7:6f:95:d7:bc:6e:cc:c0:f3:eb:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
        Validity
            Not Before: Jun 13 04:00:54 2026 GMT
            Not After : Jun 14 04:00:54 2026 GMT
        Subject: CN=207151821b639de410936d0b461e71ded6517553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:79:e7:d2:63:5c:1f:a0:cd:d9:18:1f:16:63:
                    2c:a8:bf:50:14:bf:93:44:23:43:66:67:12:6d:54:
                    f8:c9:0d:17:00:3b:09:78:3c:81:23:e3:d6:9d:2b:
                    a0:f3:e2:bb:89:8d:36:06:42:5d:f3:8b:7c:92:23:
                    60:fb:e6:20:e9:b1:98:d8:64:26:cb:5a:f8:45:29:
                    d6:7b:8a:0f:c9:26:3b:bf:48:03:58:e0:bb:4b:d5:
                    71:28:36:b8:a6:1d:3c:71:02:1d:bb:c6:bc:20:bb:
                    5e:b8:18:e5:74:af:ee:95:ff:15:f1:e6:d2:30:47:
                    2b:56:3d:84:a2:db:0c:2a:35:5d:92:e9:fb:66:65:
                    5b:96:cd:15:eb:61:dd:35:eb:26:42:97:4c:83:61:
                    f6:f8:c8:d2:17:bf:6c:77:7c:e3:8c:2a:e3:e0:bc:
                    11:ff:b3:f2:eb:02:9e:51:fc:af:fb:c7:a2:14:b3:
                    95:89:58:74:00:3e:1d:12:8b:74:64:fe:4b:05:8f:
                    13:a3:3d:0c:88:7b:c6:b4:b5:72:c7:ec:81:c9:d6:
                    d5:cc:bb:39:24:36:3c:a7:af:c0:f2:3e:2b:e6:c4:
                    48:1c:6f:04:27:e3:30:37:0d:a4:7e:bb:c0:e0:7c:
                    85:9b:a0:b6:96:3f:e0:df:fe:aa:fa:f7:6b:7d:b7:
                    a4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:71:51:82:1B:63:9D:E4:10:93:6D:0B:46:1E:71:DE:D6:51:75:53
            X509v3 Authority Key Identifier:
                keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:dd:5d:39:0b:8f:6a:58:6c:d3:0a:4d:8e:e1:e1:8d:85:0b:
         75:1b:8a:0d:b1:f6:9f:fe:82:2a:37:65:f0:2f:f1:9e:34:41:
         f1:8e:1d:f0:da:db:7d:68:13:2d:52:63:3b:cd:1a:08:45:11:
         be:dc:69:72:be:21:ba:bb:b9:82:0a:41:54:1d:b5:02:71:87:
         42:12:15:3c:38:15:f2:d6:8f:13:30:3d:e4:7a:13:30:32:e4:
         47:cf:c8:7f:75:e4:ae:f6:f9:f2:86:f0:2d:23:6d:e2:4a:07:
         5b:41:c5:4b:03:58:30:1a:47:53:11:bf:80:0c:96:ea:23:3d:
         09:34:f1:34:87:b5:bf:b5:b8:03:bf:97:fa:91:a8:09:72:69:
         4b:ac:da:de:06:2b:bb:59:be:ef:94:7c:f8:ca:36:a7:16:57:
         5b:7e:3d:38:28:cc:e3:f6:2a:3b:7d:6c:29:51:08:cc:e2:38:
         3b:c1:c8:69:ba:3a:41:4b:04:20:f6:3c:39:ec:e9:9e:5d:cb:
         9c:14:55:6e:30:69:99:ea:db:47:c2:48:5e:3b:26:84:66:d0:
         40:98:40:79:9e:bd:30:7d:0e:f8:fe:e1:73:f6:5c:14:3c:91:
         99:f5:00:b6:b3:af:f2:35:8f:73:f6:a5:84:e6:f7:28:58:5a:
         54:3a:09:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:02:10 2026 by rpki-client