Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
File:                     gBbMsax3x8AqTt5gbfH375c6C_k.mft (raw, json)
Hash identifier:          ql2umWPWeAhLTyDpLFG4ClLg53DM14yf2mcYzFaIjmY=
Subject key identifier:   7E:5A:29:4C:04:3D:1F:06:EB:41:FD:7A:79:33:CB:38:29:9D:AD:11
Authority key identifier: 80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9
Certificate issuer:       /CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9
Certificate serial:       019DA3E635CA60972FFD4D7E0E73A4C3FC04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
Manifest number:          1374
Signing time:             Sun 19 Apr 2026 04:01:06 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:06 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:06 +0000
Files and hashes:         1: IOinLaLyJtRz6jnC6Xf3uO3dQyk.roa (hash: WrbsU2ay1yqb6dXswy4M2OA4fKF6n6NbHM9kyKcjgco=)
                          2: gBbMsax3x8AqTt5gbfH375c6C_k.crl (hash: FiGhcp1nd27dVGoh1v/zqMrKb1enykUqxTJNBW+dt9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:35:ca:60:97:2f:fd:4d:7e:0e:73:a4:c3:fc:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9
        Validity
            Not Before: Apr 19 04:01:06 2026 GMT
            Not After : Apr 20 04:01:06 2026 GMT
        Subject: CN=7e5a294c043d1f06eb41fd7a7933cb38299dad11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3d:ba:65:d8:43:26:eb:73:33:85:99:3c:13:
                    a4:c9:57:4f:b4:77:3c:f0:37:c7:fc:14:38:bf:cd:
                    5a:6e:6c:d8:c4:7a:32:e5:04:fb:85:70:62:66:5d:
                    dc:b5:d3:d1:9e:33:ec:7f:d3:8d:d1:30:09:11:64:
                    46:06:5f:f3:e7:a7:12:e4:82:62:4a:40:e6:3a:25:
                    e0:4c:05:37:a9:d8:ac:a2:9a:37:8c:3e:be:21:a9:
                    77:98:e7:7a:f2:4e:8c:06:e1:78:4c:82:8d:2f:83:
                    3d:2b:4e:54:31:78:d7:f7:b5:a6:71:d1:98:e0:64:
                    a8:fb:bb:01:3b:b6:3f:d2:77:71:ec:c5:9e:1f:b5:
                    f5:68:5e:b3:b2:13:fc:16:92:49:ec:1d:b0:23:3d:
                    a8:84:bc:3a:a6:48:5c:c8:2a:ff:3b:d2:35:4f:aa:
                    00:55:e4:2f:bd:bc:0d:8e:90:11:d3:31:e6:69:3d:
                    72:f0:9f:51:bf:3b:60:3e:7e:e6:fa:95:a5:a2:41:
                    2d:92:76:d0:ee:a9:15:e3:3d:9e:81:43:8b:94:63:
                    80:25:c6:1c:95:8c:ba:95:a7:07:d4:3f:9f:5e:23:
                    14:88:66:61:b3:5d:86:8c:ce:27:9d:61:d5:c4:9a:
                    ce:c4:8f:fc:ea:c7:3d:44:3b:c3:11:30:e9:67:92:
                    d8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5A:29:4C:04:3D:1F:06:EB:41:FD:7A:79:33:CB:38:29:9D:AD:11
            X509v3 Authority Key Identifier:
                keyid:80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:53:5e:72:5c:88:f4:e9:28:3a:c4:e3:6a:d0:e8:d8:49:63:
         5c:41:ab:bd:a8:15:94:1f:29:eb:d4:fe:f2:6d:0a:a9:39:78:
         de:c1:98:24:86:11:6d:b6:e6:85:7e:e8:84:87:d6:2f:b8:91:
         6b:73:0e:4c:b8:7f:8f:73:69:da:a4:c0:97:89:c0:1c:ef:65:
         06:49:82:f2:cc:a1:15:d2:35:53:73:f3:79:6d:64:09:0d:40:
         bd:3e:44:0a:40:6f:c2:89:b8:d8:ed:2b:98:85:96:62:c2:cf:
         b0:51:92:05:1a:9d:1a:8e:0f:7b:c2:21:91:1c:5d:c1:9b:46:
         2b:50:4e:dd:cd:f2:37:6d:c5:0d:e5:46:c5:0a:ce:65:56:5d:
         ed:f1:b7:a2:ce:9e:a6:fd:04:01:87:ee:49:bc:7a:f6:fc:4a:
         8e:46:6f:7e:9f:e0:8d:9f:9d:75:7d:c6:48:af:16:f1:bf:7f:
         b9:3b:17:64:72:be:9a:58:83:b4:f6:ee:3d:81:61:26:dc:1c:
         da:e5:a8:b2:7c:ef:f7:41:3f:53:3f:cf:dc:cb:93:73:ac:c6:
         99:ac:4d:5b:ec:48:16:89:8b:4a:c8:c5:f3:dc:60:49:5f:9d:
         9d:bf:23:28:ed:60:ec:6e:69:5d:ec:db:30:51:4e:73:ca:9a:
         97:3b:22:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:31 2026 by rpki-client