Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
File:                     GbEF0UjemWA2_fIcsgijOKFYzto.mft (raw, json)
Hash identifier:          MfQFUQsg34bE7Vxn2t9n0I2Hp+M/UCZyWhpUqJBEYQs=
Subject key identifier:   81:9E:2E:73:77:66:AD:27:50:FB:05:C1:E4:BB:04:11:4F:43:6E:9C
Authority key identifier: 19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA
Certificate issuer:       /CN=19b105d148de996036fdf21cb208a338a158ceda
Certificate serial:       019D9B51713AE546D2ED30A57A6A81539AC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
Manifest number:          0846
Signing time:             Fri 17 Apr 2026 12:01:38 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:38 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:38 +0000
Files and hashes:         1: GbEF0UjemWA2_fIcsgijOKFYzto.crl (hash: LmQkOQSuv1ZfAcvnYeqJlcAoYtGraOfsNDUqGNZeC/Y=)
                          2: dyUespYQq3mAO5ciQOI9W33sub4.roa (hash: f5ONEWQltft9lq7xj2n38xNWDCpMGTw5GICFFgsknX0=)
                          3: fSqawDgohGpuSmZo75yc0WkYeBQ.roa (hash: 8OxkTboICrI/6VG3FG9kRuzUoZMlBkjPOzPS7xwaWEU=)
                          4: nUmvBNvDTQXxBOq0CjmJmn5Dtmc.roa (hash: edmkHUr1mlIvRQnZS+9H+p7B//zDt6WSlQ6S+qA/Trg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:51:71:3a:e5:46:d2:ed:30:a5:7a:6a:81:53:9a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b105d148de996036fdf21cb208a338a158ceda
        Validity
            Not Before: Apr 17 12:01:38 2026 GMT
            Not After : Apr 18 12:01:38 2026 GMT
        Subject: CN=819e2e737766ad2750fb05c1e4bb04114f436e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:32:27:2f:09:c4:75:bc:ec:56:5c:cd:37:92:
                    c5:7e:00:06:6e:76:cb:6b:a4:4f:c5:bd:96:90:3e:
                    8c:fb:60:3b:d7:a8:16:fe:2a:1d:e6:2f:04:57:fe:
                    27:e2:4b:25:e3:da:de:d4:f6:06:7a:26:76:90:d1:
                    3c:f2:c5:32:60:c9:e5:b2:0f:fb:65:22:51:e2:7b:
                    c9:3b:98:b1:70:ad:14:26:5a:ed:11:21:4c:b7:02:
                    7b:8c:49:24:48:a0:f0:b5:bc:83:6f:19:8b:c4:51:
                    fd:39:f3:ab:17:71:94:38:a8:bd:8e:f5:69:2c:7b:
                    e7:dd:82:0e:35:8d:97:12:ae:da:ed:53:02:09:c7:
                    05:9e:21:8e:37:14:fe:f1:aa:da:06:de:33:16:4e:
                    31:c2:a5:6a:2a:c8:dc:1b:3f:d4:09:32:1d:20:77:
                    19:41:ab:cf:a1:52:71:e6:5d:05:cd:73:c9:0b:ca:
                    10:ae:3e:41:b6:2a:9d:4c:d5:c1:a5:ec:0d:66:b8:
                    5f:46:10:b4:06:94:df:2c:80:f3:72:82:04:43:63:
                    b4:a6:c1:44:7c:26:99:53:10:61:9e:54:b9:ec:9d:
                    56:85:f1:73:6b:24:53:09:63:98:bd:0a:d6:82:79:
                    52:e9:f2:97:f1:9b:f6:d7:be:ee:7c:86:28:ba:6a:
                    3c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9E:2E:73:77:66:AD:27:50:FB:05:C1:E4:BB:04:11:4F:43:6E:9C
            X509v3 Authority Key Identifier:
                keyid:19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a3:b1:9a:d9:bd:e0:87:5d:9f:f0:bb:52:48:1a:c2:b1:21:
         09:5e:0f:bf:e4:7e:48:7f:f1:29:6e:5d:8f:bc:69:03:92:dc:
         97:cd:18:73:c6:2c:0f:52:c6:96:ee:01:cc:80:29:ee:c5:78:
         df:11:72:0f:98:c1:39:c1:3f:53:28:fc:e7:62:42:17:5f:14:
         46:fc:27:df:5e:00:23:11:da:77:e6:02:f4:d5:4c:63:bd:e4:
         6c:c0:b2:7e:df:0e:26:7f:a7:d8:cb:aa:f8:2e:22:7e:f6:9d:
         c5:d2:82:42:82:8b:da:bd:38:6e:78:de:f3:86:e7:98:0e:2a:
         3e:ee:5c:88:8b:f0:36:78:5c:22:95:4b:76:8c:1b:33:fb:9c:
         3e:ad:46:45:73:26:5c:ff:4c:52:6d:88:05:70:17:ad:c7:cb:
         c0:c9:67:a0:74:17:57:5e:6a:bd:62:4a:cd:0a:75:70:91:6f:
         2c:83:a1:31:55:68:b3:f2:cc:d0:61:5c:52:85:a7:19:b6:ee:
         f1:12:b6:87:de:f3:f1:c6:21:b7:08:fb:c9:d6:f6:a4:ef:0a:
         11:b4:8f:4c:95:78:5d:03:cf:2e:81:ce:45:cb:54:f4:de:6a:
         20:f9:00:bc:b1:5b:8c:33:c4:15:0a:56:5f:c3:f2:e6:df:07:
         cb:57:43:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:30 2026 by rpki-client