Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
File:                     GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft (raw, json)
Hash identifier:          mzyNcNffNoiERP+HCZNEV7BuzoEChl5qArDdtJwEkCg=
Subject key identifier:   58:C3:98:0B:17:AD:F5:0D:66:F2:4B:1A:DB:27:B9:6C:62:36:AC:F0
Authority key identifier: 1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F
Certificate issuer:       /CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
Certificate serial:       019E1E358445A836EFB2435460012C728829
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
Manifest number:          1899
Signing time:             Tue 12 May 2026 22:01:24 +0000
Manifest this update:     Tue 12 May 2026 22:01:24 +0000
Manifest next update:     Wed 13 May 2026 22:01:24 +0000
Files and hashes:         1: GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl (hash: 04xi0EixkQ34Qga99BwkqHvwbfeWPe86pLEbzQSODIc=)
                          2: O1x05-HbZz9z_RAG_UsW8fq9KnQ.roa (hash: RqXyqzQCK+VpxYKPTIZPxW8p4AdlK8gMbx5a8aqVV1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:84:45:a8:36:ef:b2:43:54:60:01:2c:72:88:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
        Validity
            Not Before: May 12 22:01:24 2026 GMT
            Not After : May 13 22:01:24 2026 GMT
        Subject: CN=58c3980b17adf50d66f24b1adb27b96c6236acf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b6:68:65:0e:79:6f:54:a4:0b:67:ea:4d:7d:
                    2a:b2:b0:7b:e2:6d:79:89:bb:37:b2:d7:ed:af:2a:
                    99:23:4b:1f:4e:f8:7f:49:b6:7d:9a:4c:92:f2:b6:
                    d8:08:c9:5f:26:04:25:89:86:80:7f:3a:42:35:fd:
                    6a:14:7c:d1:6c:f2:a2:4e:47:6c:85:de:a6:ce:a7:
                    23:ca:99:32:21:6f:25:ac:71:36:50:53:6f:81:5b:
                    a5:13:d1:93:27:d6:7d:9a:81:fa:85:2e:f1:e4:8c:
                    e1:e6:85:7a:60:b3:73:6b:c4:4d:45:7a:2e:80:84:
                    ba:2b:d6:e5:6e:4a:22:ef:b1:0e:55:ab:f2:e9:43:
                    7c:99:23:c8:35:31:17:27:a3:a7:c8:ea:bd:a5:c8:
                    87:78:ab:4e:7c:49:95:ce:29:dd:e7:ee:a9:b1:55:
                    68:37:3f:a9:e7:fe:9e:9d:f4:c5:d2:d8:1f:ca:8f:
                    83:fa:26:5f:b3:0d:10:81:3a:fb:6b:a4:2f:8c:c2:
                    02:0b:ae:4f:63:4e:bb:ed:86:99:3a:64:23:ec:2f:
                    48:f3:34:df:b1:db:52:8c:fa:0c:cc:3e:0a:45:2f:
                    30:25:4f:80:38:44:ed:7e:c5:ef:e6:21:3b:26:b9:
                    a8:b1:e1:9c:32:07:0d:01:69:ae:9b:ce:f8:92:58:
                    46:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C3:98:0B:17:AD:F5:0D:66:F2:4B:1A:DB:27:B9:6C:62:36:AC:F0
            X509v3 Authority Key Identifier:
                keyid:1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:99:56:87:8c:93:b4:53:0e:43:82:6d:2b:e5:82:d3:f0:3d:
         b1:29:5d:b8:d0:8a:5a:7d:36:8c:5c:79:40:e1:57:dd:8e:12:
         14:d8:82:11:55:96:17:fb:c4:23:91:a7:00:7b:7c:2d:82:17:
         d7:45:42:a4:57:6a:f0:23:99:19:1a:55:72:32:19:b5:34:5b:
         f5:c9:88:a1:54:54:3a:67:4d:32:3c:43:6a:ec:67:5c:c8:58:
         d4:39:e4:94:58:f8:b2:a4:33:29:4c:7e:4f:31:4c:21:b9:5e:
         78:48:8d:51:a4:0c:e7:fe:f6:41:c8:5f:28:c4:6a:15:81:30:
         ae:9c:e0:fc:d3:58:4a:8b:e3:d1:fa:03:f6:31:45:1e:c4:65:
         b8:7f:f8:d8:28:f3:81:6e:cc:9b:56:48:b4:a4:62:63:2f:f6:
         5c:2c:51:3e:62:ff:ab:a4:38:2c:4b:28:09:65:87:88:4f:d0:
         25:4c:fd:ed:80:a6:b5:5b:3b:d7:cb:dc:58:55:63:79:c4:b9:
         6b:99:61:e8:e3:a2:67:86:59:6c:6f:dc:7a:b7:fb:c2:8d:c9:
         9d:21:60:b5:a3:68:86:00:ec:c6:20:2e:b0:ae:4a:2f:ea:a3:
         09:15:8a:32:7a:63:9c:13:a0:62:6e:8c:f1:e9:0c:2a:83:d9:
         fa:7e:51:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:23 2026 by rpki-client