Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
File:                     GftWrckHHV6f2itmlDi5K_hj5Y8.mft (raw, json)
Hash identifier:          HCCzLWG0fu5Pv3lqFaZRZj4AC/8+dwa+7omSwPVhjzI=
Subject key identifier:   CD:92:1E:AA:84:2E:AD:F0:DD:04:3F:49:72:5D:75:E0:86:98:37:73
Authority key identifier: 19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
Certificate issuer:       /CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Certificate serial:       01A0DFF442A4514B92C2EFC8A1A9D4A460B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
Manifest number:          158A
Signing time:             Sat 26 Sep 2026 23:02:02 +0000
Manifest this update:     Sat 26 Sep 2026 23:02:02 +0000
Manifest next update:     Sun 27 Sep 2026 23:02:02 +0000
Files and hashes:         1: GftWrckHHV6f2itmlDi5K_hj5Y8.crl (hash: 2bjiNGdxyPAhaM+/IIMs9YXI73WqTM8Ecd5wn9mO2e8=)
                          2: PvoOGCPl9_uRABB0axn6ZoPjSfw.roa (hash: R0bL5Wz36hlUi6u7PbZBlbeTSW6yCz9pE1JTno5Jnd4=)
                          3: f2RzKPqHeeSwshGgaI03kVuo9ZY.roa (hash: vcuUb/xuMjhKt4KDFSNHCcpL3GkZRwfPEaVwfoajM48=)
                          4: v6DHuOuOQo5ADYQoffR2c_O6QS8.roa (hash: i6eWCZPdAHUsEhQJa4fw9gAODBNNYJr2pgzQXjsynVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 23:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:f4:42:a4:51:4b:92:c2:ef:c8:a1:a9:d4:a4:60:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
        Validity
            Not Before: Sep 26 23:02:02 2026 GMT
            Not After : Sep 27 23:02:02 2026 GMT
        Subject: CN=cd921eaa842eadf0dd043f49725d75e086983773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:47:c6:6e:63:b9:ac:26:6e:19:a8:35:66:9d:
                    87:90:82:01:b1:11:31:1c:b7:5a:10:fb:20:48:43:
                    fd:a9:8f:ea:d9:bb:83:99:b9:c4:e8:bd:28:d9:57:
                    70:ab:ec:fd:e6:f1:0a:7d:35:c0:30:31:b8:11:49:
                    e1:d0:90:e3:fd:90:d8:91:87:6c:2f:de:ac:c9:a5:
                    0a:fb:3e:89:b1:3f:c8:e1:b7:30:b5:bb:b9:1a:12:
                    94:01:04:4a:d4:f0:a1:4b:29:73:3b:d1:62:01:5d:
                    0b:1e:89:27:4a:bd:17:89:7b:8e:10:36:05:b4:d2:
                    7e:95:20:ae:1c:43:18:95:88:11:ae:9f:ab:94:f9:
                    c7:04:58:02:c9:d2:00:45:27:82:db:8c:a0:07:a2:
                    e3:95:27:d7:da:f0:a4:bc:dd:61:3c:8b:89:9b:b3:
                    d2:c3:70:ee:b4:35:89:2e:c1:09:8d:a7:8d:a5:4a:
                    f4:bc:5e:c2:48:92:52:d7:88:70:c9:1b:28:4d:38:
                    1f:f7:09:51:e3:45:4c:e5:75:4d:b9:f9:bc:d2:04:
                    0e:f4:75:ab:1d:be:76:36:f9:9b:a3:07:52:fa:95:
                    a7:ed:da:f6:45:ed:c9:0b:e6:4a:b5:b6:fe:93:4f:
                    42:10:10:4b:2f:b6:f5:f9:f7:e5:77:9e:13:04:3b:
                    12:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:92:1E:AA:84:2E:AD:F0:DD:04:3F:49:72:5D:75:E0:86:98:37:73
            X509v3 Authority Key Identifier:
                keyid:19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:1f:d1:a2:11:d8:9e:0b:89:4c:6f:8a:67:7f:ac:3d:54:e5:
         b4:ef:6b:ee:d8:1b:c2:02:40:a2:26:81:c5:ef:3b:d2:4c:25:
         15:8b:a1:77:b1:b7:f8:f3:e0:b3:e7:cf:2d:71:c0:04:c1:10:
         65:e7:d5:d9:2e:ee:82:92:53:53:d6:88:e4:55:1a:2a:65:08:
         99:59:07:37:d4:c7:6f:c3:8f:fc:b0:fd:f5:c5:24:1d:ed:c0:
         93:3a:b4:96:34:4e:f1:02:b2:69:c1:7d:af:ec:bc:d5:04:a5:
         ef:ee:95:ed:b9:15:6a:8b:30:bd:be:2e:9b:d5:29:52:63:78:
         ab:5b:45:0e:fa:1a:f8:9e:23:ac:2b:b4:ff:f9:1e:d5:4c:b0:
         19:d2:9f:d0:08:0d:ca:5c:dc:86:4f:bb:e8:9d:d9:02:96:ee:
         6f:df:d0:5b:86:39:cb:66:39:5e:14:3f:dd:4e:bd:a0:8b:0f:
         1d:32:eb:d7:e2:53:fb:76:30:c9:0c:78:6d:17:75:62:2a:34:
         14:c6:77:1e:e7:0a:bf:79:d7:81:a8:10:67:4d:4c:72:04:76:
         05:86:ce:e5:21:7c:79:91:02:0c:81:86:65:4e:41:ed:41:eb:
         83:e2:80:c8:95:55:f4:ad:1b:bf:d4:91:f4:9a:db:ce:1a:97:
         82:b1:4d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:11:17 2026 by rpki-client