Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
File:                     gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft (raw, json)
Hash identifier:          DHOG80tehksJeG+pfK8SJ/6PmvdZYwYG10IZfK5CcTg=
Subject key identifier:   C1:D0:5E:A7:CE:43:C7:9E:D0:18:81:97:51:3E:64:C6:AD:9E:7E:58
Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
Certificate issuer:       /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Certificate serial:       019E2A021B0A4C9A50C99EF02FBDEF3869A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
Manifest number:          1919
Signing time:             Fri 15 May 2026 05:00:41 +0000
Manifest this update:     Fri 15 May 2026 05:00:41 +0000
Manifest next update:     Sat 16 May 2026 05:00:41 +0000
Files and hashes:         1: GvVv96JrRLH22YKSK9VfEbCaaP0.roa (hash: Qk3itIJYOZGxOb9KSpcwss8K3JcW4s+BHAT7y+BPQUI=)
                          2: XfAxSlgwCTxzDzqz1F5GSiHcht8.asa (hash: cUvj7YaZEThgC8DmFBrpKSpjIZNpn5XqKRaVt6kdn/Y=)
                          3: ZYu3qwDD62OQjK-0MY1GhTTV3L0.roa (hash: jwdnKx0rMKE4+yxjFPdAO7oEDuayA2F4huzOqBo8dhI=)
                          4: gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl (hash: 7NzIuWPdK7r4sDGXHRyk6iy69tMKl+m1iYRET/D0cQI=)
                          5: uXeyuyNFTLdI8bGRmbqj8zikNy8.roa (hash: 3g5uGaWB0/TdoVSPoOBbNodtyn53Sd/iS2fmmUAB/ic=)
                          6: wIFSdDIn69QjGp9-x0gmnkeBqoI.asa (hash: 6G8K5jievPqmLDZE/wjQxWQa/PGUOa8AwCZQ1np/zp4=)
                          7: wywENrgV9cTNnEJt2kyjfxZDgWw.asa (hash: +Yfj1V4ldVnWd67CebIjZgHqSDXzdBkKkOBcRyvVlgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:02:1b:0a:4c:9a:50:c9:9e:f0:2f:bd:ef:38:69:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
        Validity
            Not Before: May 15 05:00:41 2026 GMT
            Not After : May 16 05:00:41 2026 GMT
        Subject: CN=c1d05ea7ce43c79ed0188197513e64c6ad9e7e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:56:50:e9:18:4b:de:c2:c4:de:1b:e0:43:61:
                    d8:96:a6:8b:52:9e:b3:d0:91:3d:8e:c7:56:35:66:
                    c2:12:25:ac:b6:77:97:a3:ea:fa:41:ec:10:fe:6d:
                    98:21:2b:ab:c2:95:ff:4a:b4:c0:ea:c3:e0:51:fe:
                    dd:1b:9c:35:2e:1f:8b:ef:23:67:f8:2a:80:77:44:
                    b3:81:fc:a7:57:b9:24:87:1f:55:98:8d:f6:97:51:
                    39:91:b0:c1:36:dd:90:eb:f0:63:7b:d0:03:c3:98:
                    ac:4a:70:80:c2:6c:d5:df:8b:99:50:24:3f:b8:a4:
                    9b:1c:01:85:f3:30:b3:ad:7f:35:30:f9:41:1c:45:
                    c8:d5:f1:db:6d:a3:87:36:3c:17:88:cd:15:78:2c:
                    9a:12:59:61:26:5d:30:44:2f:f2:49:17:93:41:13:
                    d5:b4:b9:10:27:d8:3e:e5:ed:c9:95:f5:e8:48:53:
                    6a:dc:ea:56:c3:81:fa:ea:71:fe:b0:3a:a5:70:2c:
                    b0:d7:e2:96:ce:bd:46:1d:37:59:e0:dd:87:75:2b:
                    04:86:6e:ba:5d:a8:41:79:10:1d:1f:7b:ad:d3:9a:
                    45:be:2f:cd:5b:2b:7a:56:4a:c7:77:7e:2f:d7:50:
                    1b:5b:ca:d0:f1:46:78:61:f6:fa:1a:68:d7:ca:7d:
                    21:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D0:5E:A7:CE:43:C7:9E:D0:18:81:97:51:3E:64:C6:AD:9E:7E:58
            X509v3 Authority Key Identifier:
                keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a4:4b:31:bd:e0:c5:52:15:3a:1d:0d:64:11:06:56:d7:7b:
         10:45:f8:d4:33:1a:2c:eb:a0:fa:ce:b6:3e:35:ee:e3:08:95:
         96:20:dd:3d:cd:3c:a6:3e:27:97:75:c0:c6:79:02:6a:5c:a1:
         49:2b:4c:ee:75:4f:7f:87:ce:ae:36:59:19:05:e6:aa:9d:41:
         7e:b6:1e:db:45:6c:40:e1:fb:07:05:05:c9:5d:ee:7f:5f:6a:
         b2:cf:76:69:e3:f5:46:d0:10:29:4e:80:3c:18:72:fd:5d:78:
         84:8b:a5:b6:2c:79:f4:35:90:cc:f7:a3:4b:8f:86:3f:c8:12:
         d6:34:63:12:8a:a8:50:1c:51:c1:b9:86:9a:f1:28:07:8a:2e:
         b6:a6:07:af:68:47:2c:a3:c6:84:96:2f:17:d4:e6:db:7f:ee:
         cb:db:f3:82:43:c1:3f:7b:18:93:a0:aa:d0:d0:59:ed:40:91:
         ba:29:4b:4c:3b:e5:4c:05:72:1d:46:de:35:af:d0:fb:70:96:
         8d:75:61:47:e5:41:e4:80:9a:f0:c4:a3:38:41:e6:78:9c:27:
         e5:fc:7a:a7:e4:cc:e0:58:8d:d8:66:2a:56:fe:e9:af:02:c0:
         75:f2:46:77:25:99:34:23:1c:47:91:e9:b4:ee:54:c3:dd:1f:
         77:ae:64:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:02:29 2026 by rpki-client