Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
File:                     gIBkPxusC6RJkhdbr7bFlTxz3iw.mft (raw, json)
Hash identifier:          xki6ID+2/a315qWmvgShQFKLErLfiHjZ4NzBQHr1hcg=
Subject key identifier:   68:CA:4C:B7:9E:60:AB:A1:45:02:E4:F6:25:4A:F7:94:4F:68:96:71
Authority key identifier: 80:80:64:3F:1B:AC:0B:A4:49:92:17:5B:AF:B6:C5:95:3C:73:DE:2C
Certificate issuer:       /CN=8080643f1bac0ba44992175bafb6c5953c73de2c
Certificate serial:       019D9A07386BB1EE3AD4330FB02FCA53D766
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
Manifest number:          0181
Signing time:             Fri 17 Apr 2026 06:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:57 +0000
Files and hashes:         1: gIBkPxusC6RJkhdbr7bFlTxz3iw.crl (hash: RB4EW0D4Bys4w6trk7rFRRlcBQlZb7yjnoiv7pa4PZU=)
                          2: yeVF8Df3VPcnjSBNmqzoVDfx_BA.asa (hash: q/aLmgYWUuh1D94V+T+v2Y5wHbMtBtOfdm/5xzlYGS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:38:6b:b1:ee:3a:d4:33:0f:b0:2f:ca:53:d7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8080643f1bac0ba44992175bafb6c5953c73de2c
        Validity
            Not Before: Apr 17 06:00:57 2026 GMT
            Not After : Apr 18 06:00:57 2026 GMT
        Subject: CN=68ca4cb79e60aba14502e4f6254af7944f689671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d1:b2:c9:2f:97:b5:5a:03:80:95:4d:af:2a:
                    a2:8c:4e:49:eb:7e:55:ff:26:bc:a6:6e:98:82:57:
                    ae:0a:d0:8a:18:24:f6:90:b6:0f:f2:4c:70:cd:d9:
                    ae:5b:ea:0f:54:f5:33:7f:63:bb:df:97:37:82:aa:
                    ba:99:1a:1c:ee:9e:33:7e:6b:01:6a:3b:c5:54:71:
                    57:d4:3f:19:14:9a:55:b0:1d:6e:1e:6e:1f:8c:15:
                    b4:45:7c:b2:fc:56:5e:65:9a:61:56:28:29:1d:be:
                    a8:c5:87:78:82:e9:30:ed:7b:cd:6f:33:77:76:5e:
                    e2:86:2c:26:16:0c:8c:39:df:0b:3c:95:7b:cd:48:
                    4b:9d:38:d2:66:3c:c2:7c:f8:e0:2a:e9:09:3e:70:
                    e5:c0:d9:fa:4d:7f:de:38:cd:ba:83:d1:a9:42:aa:
                    84:4c:31:43:7d:f5:0c:44:a7:43:0d:5b:c9:41:de:
                    c6:13:7f:15:fa:23:6f:f6:23:59:68:2e:4c:82:3b:
                    16:00:24:c8:98:93:bf:90:b3:49:fb:9a:83:19:3e:
                    db:c8:89:df:2d:67:eb:18:05:a7:d3:0a:c5:6e:05:
                    84:83:15:10:0d:8a:34:bc:19:5b:b9:51:e2:aa:4d:
                    a6:eb:e0:de:8e:c8:45:64:9a:d3:aa:cd:e1:8b:ca:
                    55:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CA:4C:B7:9E:60:AB:A1:45:02:E4:F6:25:4A:F7:94:4F:68:96:71
            X509v3 Authority Key Identifier:
                keyid:80:80:64:3F:1B:AC:0B:A4:49:92:17:5B:AF:B6:C5:95:3C:73:DE:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIBkPxusC6RJkhdbr7bFlTxz3iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/964179-c5e8-48c0-8b69-1492a571c1f3/1/gIBkPxusC6RJkhdbr7bFlTxz3iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:52:34:0a:77:75:b4:c4:cc:79:19:c3:58:ea:01:1a:53:65:
         c5:f1:08:57:21:72:c9:c1:64:d7:fa:da:22:5d:11:38:3c:8a:
         9c:86:a1:4b:cd:53:21:10:76:60:8a:a6:ef:88:6e:62:6f:b4:
         58:30:4c:42:a3:d3:e8:08:eb:5b:bb:9b:01:54:26:86:b7:e9:
         1f:ae:bc:59:91:27:90:3e:82:01:8f:8a:d8:f8:18:b8:22:53:
         9f:41:35:31:8c:a4:cd:11:60:13:62:97:1e:a1:9e:f5:3e:e1:
         6d:fb:ab:1a:61:ab:df:6e:64:1a:f9:7d:a1:1b:14:33:c9:e8:
         b5:b2:01:63:93:76:5c:71:47:6e:d2:54:89:08:fe:89:75:26:
         ff:fe:d2:f4:13:28:db:b6:fe:96:15:96:2a:78:5e:22:0c:da:
         ea:ab:ee:9b:59:53:d4:ba:2e:9d:ab:7b:c5:bb:78:38:cb:3f:
         39:9f:15:ca:f4:ce:bb:2a:8c:55:87:a0:28:8d:02:dd:b7:30:
         ce:b9:9f:f2:f8:2f:22:d8:1b:08:dc:6a:ba:f6:09:64:66:3f:
         a4:f8:a0:6a:75:43:5b:f0:bf:e3:b1:3d:5c:87:eb:6c:85:b5:
         dc:76:33:35:3f:39:67:6f:4f:70:cc:f3:90:e5:19:b0:db:cf:
         44:86:48:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:32:14 2026 by rpki-client