Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
File:                     GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft (raw, json)
Hash identifier:          X5+wDHxlWMf2Uu0hWVExbx7HLWQOktyIKWzg1uJ+0l8=
Subject key identifier:   79:20:2E:94:F8:AA:28:C6:55:FB:21:F8:48:DA:24:6C:3D:D1:3F:FC
Authority key identifier: 19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62
Certificate issuer:       /CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62
Certificate serial:       019D26282AA8A297D9656A5B26E032FC7595
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
Manifest number:          06D6
Signing time:             Wed 25 Mar 2026 18:00:59 +0000
Manifest this update:     Wed 25 Mar 2026 18:00:59 +0000
Manifest next update:     Thu 26 Mar 2026 18:00:59 +0000
Files and hashes:         1: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl (hash: mtNupYVkFW5GAfVA/HuSxF98skXoC/dGPVRcpE3RaFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 18:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:2a:a8:a2:97:d9:65:6a:5b:26:e0:32:fc:75:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62
        Validity
            Not Before: Mar 25 18:00:59 2026 GMT
            Not After : Mar 26 18:00:59 2026 GMT
        Subject: CN=79202e94f8aa28c655fb21f848da246c3dd13ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:be:ea:bb:93:fa:e3:dd:80:97:bf:db:0f:a0:
                    45:30:b6:06:38:67:1d:c1:d3:b3:99:7a:c4:b5:2d:
                    60:fc:a0:19:50:d1:8b:fe:b1:0b:61:29:2f:34:8d:
                    20:42:a4:61:18:f8:bf:71:83:97:b3:aa:87:41:4a:
                    f4:1b:b9:45:81:7d:29:28:3e:d1:40:b9:6d:74:51:
                    7c:50:3d:0d:a9:4e:f6:a8:ec:7d:94:92:56:e0:2a:
                    77:5d:b2:05:2a:f4:ce:74:4a:41:cd:ba:4e:67:91:
                    bb:7a:72:09:15:5d:7f:4c:a0:0b:7b:d2:92:13:21:
                    d6:b2:0a:65:7f:ec:40:36:21:e9:db:f4:83:f8:44:
                    a3:45:06:f1:e7:a8:4f:1f:ba:72:ff:7e:6a:e9:6a:
                    1c:7f:95:92:e9:8c:83:c2:d6:a5:84:1f:a0:4b:46:
                    f1:ee:3e:32:80:d3:47:b3:c4:25:47:73:e2:7f:38:
                    5d:d0:4a:db:55:12:8b:e5:89:ac:5c:6a:52:c2:a5:
                    c5:18:ca:c3:1b:d7:f1:54:3a:36:1c:36:3d:d0:e7:
                    3a:a3:71:b5:eb:f4:20:0e:56:83:27:09:7d:c7:03:
                    7f:3e:10:4a:dc:b8:bc:4d:35:10:b5:ad:b2:63:bb:
                    c8:91:ff:94:69:80:f3:e1:28:ca:6f:5f:3c:29:62:
                    9d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:20:2E:94:F8:AA:28:C6:55:FB:21:F8:48:DA:24:6C:3D:D1:3F:FC
            X509v3 Authority Key Identifier:
                keyid:19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ac:ff:1d:11:54:ce:77:e0:55:5b:36:b2:3b:f9:5a:a4:ef:
         46:72:eb:f2:a7:0c:2b:86:bd:6a:3a:3c:2a:7f:9a:18:8c:83:
         1a:e5:10:8e:e8:ca:30:cf:71:0b:4b:fb:08:7a:a4:20:24:7d:
         b6:1e:37:94:9f:cd:a7:98:a2:9f:95:24:08:b0:a7:32:6f:e9:
         95:8c:09:68:03:4c:e6:58:e1:61:c6:b6:c0:8a:29:06:cc:19:
         8a:4e:09:6a:b8:cc:91:4e:40:2c:13:d3:3f:08:80:50:91:79:
         35:16:b7:8d:cb:ff:7b:70:08:ec:8f:31:a3:e0:5d:f3:aa:b3:
         f5:ab:19:57:15:d6:0c:04:cc:fe:be:a8:3f:6b:61:6d:58:b2:
         28:ea:2d:9b:75:a7:ca:fb:9c:c9:d2:ed:58:78:d8:19:ef:62:
         97:54:aa:61:70:c5:a5:22:04:8f:1f:2d:c3:75:2d:aa:aa:f6:
         14:02:75:fe:9b:76:06:32:51:f5:b3:55:49:43:60:e3:b6:f4:
         d4:6c:48:0a:d9:d4:fd:72:c8:6c:45:d4:db:83:f3:38:fb:b9:
         f6:63:a0:53:0c:79:0f:dd:92:3c:1a:e9:95:67:f2:ac:72:da:
         1a:5b:44:e2:54:e5:8d:3b:8d:34:36:3e:7b:45:c9:c9:50:dd:
         7d:21:45:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----