Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
File:                     gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json)
Hash identifier:          OD6qkkz0yOCdJnrMUG9eNsTRjMtdF3VcuBvkM/ZhRaQ=
Subject key identifier:   09:81:F7:28:F0:03:EF:2F:6D:25:FA:E9:A9:31:61:22:AE:4B:D0:AF
Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Certificate issuer:       /CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Certificate serial:       019E1F113F984176B9D77038AA3B444C68A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
Manifest number:          1037
Signing time:             Wed 13 May 2026 02:01:24 +0000
Manifest this update:     Wed 13 May 2026 02:01:24 +0000
Manifest next update:     Thu 14 May 2026 02:01:24 +0000
Files and hashes:         1: KSQvhRpWm210zaiJFJOFKsXWoaM.roa (hash: LSleA0VuES4q3u0nWIFwZayUEirvzQtEPVPAFoUczQk=)
                          2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: dVmOp+HjsOWlV54CmC4rGuBLao0xiWn1DD65VZ3RP8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:3f:98:41:76:b9:d7:70:38:aa:3b:44:4c:68:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
        Validity
            Not Before: May 13 02:01:24 2026 GMT
            Not After : May 14 02:01:24 2026 GMT
        Subject: CN=0981f728f003ef2f6d25fae9a9316122ae4bd0af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:55:bc:8a:87:1e:ba:dc:86:90:c5:fa:8a:8b:
                    d0:8e:c8:b0:f7:5d:39:3d:8a:81:76:e2:62:45:4f:
                    5a:67:91:a7:90:ab:cf:22:17:1a:43:9e:e2:58:a2:
                    be:b8:8a:86:7e:a9:6d:61:6f:9e:7f:d3:82:aa:9a:
                    78:5b:b5:01:b1:50:68:3f:a0:f2:38:6a:7c:da:71:
                    88:43:7e:4a:0e:81:cb:a5:08:6a:a7:00:87:7e:78:
                    8f:17:f0:5f:59:91:c8:e0:11:cf:c4:ae:de:a9:10:
                    de:e0:c2:ad:2f:10:45:1d:61:53:95:0a:2b:30:2f:
                    15:70:62:72:67:8e:a3:c6:6e:32:85:30:66:cf:e2:
                    74:dc:7b:a1:d1:d9:6c:c7:b0:6d:38:90:b7:60:a9:
                    d3:8b:48:5d:c4:14:3a:dd:75:f2:68:fc:39:a0:2f:
                    9b:23:28:77:d8:fa:89:4d:b8:1d:28:29:26:8e:ce:
                    b7:77:8e:7d:0c:da:c8:c0:dc:27:d5:fd:32:93:e0:
                    c3:7f:3c:d1:24:f1:e4:a9:05:69:49:df:49:44:0e:
                    e0:2d:32:ff:6c:39:31:92:4a:a5:87:a3:22:70:0e:
                    18:35:5c:ff:a2:f1:41:7d:a1:6a:92:33:de:82:8d:
                    f4:c6:34:79:82:3c:c3:0b:82:07:64:26:26:38:44:
                    aa:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:81:F7:28:F0:03:EF:2F:6D:25:FA:E9:A9:31:61:22:AE:4B:D0:AF
            X509v3 Authority Key Identifier:
                keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d6:b3:bc:e1:f0:e8:1f:dc:0a:19:a6:e7:2e:ec:2d:14:70:
         62:fd:af:68:64:02:7b:b7:0b:c2:d9:5b:fb:3b:7e:a7:53:c3:
         07:bf:22:37:91:fe:3b:11:03:53:fa:b6:dd:6b:32:3d:de:67:
         29:ca:05:5d:d7:f2:d5:8a:cf:6a:74:eb:f6:af:cb:34:83:46:
         56:68:a3:2b:3a:4d:1b:c1:57:78:18:a6:2d:75:91:bc:c4:fe:
         81:9a:e0:8a:70:3f:4c:82:fd:aa:cd:d5:f2:b9:81:b0:a4:76:
         5c:b4:5c:6d:49:00:0e:dd:29:4e:df:1e:51:e5:ac:2c:44:bb:
         11:5a:69:65:16:ff:e9:5e:d0:74:9f:50:8c:7e:d2:3e:83:f8:
         81:af:bd:48:86:ae:25:6d:cf:b5:ec:9d:d9:5a:d2:8a:21:7a:
         66:a7:c8:4c:64:2f:18:5d:59:44:f6:44:e3:bb:c0:79:a7:1a:
         23:60:60:68:3e:c5:b5:5d:9c:c2:e4:b2:da:f3:a0:45:7f:09:
         ea:1a:62:4d:7c:e6:2e:d2:79:2c:d0:42:f9:06:7c:a2:61:34:
         91:e6:63:ec:c5:60:78:ff:b2:49:2a:3c:88:1c:d7:58:29:29:
         0f:e1:0c:b7:31:c9:43:b1:3c:94:51:91:2a:67:56:13:51:78:
         13:fb:ec:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:52:04 2026 by rpki-client