Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
File:                     gnMxRuPp1uEVRjF_dSGeogLF-S0.mft (raw, json)
Hash identifier:          MSO1gltqz7OPBMhV5+i5E0k+d9l4BH5b1jY2dj+57g8=
Subject key identifier:   A7:9C:1D:03:DF:07:8B:A4:91:BE:4A:6A:94:E2:01:43:2D:D5:49:C8
Authority key identifier: 82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D
Certificate issuer:       /CN=82733146e3e9d6e11546317f75219ea202c5f92d
Certificate serial:       019ED42BCE20A380A095C6E21CA1761BA948
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
Manifest number:          0910
Signing time:             Wed 17 Jun 2026 06:01:41 +0000
Manifest this update:     Wed 17 Jun 2026 06:01:41 +0000
Manifest next update:     Thu 18 Jun 2026 06:01:41 +0000
Files and hashes:         1: QKjiIqM0UbknWM_0hZSPOOQrhbE.roa (hash: Ym8+l1LE5PwdsL5Z1gyeamQjMBjG/nU2Uc7hHjtf64w=)
                          2: gnMxRuPp1uEVRjF_dSGeogLF-S0.crl (hash: TC8FHRQWKd6zihJdXOL6Pra4e1sfsO4H6A97B4OvLdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 06:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:2b:ce:20:a3:80:a0:95:c6:e2:1c:a1:76:1b:a9:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82733146e3e9d6e11546317f75219ea202c5f92d
        Validity
            Not Before: Jun 17 06:01:41 2026 GMT
            Not After : Jun 18 06:01:41 2026 GMT
        Subject: CN=a79c1d03df078ba491be4a6a94e201432dd549c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d9:79:d2:4c:a6:b6:84:f0:6d:03:fa:51:7a:
                    b2:a4:de:13:cf:39:88:52:f3:2b:51:e2:3a:07:9a:
                    24:9a:cb:9f:2f:dc:8a:ce:a3:64:0c:ab:e6:e2:f8:
                    14:b5:3d:3e:7d:92:a1:7a:d7:13:ea:78:1c:1b:d5:
                    df:da:5d:e0:7c:a6:82:07:97:0a:04:4a:db:c2:5a:
                    5c:51:fd:7d:d2:95:91:72:3c:66:90:c4:b8:b0:41:
                    0b:24:28:7e:d8:d3:8e:ab:43:07:64:ef:dd:38:2b:
                    e3:a5:1e:1b:81:be:c2:2c:09:ca:03:29:0e:d8:e8:
                    a2:60:20:ae:22:fb:fd:ba:cf:bd:f3:a0:b1:25:e4:
                    18:b2:12:84:04:89:1b:c9:51:ce:19:8a:f4:71:92:
                    66:81:71:7b:a1:f9:a9:d8:ef:c2:a6:29:fa:e1:ae:
                    f3:b9:59:57:19:08:ce:ad:74:d4:17:f4:1d:14:cb:
                    f0:a2:ef:7f:6a:75:d3:4e:df:a3:d1:10:a3:63:66:
                    2f:db:67:4d:2e:3a:c6:c2:4e:cc:cd:de:57:9d:b6:
                    78:8d:1b:cd:fd:e9:e1:41:5d:0f:99:cf:e5:18:ad:
                    48:39:d1:32:19:55:cd:54:21:a7:7b:23:91:71:a8:
                    88:2e:f3:97:7b:7b:d6:cf:93:cd:c9:8e:45:6f:9e:
                    79:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9C:1D:03:DF:07:8B:A4:91:BE:4A:6A:94:E2:01:43:2D:D5:49:C8
            X509v3 Authority Key Identifier:
                keyid:82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:5a:69:2c:94:27:91:8a:0e:01:4a:76:3d:60:6c:08:41:ea:
         19:32:a5:f4:d3:ac:58:45:c8:b2:1d:d6:af:e5:62:33:2d:a4:
         7a:2b:07:2a:eb:1b:58:1d:28:5e:ba:82:c8:37:d1:98:f8:cf:
         f2:69:3f:b1:64:25:c5:3c:ff:b5:9d:2d:f4:69:e6:9b:8b:e9:
         2a:47:8e:2a:15:09:c4:28:67:85:d2:ce:08:1f:ac:ad:87:8a:
         78:2c:38:ec:7f:ef:42:2e:e2:44:6e:09:10:cd:fb:fe:83:d0:
         13:4b:15:0d:55:bb:54:cd:62:4f:44:97:84:cd:c1:74:47:27:
         ff:4d:38:17:59:d4:43:cc:2d:12:ea:14:ee:af:08:9b:79:03:
         bb:d7:81:7c:4c:a7:a7:05:ef:39:10:c4:a0:ea:45:05:52:91:
         3e:f1:0f:77:31:f9:69:00:f7:40:b2:9d:d6:ab:0d:60:5c:31:
         5b:09:fe:dd:b9:c7:8d:b1:73:fc:a3:c0:7f:87:cf:f6:c6:db:
         ca:92:e3:aa:d7:b7:9f:ef:95:20:8c:96:f1:d9:f3:60:82:cb:
         49:a3:8b:15:eb:2f:77:01:46:d6:ff:c2:a9:ce:b7:0d:82:fc:
         90:91:3d:fc:58:60:7a:ee:cf:63:d4:43:02:21:fd:26:63:91:
         72:e0:c5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:36:01 2026 by rpki-client