Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
File:                     GUKBeimILUM78buOvFmy_yVugD8.mft (raw, json)
Hash identifier:          eH6AQDfBtDdNihah96uWLrxPRtekLZ1ZwGliT3tJFjw=
Subject key identifier:   C6:C0:9E:66:39:FE:EB:99:87:8B:B0:8B:C0:AC:B1:3E:B9:A2:B3:17
Authority key identifier: 19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
Certificate issuer:       /CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Certificate serial:       019D2583AC936FFDE11004F343BFA0EFBB47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
Manifest number:          0DBD
Signing time:             Wed 25 Mar 2026 15:01:19 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:19 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:19 +0000
Files and hashes:         1: 1AlRjHDHPerXd5ndCFjnN-RkvrM.roa (hash: ZLKTq9Q4KNpxNVoqpx9iO6C2WOOfE/x2d5mOP6ZbGXQ=)
                          2: GUKBeimILUM78buOvFmy_yVugD8.crl (hash: vAS7BS/EtW6PDcww3t4lnnGzy9sC+ZOiOOjDC10Dpb8=)
                          3: p93Yo32LiS86tKNIIJTFqRsTAc4.roa (hash: rKHZxZkQ1DlZz92HShvQ6VMO1LR9WfPRGqIp6geZ5io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:ac:93:6f:fd:e1:10:04:f3:43:bf:a0:ef:bb:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
        Validity
            Not Before: Mar 25 15:01:19 2026 GMT
            Not After : Mar 26 15:01:19 2026 GMT
        Subject: CN=c6c09e6639feeb99878bb08bc0acb13eb9a2b317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d1:62:e6:3b:04:20:ce:1e:7e:32:09:cc:f1:
                    8b:62:dd:bb:9a:97:5c:98:19:fd:8d:b4:45:9a:1b:
                    47:ed:97:dd:5d:4f:bd:58:e4:5f:99:7d:2c:2b:ca:
                    92:b9:07:35:fa:b4:a5:b4:0f:46:45:05:f9:96:98:
                    d2:e0:10:85:80:f7:e6:b7:ec:a8:ed:45:82:70:e6:
                    d0:61:17:19:56:db:2f:86:fb:26:25:b7:75:51:fc:
                    5f:e9:5b:84:93:bd:07:5e:50:2d:a1:86:d5:dc:c6:
                    75:d1:6b:13:94:a3:90:cb:18:fa:d1:e3:17:4f:96:
                    23:e9:a8:a4:c6:58:62:af:47:09:b3:48:1c:a3:8a:
                    d9:ee:a8:e5:4c:38:ea:c7:29:54:66:b0:4d:f3:4f:
                    01:5a:e9:6e:c6:94:3b:22:a9:c4:d9:ec:8e:41:7e:
                    ff:3d:88:e6:ac:dd:bc:23:19:5d:a7:41:c2:25:95:
                    78:c5:71:f6:6d:fd:30:64:11:30:72:48:36:bd:8f:
                    ce:cb:be:79:69:42:9f:f5:a5:68:72:8c:7b:71:33:
                    16:b2:63:eb:4c:45:fa:a5:8e:3c:47:04:bc:45:93:
                    53:e1:e2:d3:3a:1f:3b:23:1d:fb:d2:f3:3d:39:8a:
                    6b:51:30:27:d8:04:2d:9c:88:9a:7b:49:d1:f5:a7:
                    a2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C0:9E:66:39:FE:EB:99:87:8B:B0:8B:C0:AC:B1:3E:B9:A2:B3:17
            X509v3 Authority Key Identifier:
                keyid:19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:d2:d8:67:1e:d9:46:f9:f2:44:73:04:17:0d:d1:5a:d0:d1:
         cb:bf:42:cb:ec:f4:aa:86:dd:af:6c:6e:b0:3b:68:54:d2:f8:
         02:82:bc:d7:31:52:08:24:d1:9c:62:00:f8:5c:32:e6:cc:af:
         37:6a:fe:e3:8f:f9:2c:5d:3c:14:ec:d0:db:2d:dd:5e:a7:66:
         b5:f6:e5:d7:9f:e4:1b:27:3b:79:56:9e:0a:eb:03:bf:32:5c:
         44:5e:bd:1b:84:fa:34:a1:fc:a4:d2:06:ba:32:5b:fe:ed:b3:
         43:da:03:7f:6e:98:1b:80:8c:95:3c:60:b1:9b:b2:c6:75:95:
         d9:f1:a0:a9:e6:aa:2f:c8:ba:3c:a6:f0:49:77:bd:65:6e:3c:
         bd:59:76:a0:2c:3d:e8:da:7f:5e:6e:a7:b6:a5:b9:a7:4d:27:
         c6:c7:a8:1f:07:3f:f0:b8:1f:74:8b:93:98:28:28:42:cb:d6:
         d2:bb:93:c3:9a:c4:e8:2a:bb:75:ec:6d:77:cc:66:51:5a:8f:
         f1:d0:26:8d:f0:82:85:80:22:ff:c3:99:c4:fd:85:45:54:10:
         8b:9d:05:5c:55:0d:29:ea:7f:4d:49:05:20:1f:be:75:10:ca:
         a9:8c:98:fa:60:fc:a0:99:be:2c:41:09:76:60:ff:3c:6d:d1:
         fe:05:a8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:28 2026 by rpki-client