Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
File:                     GvzYfmH5F2XCwQAgQUG1lNMsey4.mft (raw, json)
Hash identifier:          1WDfojkQB+joyMJ6mcKyBbV7PZNYCcc7qzUmkSYPrH0=
Subject key identifier:   A7:B9:2A:96:C2:A0:F2:38:97:0E:36:2D:68:EA:34:8F:21:BA:8A:77
Authority key identifier: 1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
Certificate issuer:       /CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Certificate serial:       019E21DACAB3D86084572489BBB9997D94F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
Manifest number:          0431
Signing time:             Wed 13 May 2026 15:00:47 +0000
Manifest this update:     Wed 13 May 2026 15:00:47 +0000
Manifest next update:     Thu 14 May 2026 15:00:47 +0000
Files and hashes:         1: GvzYfmH5F2XCwQAgQUG1lNMsey4.crl (hash: ZB07v5+jxBhA11zWZ1GuZc988cVQU+MxpejI9HIs420=)
                          2: tW75xisNBw44jYns_Y3WtNvzf4M.roa (hash: 1hevvajdIYdR4n3mWoJRqh1PcCq2VWdl5U2HS1l2lMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 14:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:da:ca:b3:d8:60:84:57:24:89:bb:b9:99:7d:94:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1afcd87e61f91765c2c100204141b594d32c7b2e
        Validity
            Not Before: May 13 15:00:47 2026 GMT
            Not After : May 14 15:00:47 2026 GMT
        Subject: CN=a7b92a96c2a0f238970e362d68ea348f21ba8a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:13:7e:1e:1d:a6:42:83:38:f3:8b:4f:01:08:
                    f9:12:51:96:e0:c2:bd:5a:9b:66:0c:3a:a5:78:cd:
                    7b:8a:a8:82:08:23:b4:f1:a1:d7:93:e0:15:ce:73:
                    69:8b:dd:26:2a:d6:03:0e:1b:ad:00:c6:fc:6a:b3:
                    cf:2a:d9:ab:8c:17:43:76:b2:4d:c3:48:f5:d9:09:
                    1c:86:c5:0a:a7:af:f1:b4:1f:a3:9e:2c:cb:f4:e3:
                    51:74:d1:76:17:c4:aa:d6:53:0d:ab:f4:b9:49:63:
                    16:7f:4c:c9:0f:0d:50:cf:93:b2:d5:87:ff:34:93:
                    57:8c:f7:ea:82:69:6f:77:d8:cb:e3:1d:12:ae:b0:
                    81:79:dc:03:b1:7c:ce:4f:75:c9:c1:90:bd:d4:0f:
                    8e:73:35:f5:46:ae:12:e6:51:1a:3b:63:8d:6d:4b:
                    1f:65:e4:0f:81:61:17:cd:f3:d8:0d:52:ab:dc:be:
                    6c:7d:19:fc:95:cb:9a:b0:c6:0c:15:b3:3b:78:35:
                    c3:33:9b:3c:69:4d:df:6b:d4:d1:02:7a:26:86:8a:
                    4f:cc:19:82:a3:03:b5:1c:65:5e:7e:ee:6c:88:06:
                    1e:36:84:60:5e:c7:1b:8c:18:34:63:f3:cb:8b:dd:
                    84:51:fe:af:3e:a3:12:32:2c:e0:d3:ca:30:23:33:
                    83:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B9:2A:96:C2:A0:F2:38:97:0E:36:2D:68:EA:34:8F:21:BA:8A:77
            X509v3 Authority Key Identifier:
                keyid:1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:78:ff:36:e7:b4:00:6e:5c:c9:8e:1a:64:ef:0d:fe:de:9a:
         76:47:ab:d0:8d:77:95:44:37:64:d0:33:38:2d:72:34:f5:36:
         e8:9d:4e:fc:0a:54:b1:0c:39:ff:35:c8:ef:33:6f:68:20:a2:
         1f:d7:8a:89:5c:1b:67:c8:d5:dc:0a:0e:de:eb:7f:ff:19:8b:
         0c:ed:0f:27:6f:ff:6d:ac:9f:27:4b:64:4a:0d:5f:a0:ee:2e:
         e6:09:e2:28:0d:32:52:2f:60:69:00:4f:c7:09:ea:90:f9:21:
         3c:80:12:3b:9f:5e:c2:ab:25:c6:24:f1:61:95:66:6d:1f:cc:
         12:86:e8:b6:d3:ea:74:92:33:29:bc:da:96:3d:a6:73:2e:f4:
         f8:9d:1a:e4:f5:43:cb:4a:ff:2c:18:4c:00:bd:17:cf:05:ec:
         9b:5c:e7:48:32:89:62:cc:a9:50:3d:57:9a:87:74:1f:b2:49:
         d6:de:eb:07:f6:ff:5a:2a:08:8a:ae:2a:b4:85:a8:b5:49:6b:
         2b:b4:3f:83:0a:dd:2c:ef:ac:81:4a:c4:ca:19:50:92:da:1d:
         cc:04:ab:ca:d9:42:ab:44:7b:c1:75:91:04:e5:1f:10:54:72:
         d7:77:f7:43:17:8a:21:bb:a3:b2:04:eb:46:b5:4b:d5:14:1d:
         0e:eb:3f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:49:01 2026 by rpki-client