Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
File:                     g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft (raw, json)
Hash identifier:          D28tOe1IiHiD5nJzqI7yLzJk3FRBs8d9ICng8ATd3lw=
Subject key identifier:   10:F8:D2:8B:1F:3E:0A:47:32:66:D4:FE:81:55:A5:8C:D2:F1:47:D9
Authority key identifier: 83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
Certificate issuer:       /CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Certificate serial:       019E31F381F8510815C900C4E89682B8FD14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
Manifest number:          09AC
Signing time:             Sat 16 May 2026 18:01:42 +0000
Manifest this update:     Sat 16 May 2026 18:01:42 +0000
Manifest next update:     Sun 17 May 2026 18:01:42 +0000
Files and hashes:         1: b1KrSMtgQ3wtC7LRVXqRaRG-Kyo.roa (hash: 1Mhz+jZ0j26sgAjplNt7YLlv8U2oEM5WHSOMuFm4FJo=)
                          2: g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl (hash: nfQ7S5zPIuXvOW3HnnRQ6NOJubsScgq0JY4Zz9d8JWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:f3:81:f8:51:08:15:c9:00:c4:e8:96:82:b8:fd:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
        Validity
            Not Before: May 16 18:01:42 2026 GMT
            Not After : May 17 18:01:42 2026 GMT
        Subject: CN=10f8d28b1f3e0a473266d4fe8155a58cd2f147d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:08:8d:25:3f:f0:7a:72:04:08:f0:4c:04:a1:
                    9f:5e:77:0c:c8:b8:19:02:0d:bb:3a:82:b8:1b:40:
                    4e:b6:b2:27:11:bd:7d:28:cd:74:fd:6c:b7:bd:56:
                    c1:66:cd:61:de:5e:1e:16:cf:e3:7a:80:96:d0:98:
                    9e:fb:d7:57:5e:f3:b8:73:3c:fc:33:ea:e8:66:2d:
                    3b:b2:ba:ea:eb:29:3d:91:c0:2a:76:40:03:a1:b5:
                    74:60:ce:31:55:10:6d:0b:a2:c2:66:88:4f:c5:46:
                    3b:2d:9b:b6:ad:27:cd:58:11:c0:00:11:e0:00:e8:
                    ff:ec:b8:a6:85:37:a8:5a:cd:04:5f:8e:5e:44:0d:
                    b0:94:50:28:11:0a:b2:1e:86:5b:13:1b:3c:ab:44:
                    f6:a0:26:9f:66:d6:82:ce:ac:c2:5c:4b:d4:a9:26:
                    92:1f:b9:d4:c4:6a:ae:93:ea:b4:cc:1d:c8:04:bf:
                    51:6c:26:c8:3b:c0:4a:ad:fa:43:75:e1:ac:8b:b5:
                    35:de:c8:50:5e:9f:d3:e4:42:df:95:fa:1a:a6:6e:
                    75:13:28:3c:c0:f2:51:71:b3:01:34:a6:1f:37:0b:
                    82:ef:33:f8:07:cd:fb:93:30:49:84:ca:42:6c:04:
                    85:1d:7b:df:c1:a4:80:a2:fe:6a:78:bf:9d:d1:42:
                    23:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F8:D2:8B:1F:3E:0A:47:32:66:D4:FE:81:55:A5:8C:D2:F1:47:D9
            X509v3 Authority Key Identifier:
                keyid:83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d0:c3:6f:ba:b9:d8:46:fa:fd:2e:f2:99:71:1c:07:29:15:
         cc:a0:c9:31:f5:45:03:d4:f5:c4:40:ba:a1:0a:35:32:cc:52:
         5f:15:f3:aa:77:5a:3a:b2:dc:e2:7e:8c:23:c9:05:5d:7d:60:
         2f:40:26:95:26:df:86:c3:3e:1e:74:f2:2e:56:9b:33:94:cd:
         5e:50:fd:98:89:f8:4d:cc:b4:33:49:4a:32:7e:45:17:75:94:
         14:c9:fc:df:c7:c1:02:3b:be:a5:e4:80:c4:21:07:c8:53:53:
         8d:22:1d:b5:4f:e7:b1:2e:67:22:22:71:c4:e7:29:dc:32:8b:
         5b:ea:b9:68:e3:68:a1:16:de:6b:21:02:cd:73:fa:80:07:4e:
         fe:ed:12:f9:3a:86:dd:bc:7e:a2:58:fd:57:cd:c8:62:9c:25:
         ab:70:0e:63:57:40:11:ea:12:c7:0b:76:20:c7:a0:58:a0:d1:
         99:a1:2b:96:9b:69:bb:37:cc:35:a7:88:27:b7:6a:49:b8:b8:
         e4:b1:e5:53:9e:6c:7f:9a:be:8d:8d:0a:d3:54:b5:b8:f1:25:
         a2:2a:29:67:7f:6d:43:80:fb:32:a9:df:1c:41:5f:dc:e6:6c:
         1a:54:c4:0a:41:64:11:e8:0c:64:29:90:bb:60:0f:c7:69:88:
         5a:04:33:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:43 2026 by rpki-client