Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
File:                     GPijrw2MDVHeLd0mWtVNq5e95s4.mft (raw, json)
Hash identifier:          JodN06+7U2AtjyqzuG9nu/QHtj2HKZJlFYvLF10VJJ0=
Subject key identifier:   7A:61:3C:11:22:22:28:2D:4F:C6:F7:72:6D:B9:18:35:26:30:3C:46
Authority key identifier: 18:F8:A3:AF:0D:8C:0D:51:DE:2D:DD:26:5A:D5:4D:AB:97:BD:E6:CE
Certificate issuer:       /CN=18f8a3af0d8c0d51de2ddd265ad54dab97bde6ce
Certificate serial:       019E20FFE40014ECBEEBB5ED63706202ED2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
Manifest number:          01B5
Signing time:             Wed 13 May 2026 11:01:41 +0000
Manifest this update:     Wed 13 May 2026 11:01:41 +0000
Manifest next update:     Thu 14 May 2026 11:01:41 +0000
Files and hashes:         1: GPijrw2MDVHeLd0mWtVNq5e95s4.crl (hash: 9GAMWuE2BfmsIHaMNc7XvYUTlPIhyiYImrBR9pv2uYI=)
                          2: q-3PkcuXvbxG2AJOGo6sUKyZOAU.roa (hash: a1DkrhlznASzhUP99TVl/s5bY4rDfTZ4JGlmLv4QaHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:ff:e4:00:14:ec:be:eb:b5:ed:63:70:62:02:ed:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18f8a3af0d8c0d51de2ddd265ad54dab97bde6ce
        Validity
            Not Before: May 13 11:01:41 2026 GMT
            Not After : May 14 11:01:41 2026 GMT
        Subject: CN=7a613c112222282d4fc6f7726db9183526303c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d4:1b:13:95:15:78:87:75:f0:27:5b:30:75:
                    58:ec:c9:9b:6c:02:f5:60:cb:56:06:54:51:c3:47:
                    cd:32:e9:bc:05:49:f2:e3:f4:6e:35:64:a7:76:64:
                    8a:60:98:47:07:a5:35:52:58:72:a7:01:c9:8e:73:
                    1f:48:2f:1d:b9:ad:f0:35:15:7a:07:26:27:1a:23:
                    90:4b:6a:f4:9c:18:fa:1c:60:0b:d1:a1:28:00:a8:
                    f7:d1:5d:ab:fe:f2:96:65:3e:b1:98:a6:bb:9c:34:
                    17:ed:a0:b9:3d:02:3d:a2:b5:95:7f:67:0b:35:49:
                    8a:c8:ae:7f:50:dd:01:5c:cd:20:1f:c8:9d:8c:2e:
                    ca:b9:5d:33:68:cf:42:9f:0b:06:03:05:b4:3f:1e:
                    81:ce:29:d2:e0:39:f5:c6:87:34:2c:b6:fa:cc:63:
                    e5:b8:bc:5b:6e:c9:3a:a6:f3:49:12:4d:4b:d7:5a:
                    a3:83:fb:30:44:13:2a:c5:90:e4:5c:5a:d5:bc:7a:
                    97:37:f5:cf:f7:a6:d5:bf:21:61:7d:49:f4:b3:ca:
                    f6:f1:3f:47:41:42:de:75:ea:76:f0:32:08:15:2a:
                    b8:dd:8e:fd:41:58:b6:ef:09:e1:5f:b0:25:71:9a:
                    ee:c9:f8:df:29:8e:46:fb:d2:5c:8d:c1:c6:a3:95:
                    c5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:61:3C:11:22:22:28:2D:4F:C6:F7:72:6D:B9:18:35:26:30:3C:46
            X509v3 Authority Key Identifier:
                keyid:18:F8:A3:AF:0D:8C:0D:51:DE:2D:DD:26:5A:D5:4D:AB:97:BD:E6:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPijrw2MDVHeLd0mWtVNq5e95s4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e53313-d587-492c-ad18-47637eb1ec49/1/GPijrw2MDVHeLd0mWtVNq5e95s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a1:11:2f:47:0f:ad:cd:7f:dd:e2:20:7e:c8:76:c6:35:4c:
         29:4e:22:1d:52:6c:7f:4d:1b:70:ef:42:49:3b:ec:f3:b6:5a:
         fe:d8:12:54:f1:92:c5:53:ec:84:00:59:d4:ee:55:7d:cc:73:
         79:5d:4b:9b:1d:97:c6:9c:0f:27:39:b0:5d:62:bd:1a:fd:24:
         0f:b7:5a:ac:f1:ae:1e:68:ec:ac:3c:52:1e:9a:ac:bd:b2:21:
         30:b1:b0:e7:c4:f2:51:df:05:27:b4:8d:2a:40:0f:60:31:cc:
         66:a9:0f:83:23:4d:96:1e:e3:5e:14:7d:3b:8d:6a:8e:2d:62:
         b3:78:05:2a:95:4f:14:23:94:a8:a0:e2:ce:4e:b3:7e:f9:4d:
         69:c7:2c:65:bd:99:34:b1:92:ea:f3:61:68:eb:eb:65:b6:bb:
         4e:4e:63:71:f3:40:d2:d1:fc:d3:7f:13:d7:98:44:98:ac:fc:
         a5:6c:e4:69:3c:d3:00:99:ba:ed:f7:1c:9a:2d:38:05:b9:39:
         01:9d:e5:2b:8d:b4:47:36:ba:27:01:df:cc:70:c6:db:c8:c5:
         fb:bf:e2:1a:7a:42:64:cc:4a:06:a5:c2:de:48:23:2a:f6:a2:
         4f:9c:00:4f:dd:89:89:2d:41:75:0d:49:7b:9d:2b:82:91:c1:
         41:0b:4b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:11 2026 by rpki-client