Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
File:                     pS_GDTbii7jfFFyErKsZz6U7Alo.mft (raw, json)
Hash identifier:          bY4hhTMccd0cGiLFeb1K/pS3jrY9m57uL624mPFidQ4=
Subject key identifier:   57:3D:96:97:D2:F8:4C:4F:46:FA:0C:F6:23:CE:3D:23:03:2F:71:C6
Authority key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
Certificate issuer:       /CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Certificate serial:       019E2ADE44EC13C61DB3BB237355E0EF3792
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
Manifest number:          190E
Signing time:             Fri 15 May 2026 09:01:09 +0000
Manifest this update:     Fri 15 May 2026 09:01:09 +0000
Manifest next update:     Sat 16 May 2026 09:01:09 +0000
Files and hashes:         1: FRyXsiFg-6BIhEw2ARWH0DNGSnM.roa (hash: HOwOr4bTuIB/KNZWR5lcxrrwlrEvRwNSNG9O5oAt0bs=)
                          2: M_VtU7f5fPlDKkVKH-oBTR-MfOc.roa (hash: INw4W70ov+0DIQom+PoiFmtJQ/A7yUcxsfN1Ujem6fA=)
                          3: kkaW2PybyMFtKIudjGW5zNwrUVA.roa (hash: q2dHdK2+xshlUtyI1McPweg9tnAFSg39WkJ96aCsEe8=)
                          4: pS_GDTbii7jfFFyErKsZz6U7Alo.crl (hash: CHlM7KFcmpPaDegSYh2TgvFCvPZFhKVmsLVMaVpvTZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 09:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:de:44:ec:13:c6:1d:b3:bb:23:73:55:e0:ef:37:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
        Validity
            Not Before: May 15 09:01:09 2026 GMT
            Not After : May 16 09:01:09 2026 GMT
        Subject: CN=573d9697d2f84c4f46fa0cf623ce3d23032f71c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a8:76:12:ce:c2:e2:28:ee:4f:d2:5a:99:27:
                    8b:cb:0f:b1:c6:ef:2c:5d:76:e7:06:78:09:1f:0f:
                    23:38:93:eb:b7:d7:7a:a9:87:b3:57:53:c5:cd:41:
                    4f:8b:14:b2:0d:a3:ef:7b:0b:72:b3:52:d2:ca:bf:
                    8a:2e:33:9f:5a:b5:07:b9:da:0a:28:8c:4e:d0:0c:
                    b6:08:17:9e:e6:a4:18:fd:d4:0c:9a:65:70:b2:bd:
                    81:cc:c8:ff:92:bf:90:52:79:61:1f:5c:f7:9c:f8:
                    9e:e5:49:30:2f:39:4e:07:3f:d9:d3:0e:ab:f7:fe:
                    92:5f:cd:7f:32:03:52:7a:89:a1:7a:4a:f3:64:9d:
                    ec:92:2c:26:6b:54:b7:e8:7c:1e:6f:fa:5b:71:87:
                    27:12:88:3e:fd:7b:21:82:5e:d7:79:69:4c:6d:32:
                    fe:f4:05:9f:8b:20:e8:75:37:e1:83:b7:76:39:76:
                    9a:7b:ce:bf:34:c0:93:96:c8:84:0d:a1:2b:b5:f8:
                    d1:0b:71:6a:ef:f6:e6:92:cf:04:c8:4e:63:e5:4b:
                    8e:92:00:8b:ff:35:c1:34:6e:11:49:f1:90:f9:8e:
                    30:8e:0d:7c:5a:38:c4:31:89:74:c9:f1:ea:36:29:
                    ff:1e:03:f7:ee:86:5d:a3:11:de:9e:4e:41:4e:c3:
                    6d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3D:96:97:D2:F8:4C:4F:46:FA:0C:F6:23:CE:3D:23:03:2F:71:C6
            X509v3 Authority Key Identifier:
                keyid:A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:29:83:b0:dd:70:52:b0:b1:79:56:0b:c6:f2:8a:5a:18:2f:
         fa:1a:31:61:8b:bb:e8:38:f8:37:b6:dd:da:74:e6:d4:e3:d2:
         b9:6e:f6:03:6c:c4:30:68:16:ee:7f:44:a4:2f:66:9e:0f:72:
         07:4c:ab:f9:4a:1d:2c:e1:5d:6d:cf:ea:e1:8d:5e:a0:1a:8e:
         36:75:9e:eb:95:e7:52:13:99:be:ce:ee:9c:43:43:28:dc:49:
         a4:ad:15:b4:3c:50:c4:f8:4b:ee:42:c3:5b:1f:70:0f:08:01:
         59:7e:55:3e:91:91:31:d9:d8:d5:10:32:92:7a:2c:ad:5d:3f:
         52:70:a0:84:01:7c:38:fe:f2:28:ae:71:60:21:10:af:e6:67:
         e4:f4:58:55:34:1b:ba:d9:32:ad:2f:35:75:c1:97:18:52:35:
         04:d3:54:3e:60:7a:60:58:39:dc:4a:dc:1d:1a:23:8e:01:54:
         96:6c:41:e7:f1:85:04:2e:ff:5c:87:cd:6a:5e:8a:bf:48:84:
         fd:1d:9b:d1:06:bf:fa:be:3f:64:7c:4a:8d:67:86:bf:a2:3f:
         4a:b7:aa:89:41:30:e7:56:e0:2a:8a:33:a1:6c:f1:58:4f:c0:
         02:15:11:54:b7:86:6b:fd:31:4c:91:08:11:e0:ff:e2:38:b0:
         c2:4c:d8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 14:03:40 2026 by rpki-client