Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
File:                     GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft (raw, json)
Hash identifier:          1ZYbCuItxHaKh4RIJv3LcvfBVFZb0nvNwW0l0IzBjYA=
Subject key identifier:   DB:8B:B2:5F:EC:38:A4:56:0E:0D:D2:F6:4C:24:98:73:B5:DE:DC:3D
Authority key identifier: 1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F
Certificate issuer:       /CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
Certificate serial:       019D9962EB3F89EA50767F61087EE1FAC525
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
Manifest number:          138F
Signing time:             Fri 17 Apr 2026 03:01:29 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:29 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:29 +0000
Files and hashes:         1: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl (hash: XiXzNjYTVoWv6F2vBOrCzzPMCNzrknevooP21aOVP1k=)
                          2: VF3A5uqK3baTRWsNVPe20tVkhMU.roa (hash: oCRuLVCgV+aXZr+hRj4Ct4VJ7B5cjA1VYigwMKDagmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:eb:3f:89:ea:50:76:7f:61:08:7e:e1:fa:c5:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
        Validity
            Not Before: Apr 17 03:01:29 2026 GMT
            Not After : Apr 18 03:01:29 2026 GMT
        Subject: CN=db8bb25fec38a4560e0dd2f64c249873b5dedc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2e:8b:70:07:f6:f0:30:bc:1a:e6:7e:73:a2:
                    5c:dc:1b:a2:2d:86:c5:bc:33:92:04:4e:a0:4f:ab:
                    1c:26:76:da:27:29:7a:30:34:9b:aa:ac:a4:65:0f:
                    28:4c:03:ca:8a:ac:e7:3a:38:2d:5d:fb:d6:19:62:
                    24:71:cc:91:be:3a:20:ca:d7:92:b6:6e:fd:4b:7d:
                    9b:8f:71:40:d3:4c:c0:e1:d0:bd:03:e2:5e:83:a7:
                    ec:02:8d:d1:d4:1b:a4:e6:70:7c:de:7e:d0:0e:57:
                    0a:cf:8e:d2:71:0d:b0:b2:8f:8f:03:36:93:cc:ef:
                    48:07:bb:29:10:4f:92:17:e4:f0:b1:43:71:e9:02:
                    0b:34:3a:3f:12:27:00:e0:3c:80:88:ab:a1:74:26:
                    6a:65:9c:9d:9c:1e:2a:25:8e:fe:c4:40:44:f6:e3:
                    4f:e4:51:3d:76:44:ea:85:8a:91:ee:84:fe:4c:a9:
                    35:f4:6d:8f:d9:71:c5:de:36:2c:9f:f2:30:f7:8d:
                    01:55:db:d0:ab:4e:b9:98:df:6d:e1:25:a4:b1:d2:
                    10:52:ea:1e:6d:24:ae:16:a3:ce:32:7b:39:e2:74:
                    0f:e5:c5:af:27:8a:1a:b1:63:9c:64:59:82:2b:88:
                    8b:69:cf:2c:53:b7:1a:b4:61:d7:cd:bf:aa:62:9b:
                    9a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8B:B2:5F:EC:38:A4:56:0E:0D:D2:F6:4C:24:98:73:B5:DE:DC:3D
            X509v3 Authority Key Identifier:
                keyid:1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:88:f9:94:85:41:1b:fc:24:1c:87:db:c5:77:78:f9:bd:16:
         13:e6:b9:63:2f:ad:37:66:1d:c4:93:19:a7:b0:93:fd:62:c2:
         a4:ed:31:ab:95:ba:c6:f5:c8:9b:25:97:ae:51:c1:43:7c:5e:
         a4:f9:72:a1:3f:05:9b:a0:b9:32:53:4b:97:b4:db:da:9a:68:
         31:6f:3f:16:cc:c1:d2:13:65:7d:60:80:5f:21:ac:84:05:c7:
         e7:41:f7:01:13:ad:cb:c6:de:c7:9a:ac:3d:22:7f:be:77:11:
         9d:ef:d1:81:18:72:ba:ee:24:e2:0d:c6:f7:26:8e:fb:b2:0a:
         d2:05:32:7c:96:de:15:df:22:5b:1a:82:1e:a9:48:74:e3:d5:
         ac:2a:c9:46:e6:8e:3c:67:bf:1c:51:23:1f:52:14:a3:76:fb:
         f7:90:8d:c4:94:ca:73:7a:b4:ed:b7:a1:46:6d:62:d8:5e:21:
         0c:13:c2:7e:85:71:f8:2a:7c:f7:a7:58:9e:2f:1a:86:28:7f:
         21:b3:d7:e5:b3:ea:fd:76:c5:e8:d8:6d:86:7b:88:3e:57:55:
         4e:61:aa:32:b6:cd:28:ee:55:8f:a2:af:92:a5:05:30:43:b2:
         f3:eb:1e:4d:4b:4d:a3:59:57:93:6b:32:cb:7c:46:6d:eb:aa:
         db:04:95:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:40 2026 by rpki-client