Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
File:                     GCJBwqTNGwi_W6VBLUkcScjrh40.mft (raw, json)
Hash identifier:          4HrhUxIPC+R8l2S4lznh4pAOOoxCufZFhseRvJ7VFTg=
Subject key identifier:   1B:F0:54:7C:B9:C5:9F:A1:E6:1D:B5:9A:51:2A:7A:1F:17:C1:C9:37
Authority key identifier: 18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D
Certificate issuer:       /CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
Certificate serial:       019E1E6CBC3CD7DD612AECA9038E04A185F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
Manifest number:          05EC
Signing time:             Tue 12 May 2026 23:01:42 +0000
Manifest this update:     Tue 12 May 2026 23:01:42 +0000
Manifest next update:     Wed 13 May 2026 23:01:42 +0000
Files and hashes:         1: GCJBwqTNGwi_W6VBLUkcScjrh40.crl (hash: AN6pjz4HE9b1RNnSgJnwn80edXWCjVkPxehtUT4fe3U=)
                          2: PeoNHXokHMDq2XG5umTEZp1JMkI.roa (hash: knYWEfrEJBE1/OQa/3XQPBybR/ExGW5sYDHbUzsYQWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:bc:3c:d7:dd:61:2a:ec:a9:03:8e:04:a1:85:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
        Validity
            Not Before: May 12 23:01:42 2026 GMT
            Not After : May 13 23:01:42 2026 GMT
        Subject: CN=1bf0547cb9c59fa1e61db59a512a7a1f17c1c937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ae:a6:98:9c:18:d4:bf:c9:87:5d:d1:c4:6e:
                    1f:b8:76:70:d9:49:23:1f:ed:1b:d0:fe:c2:54:44:
                    4a:96:21:d1:b5:fa:db:ca:62:90:7f:73:bc:e4:1f:
                    6c:b3:ab:99:d8:8a:10:2b:84:5e:f5:f2:80:1a:cb:
                    b6:95:89:7e:5d:2f:78:06:22:69:c1:4c:eb:ac:f9:
                    1c:26:08:f9:4d:06:dc:85:7b:a1:25:8c:6a:dd:29:
                    ce:8e:54:9b:aa:17:41:36:9f:75:a2:0d:80:66:18:
                    b2:7d:8a:8e:cc:d5:58:b1:a4:02:fe:1a:bc:ae:89:
                    f8:28:e6:84:9f:38:27:92:e2:4d:96:b9:b4:2a:2d:
                    51:54:4e:29:a8:2c:c6:0f:4d:f4:78:a8:c1:12:34:
                    22:b0:2e:e0:82:58:ca:1c:e3:8a:48:2c:49:5d:23:
                    7d:d7:88:4e:60:15:02:0b:60:27:04:ab:cf:84:6a:
                    b5:5f:81:e3:af:2d:de:21:78:4b:f6:9f:da:0f:ed:
                    16:41:12:5b:91:2e:91:21:c6:1b:fb:4c:c7:2d:4e:
                    6f:73:aa:8f:a6:41:a9:a6:cc:82:ff:02:20:83:6e:
                    3a:cd:cc:41:59:1b:15:93:f7:85:d0:d6:59:29:4b:
                    24:e6:53:96:65:dd:aa:83:d1:2e:63:77:03:f0:e1:
                    a0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F0:54:7C:B9:C5:9F:A1:E6:1D:B5:9A:51:2A:7A:1F:17:C1:C9:37
            X509v3 Authority Key Identifier:
