Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
File:                     GtwAk8WviUz1ILWTbjCyFQkN6fg.mft (raw, json)
Hash identifier:          sGq2oZW4F5PoTpF8lpH2315cbGOQCRGYEeYIwprR0Rg=
Subject key identifier:   2E:A9:84:DB:01:9C:C9:E1:A5:D5:EC:F4:77:4D:BE:95:39:59:32:3B
Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
Certificate issuer:       /CN=1adc0093c5af894cf520b5936e30b215090de9f8
Certificate serial:       019E1F4800D8D3779BADB3218CD996851861
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
Manifest number:          10CC
Signing time:             Wed 13 May 2026 03:01:12 +0000
Manifest this update:     Wed 13 May 2026 03:01:12 +0000
Manifest next update:     Thu 14 May 2026 03:01:12 +0000
Files and hashes:         1: 22DYdmOvCLM948EoyfkUAxlACZo.roa (hash: kciKnNjBgHwlkB4sn576VFqmz6xPQ5AioU9khsx436M=)
                          2: GtwAk8WviUz1ILWTbjCyFQkN6fg.crl (hash: 8CjWexXrLKybT7tJ+tvl4veuiTJvSR6EMTDwW4YojdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:48:00:d8:d3:77:9b:ad:b3:21:8c:d9:96:85:18:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8
        Validity
            Not Before: May 13 03:01:12 2026 GMT
            Not After : May 14 03:01:12 2026 GMT
        Subject: CN=2ea984db019cc9e1a5d5ecf4774dbe953959323b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7d:52:51:b6:72:17:21:f4:8f:d9:c1:a1:f1:
                    28:68:e4:2b:93:6c:71:f7:6e:f3:7e:e1:65:9c:b7:
                    29:d1:5c:97:96:4f:75:66:81:db:1a:f3:9c:db:bc:
                    5f:13:7c:fc:7a:ad:df:9e:3f:3a:39:e1:8a:30:21:
                    bd:fa:91:e4:1c:4c:62:f4:34:ff:0d:7a:43:0a:2e:
                    7f:19:3a:08:07:78:67:a9:fe:40:5f:93:99:df:a7:
                    3a:c0:3f:2c:b0:b0:3d:00:4c:e0:67:f9:50:76:e7:
                    fe:07:5f:36:7d:1d:fd:e3:81:49:51:02:fc:5d:10:
                    5a:ef:74:e5:94:20:3c:9a:21:a8:7c:41:42:4a:24:
                    88:b0:2e:14:1f:91:9e:22:c1:45:85:a4:5a:b8:8c:
                    4c:14:6a:e7:a7:77:a4:55:69:c9:39:70:f0:56:d4:
                    72:a7:d4:b9:cf:a8:5f:61:69:cf:01:ae:1c:33:9f:
                    15:6e:fd:de:ed:e6:16:87:d4:1b:31:1f:62:76:a6:
                    8d:73:3d:e5:15:c6:54:d6:86:8e:af:f2:58:fd:f1:
                    54:ec:fe:93:76:68:a5:42:55:30:d0:b8:eb:18:06:
                    d5:3e:fb:f5:bc:9a:60:aa:e9:dd:2e:57:8c:65:b7:
                    7f:b7:b1:ba:78:37:44:a0:e6:d8:ff:0d:c5:51:15:
                    8a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A9:84:DB:01:9C:C9:E1:A5:D5:EC:F4:77:4D:BE:95:39:59:32:3B
            X509v3 Authority Key Identifier:
                keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:59:a9:af:5e:d3:18:f3:0e:ba:5a:fa:72:f6:55:75:ff:bd:
         d7:e0:55:01:4a:af:12:d4:af:62:a6:e3:47:39:f2:8f:1f:66:
         1c:05:c3:b4:5a:54:63:46:e7:0c:f6:ba:96:7f:d1:45:11:4c:
         95:b7:e4:90:33:11:76:94:32:c1:aa:d7:a7:eb:07:5f:1b:28:
         b5:62:cc:9d:61:c0:67:5c:d3:8c:d2:69:6e:6a:1b:69:8a:ff:
         49:ed:bf:a1:21:44:d4:33:85:2d:d3:54:2f:b4:87:b5:b5:79:
         19:5a:27:6c:6d:67:3d:f2:f0:79:30:92:0a:82:20:21:74:2f:
         5c:e9:fa:3d:b5:ed:bc:7b:b3:c1:de:c6:73:9f:35:c5:a1:d9:
         60:3e:87:e0:91:f7:b2:0b:ca:0f:fd:30:24:cb:61:6c:8d:95:
         cd:37:dd:ba:5e:de:84:67:d9:2f:ba:a3:29:21:ae:7d:85:02:
         18:cb:7a:24:3f:40:84:1a:f5:79:0b:14:87:d0:c1:b6:5f:03:
         6c:81:ed:bd:aa:05:be:ed:5b:49:de:d5:15:4c:9c:c4:45:c9:
         65:fe:90:29:69:e5:d7:61:2c:8c:85:52:38:8a:f7:c3:e2:8c:
         bc:9d:94:01:98:25:54:24:11:56:04:7f:81:56:77:c1:10:99:
         c2:5c:f3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:08:50 2026 by rpki-client