Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File:                     GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier:          wFSvS2L7YrYg7bvlKxLE8Co1JfsQu6kBdfNeC83dI0s=
Subject key identifier:   6D:75:89:88:1D:88:0E:A2:A7:61:22:49:BC:0F:AC:7A:5A:42:42:4B
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer:       /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial:       019FF9EC8F7AFDF2ABC0E4B6915FB92B7A87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number:          1990
Signing time:             Thu 13 Aug 2026 07:00:57 +0000
Manifest this update:     Thu 13 Aug 2026 07:00:57 +0000
Manifest next update:     Fri 14 Aug 2026 07:00:57 +0000
Files and hashes:         1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: tnJKw9Pae/zluF1rs40QbNETdmm12rA7xJo7YrMRkys=)
                          2: Z2umXdj8rXKQHGCd4mt2FC6IjeM.roa (hash: hNS38512ED5SaAduPnnfGixmvuVAAKqHK4KB5eSeNCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:ec:8f:7a:fd:f2:ab:c0:e4:b6:91:5f:b9:2b:7a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
        Validity
            Not Before: Aug 13 07:00:57 2026 GMT
            Not After : Aug 14 07:00:57 2026 GMT
        Subject: CN=6d7589881d880ea2a7612249bc0fac7a5a42424b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ea:31:c9:0d:9d:d8:a8:9a:19:d7:bc:1f:9d:
                    5b:37:c5:a7:8c:e8:7f:97:c2:ab:19:40:d2:a2:20:
                    51:c9:19:70:a5:a6:e5:f4:65:23:9d:82:0f:4f:34:
                    28:e2:10:4f:d3:18:9a:f8:51:99:35:28:4e:07:82:
                    d5:ca:a9:14:c3:af:82:e4:c7:1b:9e:e3:0d:85:3c:
                    a7:4b:15:03:07:9e:5f:4c:af:2c:d6:58:09:6f:e4:
                    07:9c:e7:87:97:ca:06:ef:94:b3:3a:1f:df:9c:10:
                    97:19:6a:44:4a:b0:21:d7:36:02:25:6e:49:49:a2:
                    1f:99:3b:49:e4:f1:54:7f:4d:75:7d:0d:1a:9d:ac:
                    94:96:61:19:19:d2:36:ee:e3:f2:38:44:46:fb:74:
                    9c:d8:64:1a:d5:11:88:99:01:54:f9:0a:14:3c:8a:
                    18:15:75:bd:73:74:66:1f:ea:a9:3f:74:75:52:d5:
                    56:36:e7:1e:09:31:3e:06:f4:e8:49:f4:6f:ec:f8:
                    b0:c8:e3:00:2a:50:40:96:e2:98:da:ed:5a:49:08:
                    62:dd:78:87:75:85:4f:32:5c:aa:15:8f:be:35:94:
                    1f:a9:ec:02:8c:dd:35:d2:75:7d:4f:df:6b:df:0f:
                    1b:9b:f5:60:36:fb:42:0b:8c:32:d2:2d:be:50:b9:
                    81:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:75:89:88:1D:88:0E:A2:A7:61:22:49:BC:0F:AC:7A:5A:42:42:4B
            X509v3 Authority Key Identifier:
                keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:4e:1e:8d:54:ab:69:54:48:c5:68:39:28:4c:7a:a4:24:a4:
         84:d6:fd:ab:62:91:bc:42:5b:ea:d2:02:40:5b:c1:db:a7:c5:
         d8:a5:9b:6d:70:1e:53:e9:93:d0:c1:72:8f:c7:5d:5f:7b:63:
         e9:7e:04:63:01:e4:bc:f4:eb:55:72:33:2c:65:aa:c3:62:4f:
         78:9e:eb:59:33:3f:76:28:7d:66:dd:4d:75:20:b3:14:af:87:
         38:cc:00:d0:18:7d:41:1d:da:38:b4:1c:29:fe:6d:62:c8:29:
         fc:8e:b0:64:8b:ac:90:6a:e1:5b:40:4d:61:5a:5e:22:d4:04:
         d1:be:b1:39:32:43:7d:9a:57:4b:29:e2:cb:09:bf:ad:36:de:
         11:55:f5:d0:9b:86:0f:77:e7:2a:12:6d:6a:61:e4:9b:25:b1:
         8b:6b:05:c1:9c:ef:63:f7:0b:b6:27:90:2f:af:83:fb:be:e6:
         af:98:d5:b6:a1:2c:03:16:63:16:4a:ef:9f:95:a6:8f:3d:c3:
         59:71:da:2e:f6:a8:b3:e2:aa:0d:9f:f4:85:ff:4d:85:b1:2e:
         56:ea:09:3b:8b:2a:03:89:c8:10:04:69:e7:f5:4e:b2:5e:ed:
         91:73:33:c9:d6:93:9d:b5:4e:f2:10:4b:92:5d:97:e5:52:bb:
         e2:44:cc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:00:19 2026 by rpki-client