Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
File:                     gWZdbPJtk3SE27RjN0PgZX7M3F4.mft (raw, json)
Hash identifier:          mJ30OjiugTjMlX8VxxsECUUYQk2cTQkjc5kC/e8zpqo=
Subject key identifier:   86:92:C1:DB:53:4F:F4:6F:59:55:BC:CA:16:FE:C3:9F:45:C0:86:BC
Authority key identifier: 81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
Certificate issuer:       /CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Certificate serial:       019E1EDA2C7ED7F78BCA46B8C854DB058562
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
Manifest number:          18D4
Signing time:             Wed 13 May 2026 01:01:15 +0000
Manifest this update:     Wed 13 May 2026 01:01:15 +0000
Manifest next update:     Thu 14 May 2026 01:01:15 +0000
Files and hashes:         1: 5st_HHpLD54WE6_4L8XNFgUjL_w.roa (hash: JHjXO9P1p0iqaGPwSoXPmKvMaRiV2yvxi6yn0kC2stg=)
                          2: gWZdbPJtk3SE27RjN0PgZX7M3F4.crl (hash: 2QKm03sIu6mW+IlmchA4MBgBQ4xwhddDUC2i1yYu57A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:2c:7e:d7:f7:8b:ca:46:b8:c8:54:db:05:85:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81665d6cf26d937484dbb4633743e0657eccdc5e
        Validity
            Not Before: May 13 01:01:15 2026 GMT
            Not After : May 14 01:01:15 2026 GMT
        Subject: CN=8692c1db534ff46f5955bcca16fec39f45c086bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:53:25:0b:17:3b:14:d4:43:ee:7f:a9:49:49:
                    82:2c:00:b3:67:50:3e:87:38:78:2e:88:b6:0c:d3:
                    c1:38:45:dd:64:0b:49:24:dc:12:50:bb:f9:c3:34:
                    ab:c4:25:c0:25:77:40:fd:71:23:99:7c:8f:1e:92:
                    c4:d7:ea:99:c0:15:88:51:47:db:96:e7:34:8c:b6:
                    57:86:00:bb:bc:81:03:d6:6e:74:5a:59:ab:bd:32:
                    21:39:13:9b:fc:d6:e4:9a:60:65:9f:cf:e1:40:3e:
                    2d:8b:f9:04:45:75:e0:2e:b4:3e:23:56:ba:f7:c3:
                    43:c7:8e:ee:3d:c0:62:06:6e:5c:da:08:04:15:fb:
                    43:98:cc:c4:88:2b:b0:0d:e8:8f:26:51:64:0b:1c:
                    13:2d:89:cb:67:29:48:89:a1:40:85:fd:67:75:c5:
                    58:cb:8d:f1:8e:7f:5c:6f:25:d0:0c:7e:56:9e:6e:
                    12:7e:af:47:1c:fe:34:ce:02:f4:4f:bb:4e:f0:fa:
                    3a:7e:e9:74:e5:a7:ca:0f:b2:34:ad:0c:65:fb:5b:
                    61:47:d3:f5:75:62:2e:94:9d:57:21:1a:a7:b6:c8:
                    d3:31:cf:e1:94:65:1c:0c:d1:7e:71:57:a6:df:f1:
                    12:2f:32:4f:56:81:14:2c:5f:94:d0:04:e4:44:3f:
                    e9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:92:C1:DB:53:4F:F4:6F:59:55:BC:CA:16:FE:C3:9F:45:C0:86:BC
            X509v3 Authority Key Identifier:
                keyid:81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:36:be:a6:7d:8a:b1:59:25:00:e5:db:b4:60:ea:76:6e:01:
         9d:ef:40:40:e1:2a:e7:3e:e1:b5:c9:f3:29:74:8e:c9:28:7a:
         81:4d:fc:24:2b:22:2f:8a:52:23:43:cf:b8:11:e0:3a:b1:b9:
         2d:fd:32:9d:4e:41:f1:97:da:60:c1:80:74:f1:48:df:b4:44:
         3b:16:a2:ab:68:c9:a2:05:52:02:5b:41:b2:c8:2d:87:65:cc:
         c8:d3:aa:05:e1:53:f9:3a:1c:d3:77:7b:1b:07:81:cb:8f:6c:
         6e:3d:0c:58:7d:94:bc:83:be:c1:e3:89:b6:7e:3a:59:7a:73:
         a0:3a:16:13:0e:a2:02:ad:c7:85:6b:57:82:d0:eb:98:92:70:
         f8:36:c6:2d:e8:fd:6e:c5:ae:b8:9a:58:bd:66:d8:bd:7b:a1:
         1c:7d:4a:2f:3e:9d:71:0e:c7:88:8b:47:c8:25:47:18:ff:c8:
         41:b1:88:ba:a4:d5:d2:51:56:20:d0:c0:9e:68:f1:fe:e8:7c:
         dd:50:3e:20:a4:58:11:ed:1b:60:e0:e7:f2:c8:fe:37:a5:f7:
         71:90:e2:45:a6:c8:61:e2:a4:e9:59:6a:ef:50:fd:3d:64:69:
         28:af:1e:8f:61:9d:58:09:9e:0a:e6:59:d9:c8:04:3d:62:70:
         e6:d7:34:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:11:40 2026 by rpki-client