Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
File:                     0GmJqc1r0vLDwN7GCKKL49O6ToE.mft (raw, json)
Hash identifier:          2i2zfS8TAY1BjeqcH0Wx8AG+q9Qh1hxZRDC2soegdW8=
Subject key identifier:   E3:F9:62:5D:80:77:91:D6:F8:DD:9F:DF:F9:69:02:AC:DE:88:59:C9
Authority key identifier: D0:69:89:A9:CD:6B:D2:F2:C3:C0:DE:C6:08:A2:8B:E3:D3:BA:4E:81
Certificate issuer:       /CN=d06989a9cd6bd2f2c3c0dec608a28be3d3ba4e81
Certificate serial:       019E2F5FBDD725E334E91BC48C96C55EDABE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
Manifest number:          190D
Signing time:             Sat 16 May 2026 06:01:04 +0000
Manifest this update:     Sat 16 May 2026 06:01:04 +0000
Manifest next update:     Sun 17 May 2026 06:01:04 +0000
Files and hashes:         1: 0GmJqc1r0vLDwN7GCKKL49O6ToE.crl (hash: OBQH495Kl3YqWChhSO6RnV0VKSQFR24xvFTAjr+mtC4=)
                          2: wsFDs0k_i43xFHAOdnBr2BMkzX0.roa (hash: TtkJrd9Ep6l68yC5CkOYpRhWIjpFiNmgnjq9PKBAW0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 06:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:5f:bd:d7:25:e3:34:e9:1b:c4:8c:96:c5:5e:da:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d06989a9cd6bd2f2c3c0dec608a28be3d3ba4e81
        Validity
            Not Before: May 16 06:01:04 2026 GMT
            Not After : May 17 06:01:04 2026 GMT
        Subject: CN=e3f9625d807791d6f8dd9fdff96902acde8859c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ee:8b:a3:74:64:01:d0:3b:60:7c:6a:c9:ab:
                    dc:5c:e6:7e:09:3b:d1:d8:1c:e7:1b:f3:c9:af:1c:
                    b6:bd:c5:33:9a:11:b7:80:d0:ef:2b:35:fb:f3:66:
                    d0:f6:d9:25:7e:b2:6a:fb:5d:ab:a3:11:ab:cc:16:
                    4c:ab:98:46:e2:09:72:aa:04:f6:05:b4:3f:b0:47:
                    09:54:d5:f9:7a:83:61:35:16:26:61:69:dd:fe:62:
                    c3:66:c1:1f:a3:be:9e:92:fc:47:37:04:52:de:14:
                    b8:06:53:49:b8:88:64:56:4a:f7:61:a4:1f:ee:23:
                    a7:53:a5:54:ec:77:75:b1:f9:29:d1:1f:38:e5:c7:
                    02:02:85:bb:3c:d2:a7:7d:f1:9c:50:70:55:72:88:
                    5b:ec:19:5a:fb:7f:95:92:8d:e3:4c:79:27:70:dd:
                    eb:2d:7c:87:1c:4a:50:03:b0:83:50:8b:34:76:10:
                    ea:88:55:49:5c:6c:77:9b:a3:0f:8b:fd:e0:2b:16:
                    c7:50:a3:5b:4e:45:34:e0:e9:7c:9f:9a:52:da:0b:
                    7d:38:90:cf:50:e8:fa:fd:e8:1f:26:1e:b3:fe:84:
                    32:db:b7:95:dd:09:b3:d8:69:7e:30:5d:06:10:22:
                    c0:e5:b5:ee:e3:ca:8e:ec:74:9e:c5:c9:5e:5c:49:
                    8d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F9:62:5D:80:77:91:D6:F8:DD:9F:DF:F9:69:02:AC:DE:88:59:C9
            X509v3 Authority Key Identifier:
                keyid:D0:69:89:A9:CD:6B:D2:F2:C3:C0:DE:C6:08:A2:8B:E3:D3:BA:4E:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d8:e1:94:85:58:6d:16:3e:a6:66:e1:13:e5:94:45:d0:85:
         4f:cd:24:d7:55:b7:f3:ac:ef:6f:58:33:e3:64:73:64:7b:9e:
         2c:d0:46:0d:28:68:5a:36:8a:26:1c:af:71:27:db:b9:dc:4b:
         83:c7:1e:3c:04:d6:96:ce:53:36:fc:7f:01:2e:5e:76:52:d1:
         4e:a1:6c:e0:cb:fa:f8:63:9d:7a:af:d7:1e:fc:04:25:df:ec:
         ef:1d:96:75:d6:dc:7a:6c:c4:2e:5f:76:6d:87:71:f9:d5:0e:
         95:15:9e:f9:43:86:50:0e:de:88:a3:f6:06:1e:1a:48:c2:a6:
         fd:8b:ea:c5:3e:a5:6c:92:bd:26:bc:7d:df:18:64:1a:48:22:
         94:41:17:a7:ba:7c:d1:57:ed:ae:f3:68:f2:bd:19:48:86:4d:
         44:2d:79:a5:d4:97:94:70:39:5e:ae:3f:c1:b0:e1:bb:ef:df:
         93:43:85:e0:32:b1:b5:2e:15:c0:ac:67:f4:40:a5:5c:c9:06:
         53:38:d6:69:db:e3:0a:7e:b1:94:b7:b8:04:fb:69:27:ee:5a:
         d5:fa:af:84:71:82:19:a4:a3:34:0a:f8:78:bd:98:fe:a0:d3:
         14:24:41:4b:48:2c:3e:db:83:79:58:04:93:70:4e:39:a5:f5:
         28:18:90:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:30 2026 by rpki-client