Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
File:                     gLWnciaEnxty0GO-Y4mX-wnK21E.mft (raw, json)
Hash identifier:          WJ9MiDQ1Ga7d4Y/AWeqX1rEZeOoNCXKBCwBr88Kce98=
Subject key identifier:   74:14:BB:6C:21:F5:46:A8:93:0B:77:B0:9D:63:C4:2B:4C:5F:FA:F8
Authority key identifier: 80:B5:A7:72:26:84:9F:1B:72:D0:63:BE:63:89:97:FB:09:CA:DB:51
Certificate issuer:       /CN=80b5a77226849f1b72d063be638997fb09cadb51
Certificate serial:       019E1D9065D946D7C1A2CED921E6371A9C65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
Manifest number:          12
Signing time:             Tue 12 May 2026 19:01:02 +0000
Manifest this update:     Tue 12 May 2026 19:01:02 +0000
Manifest next update:     Wed 13 May 2026 19:01:02 +0000
Files and hashes:         1: gLWnciaEnxty0GO-Y4mX-wnK21E.crl (hash: wNgux1dCE8aoo0mguUtOKd7M8nx+d0xDJQ19Q2RWLgM=)
                          2: nTAeOQ1yfLeE7UobuYd95qQsnDc.roa (hash: MGx/T2ybNPO76ocB/JBxy+Dt6X73selrSnb5nBMcig0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:65:d9:46:d7:c1:a2:ce:d9:21:e6:37:1a:9c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80b5a77226849f1b72d063be638997fb09cadb51
        Validity
            Not Before: May 12 19:01:02 2026 GMT
            Not After : May 13 19:01:02 2026 GMT
        Subject: CN=7414bb6c21f546a8930b77b09d63c42b4c5ffaf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:83:1a:30:f3:b1:69:54:52:8d:e2:38:b8:b2:
                    1c:fa:bf:60:a8:b6:f4:07:35:60:b5:1e:79:c8:a5:
                    cc:d1:a2:0c:b8:17:0a:55:c3:59:4a:ee:35:1f:3f:
                    45:19:ab:0d:72:63:89:c3:7f:6d:85:ef:76:05:3b:
                    07:81:2e:9f:a6:17:da:2f:0c:11:c0:3e:34:a0:ed:
                    9b:6c:c7:ac:61:7a:87:70:b9:55:5d:4f:5a:1a:d0:
                    fa:ef:21:6c:9d:e3:ac:7b:d7:f9:c1:78:3e:95:77:
                    46:b0:a8:9b:39:9d:e0:a9:35:48:ef:5b:af:48:ce:
                    02:c6:45:b1:bd:1a:fc:85:88:ff:e6:07:d3:ab:36:
                    ac:5d:1e:58:04:a8:0d:4e:af:b7:29:2f:83:6a:d3:
                    fd:4f:bb:99:6c:af:d1:fb:f6:a9:95:ce:22:6a:3d:
                    60:7f:d7:73:02:54:b5:a8:81:77:40:5d:57:07:97:
                    89:44:c5:ed:0c:79:99:3c:1f:04:a8:48:24:e7:0b:
                    4b:31:03:69:a4:9f:fb:6e:62:50:31:2b:a0:12:ab:
                    06:af:78:ce:60:4a:19:b3:d1:b3:f1:c3:57:0d:c5:
                    d4:7d:01:ee:d5:63:cf:8a:25:37:5e:ba:22:d3:a0:
                    39:a4:4f:69:7c:0f:ed:36:7a:b4:a1:b7:aa:7d:88:
                    33:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:14:BB:6C:21:F5:46:A8:93:0B:77:B0:9D:63:C4:2B:4C:5F:FA:F8
            X509v3 Authority Key Identifier:
                keyid:80:B5:A7:72:26:84:9F:1B:72:D0:63:BE:63:89:97:FB:09:CA:DB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLWnciaEnxty0GO-Y4mX-wnK21E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/464473-3659-413d-8e0a-56970adcd0af/1/gLWnciaEnxty0GO-Y4mX-wnK21E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:81:4d:3e:02:a7:d4:97:2e:28:55:e9:bc:c3:6c:7c:e5:93:
         c9:a4:04:15:fa:ee:fa:5c:44:b2:95:b8:8f:c0:ce:fa:2d:f9:
         33:cf:f2:d4:da:f3:68:d2:e0:c9:bf:05:9a:b1:45:65:83:9c:
         84:fa:a4:52:43:8c:62:50:95:f9:fa:d1:43:08:2d:ec:24:76:
         02:29:96:c3:35:a6:10:d3:f4:5f:a6:9e:5f:7d:30:bc:57:57:
         18:46:4d:bf:60:65:85:07:0b:e0:64:d8:b7:33:a7:86:41:e0:
         32:ad:08:97:64:05:70:34:d6:dc:1a:a4:41:ab:c1:5b:f8:52:
         5e:8b:c0:fa:8b:9b:77:b6:b1:23:58:d6:60:cd:9c:ab:43:45:
         c7:e9:8e:69:2d:7e:45:1b:e5:43:c5:38:37:be:a8:c2:1a:30:
         ca:1b:82:62:66:62:1b:4b:6d:ed:01:1c:d4:5a:60:91:2e:6e:
         45:90:0c:9b:50:e3:9c:59:b9:04:81:e8:30:0d:1b:8a:98:fa:
         aa:ff:b2:09:0e:8a:88:89:46:11:74:f7:30:dd:a1:f0:a7:cd:
         24:6b:d5:4a:16:d4:82:22:62:c4:0c:00:1e:53:e2:c4:c9:cc:
         39:a3:79:47:96:be:1d:53:aa:3f:f7:7f:b7:29:a8:15:91:d7:
         a7:44:be:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:47 2026 by rpki-client