Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
File:                     GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft (raw, json)
Hash identifier:          R3AXuJ1JLERZrZDVsYR1OeIFtS/uJW5PJNOMVBN8OD4=
Subject key identifier:   9E:B4:FF:06:78:6F:2A:21:48:72:2A:B0:69:BD:B2:64:B1:76:F5:0D
Authority key identifier: 19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13
Certificate issuer:       /CN=1925e6387b33e94069a89a5d1be68904e4090613
Certificate serial:       019D99D0704D2A099A3456D7A7E8FD2B4B98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
Manifest number:          059B
Signing time:             Fri 17 Apr 2026 05:01:07 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:07 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:07 +0000
Files and hashes:         1: GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl (hash: q/1Xqm5Y+79yXESH5sKtiSjj/43My4G0Kn+FYA5goAY=)
                          2: ndpI9qLffpVaMGScW-JZ0lWj0Ks.roa (hash: vfmuR4iQKhTkQbNhXUi+1cOgTRg44mLCvKB92dRG9wo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:70:4d:2a:09:9a:34:56:d7:a7:e8:fd:2b:4b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1925e6387b33e94069a89a5d1be68904e4090613
        Validity
            Not Before: Apr 17 05:01:07 2026 GMT
            Not After : Apr 18 05:01:07 2026 GMT
        Subject: CN=9eb4ff06786f2a2148722ab069bdb264b176f50d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:14:96:33:94:3a:8a:2c:64:ce:88:80:4f:71:
                    54:c5:16:f6:c8:1a:13:fa:dc:aa:a4:8a:65:1e:26:
                    b2:05:e3:d6:72:0f:9b:60:4c:b6:e1:5e:80:d8:02:
                    62:fb:68:0b:89:bc:a5:a3:93:09:16:31:d5:b2:24:
                    6f:a5:3a:76:8f:86:4e:d5:5b:40:aa:74:ef:8c:42:
                    f3:d6:73:b7:26:00:92:44:5d:68:35:e9:8f:cf:7e:
                    d9:1e:c0:ae:62:e2:af:40:ac:11:fb:47:16:ef:85:
                    11:26:0b:aa:fa:80:d6:b9:1d:37:c9:44:82:b4:e8:
                    cc:fb:14:aa:e9:54:d3:94:2b:d1:f7:6b:90:ce:4b:
                    cf:73:78:ec:ba:92:08:65:0f:13:76:82:10:57:e8:
                    fb:b4:11:73:f8:12:dd:8b:c0:c9:9b:72:0e:6c:11:
                    ca:40:89:66:52:3a:32:01:63:d2:5a:00:1d:ee:b8:
                    51:f3:96:33:4c:7a:20:46:bf:30:53:35:ba:4e:ba:
                    31:58:04:10:14:3a:d2:17:f7:07:42:a7:7e:08:b5:
                    c8:a3:73:81:e0:5d:75:b0:ce:d3:90:7f:1a:f1:bd:
                    ca:93:d4:91:4a:c2:1d:50:a6:0a:11:77:91:6d:ca:
                    72:19:92:7b:54:2a:9f:73:63:10:13:78:27:0d:60:
                    cb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B4:FF:06:78:6F:2A:21:48:72:2A:B0:69:BD:B2:64:B1:76:F5:0D
