Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
File:                     GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft (raw, json)
Hash identifier:          2PsBd7IWNACxHCY3a2qeYScwtwrJ4j4T/73mKVRlYGA=
Subject key identifier:   1E:A0:5C:9B:7D:A5:45:60:DB:E7:B5:66:FE:95:75:7F:FD:48:23:73
Authority key identifier: 19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01
Certificate issuer:       /CN=195a12a0e73482d993260598a25c8f5a5c49d201
Certificate serial:       019E31F2F4C4186B303D6E70A5EA587F241E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
Manifest number:          190D
Signing time:             Sat 16 May 2026 18:01:06 +0000
Manifest this update:     Sat 16 May 2026 18:01:06 +0000
Manifest next update:     Sun 17 May 2026 18:01:06 +0000
Files and hashes:         1: 3HmTEpC4VIL74bvtHgwwr4J0_bA.roa (hash: 0DTR/kx+aEJlJfsijVCjICf0fvERpyfE2z6J9TqKYQs=)
                          2: GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl (hash: NiMsDJLJwoYp6CR1ddV83PSLJRtdyQUurXpziFV0fvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:f2:f4:c4:18:6b:30:3d:6e:70:a5:ea:58:7f:24:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195a12a0e73482d993260598a25c8f5a5c49d201
        Validity
            Not Before: May 16 18:01:06 2026 GMT
            Not After : May 17 18:01:06 2026 GMT
        Subject: CN=1ea05c9b7da54560dbe7b566fe95757ffd482373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:be:d9:e8:83:bd:63:a7:22:ef:50:9a:3f:39:
                    6c:e5:95:05:38:48:06:28:63:2c:2b:66:e3:c7:15:
                    92:83:b4:9b:37:e7:46:90:16:73:a2:e9:2a:4c:3d:
                    73:95:53:20:dd:f8:4b:bc:99:e5:db:22:cc:4d:9e:
                    18:96:41:66:b9:fe:b1:c6:96:31:03:8d:76:67:12:
                    c4:f9:eb:57:b6:7e:aa:f6:be:34:31:57:2f:3a:ae:
                    7b:a3:14:b4:1d:7f:4f:99:02:c3:d9:d1:53:01:20:
                    ca:82:9d:84:d5:4a:3b:a4:f2:9f:67:91:cf:86:db:
                    09:49:6f:1c:d0:8c:08:53:8d:f3:3c:c8:e9:df:98:
                    14:2e:c6:07:34:15:b8:bd:44:c3:d2:d1:a6:88:a9:
                    63:d0:82:2e:3f:37:9b:c4:11:89:25:b8:a9:af:23:
                    2a:4e:0e:c6:a1:ce:18:03:a8:83:f8:6f:08:68:05:
                    b8:c5:ac:c4:87:4d:1c:0e:7c:61:f3:b3:8a:54:7e:
                    d2:24:be:22:e6:c3:fc:b0:b3:00:da:eb:95:3e:44:
                    57:4e:45:98:a9:20:a0:86:c2:62:aa:62:53:c5:9c:
                    db:51:0c:1c:d6:04:f9:33:32:68:24:4b:41:f6:01:
                    34:29:48:19:6f:3e:f8:12:ee:96:58:bf:a8:1a:56:
                    da:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A0:5C:9B:7D:A5:45:60:DB:E7:B5:66:FE:95:75:7F:FD:48:23:73
            X509v3 Authority Key Identifier:
                keyid:19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:3f:3a:09:b2:fe:f3:08:58:7a:a2:4f:f5:8e:b5:3b:1b:63:
         ba:57:ad:c9:17:99:a1:23:d3:7f:c3:c3:e2:c4:b1:fc:18:e7:
         8d:f6:a8:d3:72:da:30:0d:9b:10:02:a4:18:7d:39:de:fc:97:
         2c:8f:26:f1:68:92:1d:7c:b0:75:9a:f4:68:bc:4c:cf:62:dd:
         c8:18:9b:f0:42:05:e5:db:6f:d2:a2:86:4f:73:e1:92:39:4b:
         e1:af:e0:aa:8b:8d:67:cc:77:c5:90:68:15:21:2b:a7:7d:89:
         a0:cc:0d:34:2d:ee:fc:1e:70:35:45:87:02:2c:de:4e:02:33:
         4c:0e:eb:17:30:f5:96:04:e8:b9:17:d9:1a:b4:99:ce:27:9a:
         e6:50:1f:95:84:f3:ac:55:5b:e4:2a:83:70:c9:78:4d:49:69:
         a5:de:26:a9:63:5f:aa:1d:77:40:2c:12:90:c9:6f:f1:3d:2e:
         31:84:6e:e3:5b:05:95:e1:85:2f:0e:0b:29:42:94:17:c1:ab:
         7f:8c:e3:3f:0b:ac:62:c4:84:9b:8f:2e:96:d9:3a:72:a5:5f:
         25:f8:74:7c:e2:ed:01:1e:bc:6d:e9:7d:28:f7:98:19:a8:10:
         b8:8c:cf:e2:e1:7a:71:d5:f3:92:d3:05:c5:a4:e3:ca:33:75:
         8d:89:4a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:42:06 2026 by rpki-client