Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
File:                     gPI_QpUEIDwYlzeiB05T8u_GT8c.mft (raw, json)
Hash identifier:          +TXy+W59OBCUu1cAbkYiGasAzswdb7TMcVfWTkVaPbY=
Subject key identifier:   35:0F:0E:21:E8:B2:FD:6F:5E:61:86:0B:88:BC:49:0F:29:0B:81:70
Authority key identifier: 80:F2:3F:42:95:04:20:3C:18:97:37:A2:07:4E:53:F2:EF:C6:4F:C7
Certificate issuer:       /CN=80f23f429504203c189737a2074e53f2efc64fc7
Certificate serial:       019E1F7EB6DC65595839D0F7165246AE4FB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
Manifest number:          03AC
Signing time:             Wed 13 May 2026 04:00:58 +0000
Manifest this update:     Wed 13 May 2026 04:00:58 +0000
Manifest next update:     Thu 14 May 2026 04:00:58 +0000
Files and hashes:         1: gPI_QpUEIDwYlzeiB05T8u_GT8c.crl (hash: bkgHVxQbbhwCzSc49wIYjsjnz2LEpNtce0P4vU4N4Ko=)
                          2: rng8GtvhW_7ZteA0FnuaZ2OXfUE.roa (hash: kHUVVB4FBTKzzPlqingwFv/L2jPUQKZj58gnh5dBOiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:b6:dc:65:59:58:39:d0:f7:16:52:46:ae:4f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f23f429504203c189737a2074e53f2efc64fc7
        Validity
            Not Before: May 13 04:00:58 2026 GMT
            Not After : May 14 04:00:58 2026 GMT
        Subject: CN=350f0e21e8b2fd6f5e61860b88bc490f290b8170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:11:b2:fc:4f:7c:6c:3b:25:3d:2e:03:ab:c8:
                    79:c8:65:de:5f:82:a5:df:89:51:43:15:61:da:0c:
                    4b:d6:8e:e0:70:56:47:7a:bb:2d:e8:a3:8b:b0:53:
                    01:3a:93:28:f2:f5:ab:ec:cf:9a:8c:aa:f3:fd:e4:
                    f2:c1:22:0a:cf:af:ca:7e:1d:43:03:90:7a:8b:87:
                    77:1e:b6:8a:d5:89:84:18:ea:46:8b:f8:4a:5e:fd:
                    56:50:e9:e6:a0:bb:63:8b:49:fe:f1:b1:2f:94:a8:
                    e8:4c:d0:12:86:84:5a:db:79:fc:c9:b1:72:93:74:
                    5d:87:d0:54:5c:d6:be:16:04:68:4d:61:8a:39:4f:
                    fb:93:da:78:25:fa:6c:2a:3e:dd:9a:e0:c7:05:53:
                    da:43:95:0d:dc:08:27:23:dd:da:2e:b6:90:66:b4:
                    27:6b:12:91:54:d1:cc:0a:51:d8:a7:db:8a:2d:b2:
                    4a:31:d0:e1:a8:ad:b5:53:87:58:27:05:95:5a:56:
                    d3:28:f6:19:20:88:73:49:45:72:26:c6:50:de:8c:
                    ad:72:2c:f3:75:4d:c4:0b:09:61:53:12:2e:ab:0a:
                    e9:3c:03:80:ba:02:cb:12:68:b7:9d:e6:5b:8f:6f:
                    52:2b:c1:74:32:71:f5:a4:87:74:7d:4c:2f:b8:6d:
                    61:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:0F:0E:21:E8:B2:FD:6F:5E:61:86:0B:88:BC:49:0F:29:0B:81:70
            X509v3 Authority Key Identifier:
                keyid:80:F2:3F:42:95:04:20:3C:18:97:37:A2:07:4E:53:F2:EF:C6:4F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPI_QpUEIDwYlzeiB05T8u_GT8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f79cbc-848d-4f3e-8dc1-d51141ccdc06/1/gPI_QpUEIDwYlzeiB05T8u_GT8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c3:b7:f6:58:a1:84:d6:06:4c:e3:d2:13:88:a4:8a:01:25:
         3b:f5:9a:0a:b4:50:31:b9:13:f7:ad:fe:52:92:2c:bc:71:43:
         ec:d1:7c:0c:4d:f8:7f:41:b5:95:0a:9b:cd:75:7f:87:73:15:
         c9:d5:6f:0f:8c:68:e0:6b:e4:d2:a5:e8:c3:77:c1:79:1f:89:
         5f:f8:61:0a:0c:75:39:a2:61:2e:eb:28:2d:92:8d:c7:a9:23:
         16:3c:9a:7c:94:9b:d3:e0:ee:0c:51:b6:6a:04:50:ae:05:e4:
         ef:75:3c:ac:b4:3d:71:5e:a9:6b:96:68:cd:d8:87:a0:06:66:
         2f:e8:9d:53:20:a1:89:17:98:b9:f4:9d:fd:cd:dd:e1:88:57:
         47:e8:c9:30:e0:94:cb:69:09:db:8a:94:cd:2e:8b:a5:7a:dd:
         f1:12:18:5d:f9:2e:c2:c2:8a:24:db:5b:ae:d3:d5:2d:ac:e6:
         51:31:71:7e:13:a8:5c:79:d7:4a:c4:7f:79:4e:38:83:5f:21:
         e7:25:dd:d2:89:cd:31:b0:7f:d7:54:d9:74:e7:f1:94:41:ba:
         60:a5:b1:79:bb:af:04:5b:1a:75:70:17:8d:2b:00:62:bb:1a:
         66:87:fa:a5:51:96:6e:53:54:9a:a9:a9:c0:ca:90:b6:14:b2:
         f1:52:0b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:53 2026 by rpki-client