Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
File:                     GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft (raw, json)
Hash identifier:          THNmZtymu0Qy+EB0ApydMmxejWCeMOw+gBbVVywDyZA=
Subject key identifier:   82:26:37:E1:87:6F:58:56:B4:DE:66:0B:57:65:91:B5:0A:F1:B5:04
Authority key identifier: 19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A
Certificate issuer:       /CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a
Certificate serial:       019D9BF53EDAC22093B700FA211CD23EDC47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
Manifest number:          06DF
Signing time:             Fri 17 Apr 2026 15:00:34 +0000
Manifest this update:     Fri 17 Apr 2026 15:00:34 +0000
Manifest next update:     Sat 18 Apr 2026 15:00:34 +0000
Files and hashes:         1: GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl (hash: 7C9p6IXI6k1rGHGkk+WFPbTSR+0xyYSHFN/XkE31xuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:3e:da:c2:20:93:b7:00:fa:21:1c:d2:3e:dc:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195fa8330252a07f250e51d8e474bb38d7dc3b9a
        Validity
            Not Before: Apr 17 15:00:34 2026 GMT
            Not After : Apr 18 15:00:34 2026 GMT
        Subject: CN=822637e1876f5856b4de660b576591b50af1b504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:21:6e:19:64:2a:ce:70:19:74:f9:15:b6:6f:
                    69:37:e9:8b:f4:44:c8:f8:5d:4c:f5:65:b8:04:ef:
                    e9:0c:7c:3c:1b:71:dd:fb:90:90:e3:b4:6a:8d:3b:
                    79:68:29:33:1b:fc:fa:21:cc:5a:fe:84:43:4e:23:
                    b0:a5:bb:71:6a:3c:83:ff:a1:a0:cb:2f:9c:73:44:
                    8e:64:73:a0:08:71:02:1f:e8:9c:c0:43:2a:30:76:
                    25:5a:d0:14:6e:75:1c:71:2f:10:4f:ec:4b:9b:46:
                    6a:e4:d1:f8:28:1c:17:9c:f7:a7:7c:49:1d:fc:a8:
                    b3:16:9b:12:93:8c:39:71:05:e1:3f:a6:6c:06:17:
                    c5:dd:6e:91:de:89:72:0d:15:73:51:db:b3:4a:ef:
                    5f:d0:80:1b:0d:42:40:09:34:c3:40:ed:4c:b1:e7:
                    0e:bc:30:ea:84:66:49:e0:a6:b0:b4:5f:ee:eb:64:
                    c9:9b:20:94:11:df:3f:7d:7c:b1:8b:a5:91:88:6b:
                    04:67:9e:e0:a2:bc:2f:8c:ed:75:8d:fb:02:e4:9b:
                    23:cc:6c:6e:c3:99:1c:b7:26:71:99:79:10:23:1c:
                    cf:1d:cd:de:bf:69:01:c7:f4:92:83:82:00:75:c2:
                    0a:ae:9b:57:ef:ad:8c:76:a0:04:fd:52:c9:e2:eb:
                    87:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:26:37:E1:87:6F:58:56:B4:DE:66:0B:57:65:91:B5:0A:F1:B5:04
            X509v3 Authority Key Identifier:
                keyid:19:5F:A8:33:02:52:A0:7F:25:0E:51:D8:E4:74:BB:38:D7:DC:3B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GV-oMwJSoH8lDlHY5HS7ONfcO5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e9b0e0-f4b6-46da-aff8-be7087dbf536/1/GV-oMwJSoH8lDlHY5HS7ONfcO5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:14:85:dd:20:48:47:16:ec:f6:c7:97:18:87:a3:d9:1a:f9:
         fa:ea:5e:db:28:4a:90:76:cb:53:32:b9:d7:bf:03:c2:01:0a:
         b0:bf:1b:16:f8:40:0d:3c:b9:74:b5:bc:a6:cb:cf:38:5d:06:
         eb:7f:32:10:69:ee:4f:e3:86:cc:d9:67:06:f4:1f:c9:43:74:
         27:a7:0e:d1:1b:1c:f7:c3:22:50:4d:10:14:91:56:52:b1:1e:
         01:30:10:28:7c:94:7d:0d:6f:aa:d5:c4:7d:70:a5:23:26:8f:
         7f:db:7d:f4:27:d3:9c:6d:a9:42:0a:91:0b:b4:0d:4e:2d:17:
         c9:f6:ad:9d:8c:f5:19:92:e3:5d:6c:64:99:67:ff:be:c4:8f:
         16:de:44:2f:6d:b0:90:ec:d6:6e:3a:04:e5:94:d2:df:f3:97:
         08:2e:89:ea:59:f9:ba:85:fc:41:47:69:ef:de:34:00:99:7a:
         f3:06:ff:df:cf:97:a9:a4:2d:66:b4:1f:8f:b5:5c:3f:2f:77:
         90:87:0c:72:9c:61:71:db:5d:62:5e:c0:e2:a8:2e:2d:81:32:
         bf:b6:bc:0a:e2:28:53:43:06:f4:dc:34:42:84:96:76:b8:25:
         7b:32:48:c9:86:93:7b:c0:93:4e:52:eb:67:8c:01:bd:d8:97:
         5e:6b:ae:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:38:49 2026 by rpki-client