Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
File:                     GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft (raw, json)
Hash identifier:          JZ4G5yNEvqfJhhFoZGFqRyOSIjJSbDO3iGYVcCep0F8=
Subject key identifier:   78:32:27:EA:CF:5A:08:7B:95:B3:8F:64:80:46:52:64:0E:1C:4A:20
Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
Certificate issuer:       /CN=1b098412c984b89be38011a72a3c471975fc47a2
Certificate serial:       019F9392506DC2F5FC2CFE8E5DB545359A80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
Manifest number:          0BC6
Signing time:             Fri 24 Jul 2026 10:01:07 +0000
Manifest this update:     Fri 24 Jul 2026 10:01:07 +0000
Manifest next update:     Sat 25 Jul 2026 10:01:07 +0000
Files and hashes:         1: 3z35gDmHecdzIYEGmIKw6RYeXEA.roa (hash: j55RlWKFCQCXc2QwhpECXuc0I1p5c8gSybgzQ5rlp3w=)
                          2: GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl (hash: sBwrP6HvTOWsVQhvlAXkdsZ6hsqkHIbBzHbYU+C0wj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:50:6d:c2:f5:fc:2c:fe:8e:5d:b5:45:35:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2
        Validity
            Not Before: Jul 24 10:01:07 2026 GMT
            Not After : Jul 25 10:01:07 2026 GMT
        Subject: CN=783227eacf5a087b95b38f64804652640e1c4a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1c:b8:29:ce:46:2b:e2:04:d8:6a:5f:9f:68:
                    26:f5:11:12:37:8c:4e:a1:bf:f4:34:13:6d:aa:54:
                    aa:c8:d5:b5:57:b0:88:ce:70:9e:55:4d:95:b5:7d:
                    01:cb:cb:49:09:42:f4:9e:dc:42:9d:ea:c3:4e:2b:
                    af:8b:7c:16:c4:8a:5d:c7:c2:95:11:e4:ef:d0:b0:
                    37:8b:a3:a8:d0:36:6b:a5:e8:22:dc:76:eb:bb:51:
                    e6:cf:52:21:e1:6d:a5:cb:bb:89:1b:ff:b1:8b:44:
                    16:1f:8f:78:4f:d6:3b:1a:d6:af:1d:2c:65:3a:11:
                    2e:fd:fc:db:37:93:68:46:15:7e:46:d8:48:d7:9c:
                    82:b0:1f:ac:5d:9e:97:ff:d3:36:40:08:7a:79:ed:
                    ed:27:7b:68:7f:b1:cc:2b:e3:d5:30:26:a1:b0:b2:
                    e7:df:32:36:63:65:7c:ee:3b:29:d1:10:55:e8:18:
                    b5:79:0c:1b:a6:55:7b:2c:b1:22:a0:4a:5d:86:23:
                    8b:ee:d5:33:ed:6f:fd:d8:39:53:03:74:6f:be:85:
                    41:6f:be:3c:67:48:5a:6e:04:65:ec:79:06:b7:d6:
                    af:38:e8:cd:ca:98:3a:19:36:d6:25:f0:d8:58:f6:
                    09:e3:ee:86:ca:44:34:5a:21:68:69:58:31:24:29:
                    57:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:32:27:EA:CF:5A:08:7B:95:B3:8F:64:80:46:52:64:0E:1C:4A:20
            X509v3 Authority Key Identifier:
                keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d7:3d:af:e5:49:5f:5d:0f:3b:1e:00:f4:dc:38:f7:90:e1:
         cd:1d:3b:38:e8:de:1b:74:b4:f5:b9:59:63:b2:f4:4f:45:f3:
         51:eb:e2:9e:21:6a:35:21:ee:ea:a9:6a:24:7a:3f:2f:31:42:
         01:87:dc:53:22:3d:64:49:ee:9b:12:a3:5d:48:28:29:9d:90:
         81:08:26:53:1f:de:b6:7a:bf:e4:99:75:7a:84:5d:e7:82:d1:
         22:3b:61:e4:14:75:ad:cf:2c:dd:ed:a8:7b:98:b4:7e:75:4d:
         96:8c:cf:f8:bc:e3:5c:55:8f:97:47:29:d8:dc:25:4c:f7:a8:
         1c:d9:3e:5c:71:c7:72:bc:dd:89:58:9c:28:ea:3a:bb:9a:5e:
         c7:2a:14:54:bb:b3:66:45:cb:d6:d4:63:22:b4:94:f3:cf:b6:
         fd:61:2c:de:90:7a:69:82:4d:30:0b:e1:56:a4:e5:c2:65:49:
         70:e4:60:22:7c:ee:18:a8:10:b4:a4:d1:03:0b:38:80:d9:3f:
         7b:90:cc:25:4f:ed:88:64:9e:4d:a4:0f:ae:35:ef:e2:79:59:
         e1:7a:ba:49:70:e8:a6:fe:66:dc:43:e6:34:35:36:dd:fc:bc:
         07:9f:d4:90:04:c2:91:17:df:b3:13:4f:15:36:43:d0:e3:3c:
         75:d7:3b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:06:44 2026 by rpki-client