Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
File:                     gnMxRuPp1uEVRjF_dSGeogLF-S0.mft (raw, json)
Hash identifier:          RKVVMDUW7B0i5yNlIRD4rfK2ZLfOY5+pbywhxP92FrU=
Subject key identifier:   32:C1:18:C9:AE:0F:95:AF:5E:12:4D:0D:65:B4:00:2C:CB:4A:DF:CC
Authority key identifier: 82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D
Certificate issuer:       /CN=82733146e3e9d6e11546317f75219ea202c5f92d
Certificate serial:       019E1EA36EE9C2B7680E6EC0FAA6F5727FDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
Manifest number:          08B2
Signing time:             Wed 13 May 2026 00:01:27 +0000
Manifest this update:     Wed 13 May 2026 00:01:27 +0000
Manifest next update:     Thu 14 May 2026 00:01:27 +0000
Files and hashes:         1: QKjiIqM0UbknWM_0hZSPOOQrhbE.roa (hash: Ym8+l1LE5PwdsL5Z1gyeamQjMBjG/nU2Uc7hHjtf64w=)
                          2: gnMxRuPp1uEVRjF_dSGeogLF-S0.crl (hash: Is6MI7knq1tWCmY3T92EsHc7IQgqoon4szmfq1r6lQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:6e:e9:c2:b7:68:0e:6e:c0:fa:a6:f5:72:7f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82733146e3e9d6e11546317f75219ea202c5f92d
        Validity
            Not Before: May 13 00:01:27 2026 GMT
            Not After : May 14 00:01:27 2026 GMT
        Subject: CN=32c118c9ae0f95af5e124d0d65b4002ccb4adfcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7f:84:3a:92:e8:64:a5:9b:17:ac:fd:df:c3:
                    6b:c4:66:cb:3e:52:98:54:d8:90:02:d4:28:53:0b:
                    6e:3c:e8:6a:3a:71:04:c4:b8:8c:3a:45:50:66:92:
                    f1:a6:b7:6f:08:7f:68:f0:a4:e2:07:b5:9a:75:b7:
                    ea:34:65:c6:b7:d4:45:06:41:fe:d5:c4:26:84:89:
                    db:a9:61:f6:7f:58:0a:d7:9e:b6:fc:60:b4:f8:58:
                    fb:15:bf:e6:86:9d:fa:75:12:53:ee:64:a1:57:c1:
                    d2:45:08:be:1f:71:88:b9:ed:fe:1b:b5:2e:22:bc:
                    5e:b2:ac:62:54:ca:54:08:a8:53:73:c0:03:4c:7c:
                    fb:4d:ff:97:68:24:f1:0a:3f:43:ca:9e:90:4f:6e:
                    62:6c:a3:dc:04:8d:15:25:db:ce:0d:c8:07:bd:8a:
                    27:8d:c8:18:31:62:5d:0a:e4:64:0b:54:23:c9:9e:
                    53:47:a2:d5:12:fd:d5:df:7f:d7:06:72:1f:9b:4c:
                    32:7b:2f:3f:31:04:cd:99:c3:8d:e5:2c:12:b5:05:
                    60:a2:7d:2a:ac:dd:57:d7:90:42:53:8e:26:d4:4b:
                    8d:da:0d:e0:23:16:68:c1:af:72:2a:2d:ae:f0:b2:
                    fb:df:ed:42:eb:4c:17:43:79:e2:e4:e8:45:1e:5b:
                    97:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C1:18:C9:AE:0F:95:AF:5E:12:4D:0D:65:B4:00:2C:CB:4A:DF:CC
            X509v3 Authority Key Identifier:
                keyid:82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:5a:07:3b:9b:25:4b:f6:8d:39:af:89:a8:b5:82:be:74:2b:
         9c:c4:98:ab:6c:56:01:99:ea:1d:77:b7:bb:95:da:72:21:ed:
         0b:e0:13:53:25:ba:a0:46:92:f1:c0:a8:9a:92:bf:f8:19:66:
         18:7a:f1:48:da:20:5d:20:dd:22:9e:e9:7b:9e:ac:cd:24:18:
         51:b6:f3:83:0a:9e:87:15:fc:bc:0a:52:17:e1:9a:5a:3e:3a:
         ed:81:de:ef:a4:1d:e6:67:03:7f:72:3a:a5:d0:4d:77:a1:b9:
         b2:36:f3:22:4d:ee:dd:ba:1b:7c:35:b2:ea:bf:2b:96:f5:18:
         69:de:a2:ee:43:87:ca:d5:40:72:99:8c:37:50:a6:9d:79:2a:
         31:7d:07:2c:65:dd:97:82:2f:8a:29:14:e0:85:e1:64:a7:70:
         30:91:78:3f:d7:e6:d7:72:de:65:17:56:b9:cf:88:ca:19:b9:
         59:c2:20:ae:82:27:65:6f:b4:63:cd:8f:50:d5:5b:17:e1:99:
         2f:d6:d9:14:c2:1e:69:f8:3f:77:8d:47:31:41:97:01:61:c7:
         47:2c:12:5d:ca:e3:6f:b8:9a:f0:cc:d7:39:5b:c7:28:ee:d8:
         a7:65:30:7c:e1:c6:87:04:e0:6b:5e:93:f9:e5:31:b8:f1:23:
         d6:0b:77:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:46 2026 by rpki-client