            X509v3 Authority Key Identifier:
                keyid:19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f4:4e:f6:e6:a0:99:ed:08:91:27:6a:f8:f0:2c:d6:20:bd:
         13:c9:b2:8e:69:80:4a:76:aa:c9:5a:e0:3f:fb:7c:e7:26:c2:
         a4:49:23:56:44:78:79:8c:2c:a4:98:83:59:17:0b:78:f9:11:
         6a:6f:1d:2d:a8:f7:25:fa:d0:bc:1a:4d:cd:c7:a4:03:04:c8:
         5f:ff:bc:52:db:a8:01:2d:ee:78:af:0b:f9:dc:32:2e:84:db:
         9d:ef:81:35:6c:8a:57:28:5f:46:a0:1f:42:fb:9a:b1:f9:b5:
         b1:55:c7:59:54:af:01:a9:e2:a2:64:38:fc:e2:1b:d1:d0:b7:
         a3:60:26:70:99:de:9e:64:b4:f4:e9:bd:60:bc:a6:a7:79:5b:
         f1:ca:f9:4b:59:9e:c9:a6:ef:c0:5e:06:8b:89:1e:e2:52:5a:
         9a:18:5d:65:3c:11:30:69:41:d1:8c:3a:df:6c:60:88:e2:fb:
         cf:51:5f:9b:52:69:70:eb:5f:22:36:b4:87:e9:48:47:a1:65:
         45:e7:b6:10:5d:97:46:c2:b8:ed:ad:25:a5:3d:f3:69:16:3c:
         07:89:b7:4e:78:ea:79:dd:71:42:11:a5:29:9e:6e:45:f6:44:
         42:3f:b6:89:4d:31:40:4d:d3:8a:de:7c:f2:20:ed:d0:1e:81:
         e4:d0:46:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0HBNKgmaNFbXp+j9K0uYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MjVlNjM4N2IzM2U5NDA2OWE4OWE1ZDFiZTY4OTA0ZTQw
OTA2MTMwHhcNMjYwNDE3MDUwMTA3WhcNMjYwNDE4MDUwMTA3WjAzMTEwLwYDVQQD
Eyg5ZWI0ZmYwNjc4NmYyYTIxNDg3MjJhYjA2OWJkYjI2NGIxNzZmNTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxSWM5Q6iixkzoiAT3FUxRb2yBoT
+tyqpIplHiayBePWcg+bYEy24V6A2AJi+2gLibylo5MJFjHVsiRvpTp2j4ZO1VtA
qnTvjELz1nO3JgCSRF1oNemPz37ZHsCuYuKvQKwR+0cW74URJguq+oDWuR03yUSC
tOjM+xSq6VTTlCvR92uQzkvPc3jsupIIZQ8TdoIQV+j7tBFz+BLdi8DJm3IObBHK
QIlmUjoyAWPSWgAd7rhR85YzTHogRr8wUzW6TroxWAQQFDrSF/cHQqd+CLXIo3OB
4F11sM7TkH8a8b3Kk9SRSsIdUKYKEXeRbcpyGZJ7VCqfc2MQE3gnDWDLBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ60/wZ4byohSHIqsGm9smSxdvUNMB8GA1UdIwQY
MBaAFBkl5jh7M+lAaaiaXRvmiQTkCQYTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1NYbU9Ic3o2VUJwcUpwZEctYUpCT1FKQmhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kNGUwZGItMThjMS00NDgzLTg4MDMt
OTY2Njg1ZWE0MGY5LzEvR1NYbU9Ic3o2VUJwcUpwZEctYUpCT1FKQmhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9kNGUwZGItMThjMS00NDgzLTg4MDMtOTY2Njg1ZWE0MGY5
LzEvR1NYbU9Ic3o2VUJwcUpwZEctYUpCT1FKQmhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/RO9uag
me0IkSdq+PAs1iC9E8myjmmASnaqyVrgP/t85ybCpEkjVkR4eYwspJiDWRcLePkR
am8dLaj3JfrQvBpNzcekAwTIX/+8UtuoAS3ueK8L+dwyLoTbne+BNWyKVyhfRqAf
Qvuasfm1sVXHWVSvAaniomQ4/OIb0dC3o2AmcJnenmS09Om9YLymp3lb8cr5S1me
yabvwF4Gi4ke4lJamhhdZTwRMGlB0Yw632xgiOL7z1Ffm1JpcOtfIja0h+lIR6Fl
Ree2EF2XRsK47a0lpT3zaRY8B4m3Tnjqed1xQhGlKZ5uRfZEQj+2iU0xQE3Tit58
8iDt0B6B5NBG1g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:50:20 2026 by rpki-client