Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
File:                     gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft (raw, json)
Hash identifier:          mJsrh4Da//jQCqbUQF2VJzTDiptaNYb1Ey0CkPc6my8=
Subject key identifier:   D8:2A:BB:0C:47:E5:F1:C7:EF:AF:8D:38:28:9F:D6:45:79:93:8D:32
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Certificate issuer:       /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial:       019DA41C9B0DB07718C2C3B9C27A5A659982
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
Manifest number:          18CF
Signing time:             Sun 19 Apr 2026 05:00:31 +0000
Manifest this update:     Sun 19 Apr 2026 05:00:31 +0000
Manifest next update:     Mon 20 Apr 2026 05:00:31 +0000
Files and hashes:         1: BdSuQVDQN0VvLBhw0-t0KDo8T2w.roa (hash: Adx+9mj7hvvMFLBS193scbpgC/haFVM6A5WGrKZ0rkc=)
                          2: RB3MCZgDbeMI6s-D2_JUTZ_rqbY.roa (hash: JrGHevSUwFCGVeEzLDEb8HtCJMbEOdcnxPcVOLqyOAc=)
                          3: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl (hash: BgLpd6w8XI328ykG81U4b+Hy/WoqmovfAkr3Pvrkwj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:1c:9b:0d:b0:77:18:c2:c3:b9:c2:7a:5a:65:99:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
        Validity
            Not Before: Apr 19 05:00:31 2026 GMT
            Not After : Apr 20 05:00:31 2026 GMT
        Subject: CN=d82abb0c47e5f1c7efaf8d38289fd64579938d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:92:fb:33:17:5b:aa:f0:f2:01:c1:60:de:42:
                    18:c1:09:ec:44:b0:9e:73:c7:5d:1f:fd:92:f7:07:
                    93:b9:ec:e5:45:c1:ae:e8:b5:bc:ec:70:1a:8e:72:
                    e1:c5:d6:5f:8e:42:16:12:dd:e5:e4:b2:3d:9c:66:
                    0f:95:07:4f:b3:27:c5:3d:1d:18:d0:50:ab:98:ac:
                    e3:9a:37:f1:47:da:79:6e:a8:87:95:ee:4d:6d:67:
                    1d:7c:a5:d4:87:fc:e3:44:56:ef:9f:f0:93:b4:ff:
                    2d:cf:4a:c1:cf:f8:0d:f8:e6:9c:4f:91:d1:1a:70:
                    58:ca:fe:95:81:12:98:27:ae:2d:02:a5:ed:3a:51:
                    0e:7d:a3:3e:a9:9d:94:c5:70:49:0f:3e:97:2d:fb:
                    31:57:be:b6:f2:fb:2d:00:77:ad:ad:e2:ec:4e:98:
                    dd:a9:fe:1e:1c:41:34:44:6c:27:9a:d5:91:ee:f1:
                    23:6e:6a:19:cc:41:c8:81:8d:ad:4e:c9:9b:3d:3a:
                    ed:c2:a0:42:30:a4:77:3a:6f:e3:cd:9c:ef:4a:c9:
                    60:4b:ab:a8:05:07:d8:d0:3c:ed:8f:1f:18:3b:e0:
                    80:9e:6e:5a:dc:6c:93:ed:02:ab:8c:15:9a:0e:ca:
                    c2:24:ee:fe:d2:43:cd:14:78:25:76:3b:0a:e8:83:
                    3c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2A:BB:0C:47:E5:F1:C7:EF:AF:8D:38:28:9F:D6:45:79:93:8D:32
            X509v3 Authority Key Identifier:
                keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:4c:63:9e:3d:cf:7a:03:d1:86:af:e7:a4:75:a9:dc:bd:59:
         ac:02:f6:a6:82:b5:f6:cb:b0:89:c3:59:84:01:13:a9:69:4a:
         a1:bc:1a:87:b5:9f:48:10:91:b9:3f:d4:7d:11:a7:75:e4:6c:
         f6:a6:f3:06:9d:d1:ba:a7:52:74:5e:8f:79:97:ec:d1:5c:fc:
         a4:cf:d9:19:59:09:8d:52:15:30:b7:6c:0d:d9:80:4d:dd:28:
         53:0f:f7:4b:e6:bf:d7:73:3d:ff:61:19:bc:98:0f:6f:e1:f9:
         6f:1a:2c:4d:bd:7c:4f:00:c0:f4:af:e2:4e:f1:d3:bb:58:9c:
         ec:5b:69:ce:78:e3:eb:ce:2f:69:c6:cb:37:5a:6b:6f:40:3e:
         dd:94:57:d0:d9:1b:06:f1:98:f8:9d:ca:ec:8c:5c:8c:c5:98:
         d2:21:96:be:2c:df:64:52:dc:3b:a9:bb:e6:9b:4f:34:ec:19:
         72:de:09:8d:df:a1:9c:22:8c:37:1b:ed:12:0d:c1:69:e8:e0:
         40:a1:ba:13:c2:4b:b3:15:aa:33:d1:ea:53:c7:78:5d:82:ee:
         7e:0c:4f:7f:f4:86:bb:6f:75:c8:28:e4:7f:40:e6:d7:9c:3e:
         54:5a:fa:fd:24:cc:1d:33:44:3e:98:13:d8:50:9a:88:1a:9e:
         4d:50:2c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:58 2026 by rpki-client