                keyid:18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:1c:11:5f:6b:5d:20:54:a3:04:1d:62:9e:b1:cc:c6:ad:39:
         fe:15:b5:06:18:ac:c0:5b:86:88:08:8f:38:91:56:22:8b:70:
         71:00:51:6d:ca:73:bd:e7:4a:3d:33:70:29:4e:c8:d2:83:d2:
         a1:0c:42:7c:23:fc:14:9e:c0:fe:18:be:28:1b:b7:93:8b:0b:
         b0:10:a4:86:8d:18:0d:69:11:e4:a7:39:15:77:9a:19:9d:e0:
         81:48:62:15:8a:4c:0a:03:7b:77:3a:42:b6:7f:e8:30:7b:5b:
         e6:e6:d6:56:22:c9:25:16:d9:b2:b4:89:c0:e1:58:ee:0c:06:
         30:fe:92:f8:6c:2c:1b:a7:25:a2:fd:57:8d:80:ab:41:18:e0:
         24:c9:a3:f1:fd:ba:dc:00:da:8c:96:d4:63:90:99:a9:fb:25:
         12:c9:51:b9:87:7c:0b:21:e9:df:a8:e7:b7:ef:09:02:2f:98:
         7f:c5:6f:98:1d:54:6f:98:40:40:d7:f2:77:4f:4b:f5:be:68:
         43:77:a6:e8:d2:02:7d:e0:45:10:13:5a:72:bd:52:f2:9d:63:
         85:8a:a0:0c:15:8c:76:d2:51:b0:24:51:ea:51:ef:ac:59:58:
         9c:22:de:84:1a:e8:6d:24:eb:f6:c3:9a:0d:cb:c6:4a:07:53:
         68:26:09:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebLw8191hKuypA44EoYX3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MjI0MWMyYTRjZDFiMDhiZjViYTU0MTJkNDkxYzQ5Yzhl
Yjg3OGQwHhcNMjYwNTEyMjMwMTQyWhcNMjYwNTEzMjMwMTQyWjAzMTEwLwYDVQQD
EygxYmYwNTQ3Y2I5YzU5ZmExZTYxZGI1OWE1MTJhN2ExZjE3YzFjOTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK6mmJwY1L/Jh13RxG4fuHZw2Ukj
H+0b0P7CVERKliHRtfrbymKQf3O85B9ss6uZ2IoQK4Re9fKAGsu2lYl+XS94BiJp
wUzrrPkcJgj5TQbchXuhJYxq3SnOjlSbqhdBNp91og2AZhiyfYqOzNVYsaQC/hq8
ron4KOaEnzgnkuJNlrm0Ki1RVE4pqCzGD030eKjBEjQisC7ggljKHOOKSCxJXSN9
14hOYBUCC2AnBKvPhGq1X4Hjry3eIXhL9p/aD+0WQRJbkS6RIcYb+0zHLU5vc6qP
pkGppsyC/wIgg246zcxBWRsVk/eF0NZZKUsk5lOWZd2qg9EuY3cD8OGgiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvwVHy5xZ+h5h21mlEqeh8Xwck3MB8GA1UdIwQY
MBaAFBgiQcKkzRsIv1ulQS1JHEnI64eNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0NKQndxVE5Hd2lfVzZWQkxVa2NTY2pyaDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYmY3OTUtYTMxZC00ZTYzLThmYTEt
YjJkMjY4ZTJjYjc4LzEvR0NKQndxVE5Hd2lfVzZWQkxVa2NTY2pyaDQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lYmY3OTUtYTMxZC00ZTYzLThmYTEtYjJkMjY4ZTJjYjc4
LzEvR0NKQndxVE5Hd2lfVzZWQkxVa2NTY2pyaDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYxwRX2td
IFSjBB1inrHMxq05/hW1BhiswFuGiAiPOJFWIotwcQBRbcpzvedKPTNwKU7I0oPS
oQxCfCP8FJ7A/hi+KBu3k4sLsBCkho0YDWkR5Kc5FXeaGZ3ggUhiFYpMCgN7dzpC
tn/oMHtb5ubWViLJJRbZsrSJwOFY7gwGMP6S+GwsG6clov1XjYCrQRjgJMmj8f26
3ADajJbUY5CZqfslEslRuYd8CyHp36jnt+8JAi+Yf8VvmB1Ub5hAQNfyd09L9b5o
Q3em6NICfeBFEBNacr1S8p1jhYqgDBWMdtJRsCRR6lHvrFlYnCLehBrobSTr9sOa
DcvGSgdTaCYJfA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:30:36 2026 by rpki-client