Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File:                     GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier:          8XCY5p9ASqiPgu/JgOAyeXkLfxNMh4ejQCBcvKQgNXU=
Subject key identifier:   57:5B:F0:D2:BA:DC:A7:6D:66:DD:3E:27:53:EE:97:FF:B1:50:80:35
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer:       /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial:       019EF9151F5207DD17AEF603CDF7D738C737
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number:          190B
Signing time:             Wed 24 Jun 2026 10:02:51 +0000
Manifest this update:     Wed 24 Jun 2026 10:02:51 +0000
Manifest next update:     Thu 25 Jun 2026 10:02:51 +0000
Files and hashes:         1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: oWLt9FLAtu0CyuA7amCuxvmoskhI6Oruu8p3Tif3KHw=)
                          2: Z2umXdj8rXKQHGCd4mt2FC6IjeM.roa (hash: hNS38512ED5SaAduPnnfGixmvuVAAKqHK4KB5eSeNCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 07:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f9:15:1f:52:07:dd:17:ae:f6:03:cd:f7:d7:38:c7:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
        Validity
            Not Before: Jun 24 10:02:51 2026 GMT
            Not After : Jun 25 10:02:51 2026 GMT
        Subject: CN=575bf0d2badca76d66dd3e2753ee97ffb1508035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:41:4f:f1:34:db:26:03:7f:10:60:7f:82:4a:
                    27:1c:b3:06:ab:d9:19:1b:c5:59:05:1d:92:8a:d3:
                    32:98:3b:8e:fa:b1:94:22:ab:c4:c5:94:76:5a:41:
                    19:b2:25:87:7e:9a:24:c8:32:c7:f4:34:7d:a6:88:
                    e6:72:f2:a8:c7:57:1c:92:88:11:85:2a:ec:f7:ef:
                    ed:8d:19:0b:87:83:f5:22:6a:b3:50:e2:5e:e6:be:
                    70:dc:30:69:a9:aa:35:e5:64:10:f3:ac:9f:22:1c:
                    5f:96:67:48:97:2b:60:eb:71:bc:73:ca:96:66:95:
                    cc:98:6a:2f:bf:78:82:bc:dc:5c:8f:00:7c:cc:94:
                    83:91:5f:e7:b3:67:6c:98:31:fb:91:0c:89:71:26:
                    96:39:84:f8:f5:e5:8e:bd:b6:ed:2f:dc:33:b7:1e:
                    9d:ab:e8:3a:de:36:b4:a7:94:0b:87:08:85:a5:90:
                    ab:9b:ef:bf:32:c7:54:3e:f6:4e:b1:cf:ad:07:13:
                    5d:29:bc:c7:88:18:ec:64:2b:82:c3:04:f6:25:21:
                    05:89:3e:03:a2:d5:c3:b2:12:1f:8b:e5:80:f9:37:
                    ed:70:12:25:bb:9c:fd:ae:d4:8a:00:f8:6c:ad:c3:
                    33:34:78:a3:dc:fc:bf:1b:f5:31:89:a7:13:7b:70:
                    b4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5B:F0:D2:BA:DC:A7:6D:66:DD:3E:27:53:EE:97:FF:B1:50:80:35
            X509v3 Authority Key Identifier:
                keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:37:12:2f:cc:af:e7:b1:41:2a:2a:df:dd:81:62:7f:0c:ca:
         16:98:c0:19:3d:09:03:dd:1f:20:9b:7b:fe:61:34:58:4a:92:
         69:ce:cf:c2:de:ba:cd:57:c0:b9:62:95:84:56:69:9a:2d:53:
         ac:31:fe:69:b7:46:9d:b9:3c:9b:f7:ce:80:3d:16:6d:5c:10:
         77:74:42:3b:7f:02:aa:68:c6:58:97:b0:f1:2a:f3:b2:a5:f4:
         5e:c7:19:13:55:c5:6e:39:47:6e:3d:2f:c6:38:83:ca:ce:39:
         13:91:8f:1b:91:4d:52:d3:b4:09:c0:bb:fa:3c:2d:2c:fb:02:
         bb:0b:94:cd:69:6f:bf:2d:3c:af:f3:c7:16:12:37:5f:2c:88:
         4f:72:7f:85:fb:42:82:2f:75:64:99:73:c8:12:52:d7:52:e1:
         06:d3:27:7e:9a:73:30:10:bd:bd:f3:35:c5:d0:d2:33:42:41:
         01:91:63:d2:20:56:0d:77:94:56:4e:a8:b4:36:b0:f7:e6:d6:
         43:3b:70:4f:8f:40:f3:01:53:8e:67:fe:4d:df:d2:f0:a4:ba:
         2f:fc:e7:8e:f7:64:61:8b:5c:61:0e:76:49:55:74:b1:87:dd:
         ea:6c:11:38:33:ff:60:73:98:22:7b:a2:6c:6a:84:62:18:ca:
         dc:20:44:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:03:08 2026 by rpki-client