Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File:                     GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier:          I/i4O6CTZeC1afhPeN9k+KeFLLKPROlj4T+p9sgfBNs=
Subject key identifier:   72:CE:D1:20:01:B5:4A:84:6D:E6:76:1F:B9:39:FD:9E:9F:9D:BB:23
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer:       /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial:       019DFFF3D7CD15EBFEF6B8ADD302BAA2A484
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number:          188A
Signing time:             Thu 07 May 2026 01:01:03 +0000
Manifest this update:     Thu 07 May 2026 01:01:03 +0000
Manifest next update:     Fri 08 May 2026 01:01:03 +0000
Files and hashes:         1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: DmZMjxK044QUgOJ998vXnwOqDMZaTyNOgtdUzkzWlRw=)
                          2: Z2umXdj8rXKQHGCd4mt2FC6IjeM.roa (hash: hNS38512ED5SaAduPnnfGixmvuVAAKqHK4KB5eSeNCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 May 2026 21:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ff:f3:d7:cd:15:eb:fe:f6:b8:ad:d3:02:ba:a2:a4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
        Validity
            Not Before: May  7 01:01:03 2026 GMT
            Not After : May  8 01:01:03 2026 GMT
        Subject: CN=72ced12001b54a846de6761fb939fd9e9f9dbb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:07:f1:9e:2c:40:dc:2f:c5:49:7f:e7:f7:e6:
                    93:c6:67:83:26:ca:20:80:7b:4f:e9:a7:5d:19:b5:
                    87:28:b2:fb:b5:a9:60:f7:d2:15:5e:20:1d:9d:54:
                    7e:be:18:44:bd:48:28:c3:8a:cb:0a:ac:4d:02:a8:
                    d3:9f:45:79:bf:de:4c:2b:67:70:6a:54:30:09:ef:
                    b6:7d:b8:2d:18:78:8f:00:73:9b:a7:96:41:a3:18:
                    a9:53:2d:4a:55:80:08:ff:07:c8:54:8a:66:d8:b7:
                    bf:86:f6:93:4e:dc:28:59:c8:5d:84:1f:38:06:79:
                    3f:dd:53:26:ed:e9:ac:70:6a:af:c6:b1:7a:68:f7:
                    8e:e3:90:b4:9f:3d:81:d1:e8:b2:58:e7:e4:40:e6:
                    fd:d1:c5:e0:89:5d:38:71:c1:54:d4:29:5f:cf:79:
                    ed:55:96:ac:21:80:ea:d3:41:6c:2a:bd:0e:60:b4:
                    a1:97:f4:43:6e:76:d4:e6:7f:b4:cd:41:13:fb:c5:
                    1a:71:fc:ea:30:5a:94:b0:fb:c9:07:40:90:a2:ce:
                    ce:2f:49:d1:20:e3:4a:18:3a:48:a0:d3:06:c0:46:
                    78:d4:29:d8:98:27:d3:33:75:e7:a0:6f:34:a1:d0:
                    97:5f:ad:9d:db:3f:3f:fa:be:71:35:1f:1d:2d:0f:
                    95:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:CE:D1:20:01:B5:4A:84:6D:E6:76:1F:B9:39:FD:9E:9F:9D:BB:23
            X509v3 Authority Key Identifier:
                keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:fe:5e:7e:32:8a:31:bd:64:58:6f:53:a8:35:9a:ee:a6:de:
         14:c9:96:63:3c:ae:8f:f8:bb:17:67:37:f9:75:36:ec:7f:8f:
         19:62:32:95:cf:5a:97:b4:b6:03:63:8c:2f:c4:b0:e7:bf:28:
         7e:39:b9:31:83:65:ff:b8:19:ad:8f:d0:a7:86:4e:2f:9a:51:
         11:f9:a2:f7:2a:a3:85:e7:57:b1:0e:8d:6d:5f:59:cc:0f:3b:
         70:d4:4a:87:09:b9:a1:47:29:c0:c5:f0:16:38:07:29:ef:b0:
         5c:fa:a2:51:cc:da:25:3b:5f:a5:b7:59:fc:9e:af:24:db:6a:
         f9:d9:6f:9f:38:5f:2f:f9:13:6b:99:4f:26:6c:c5:ae:02:3d:
         4e:87:0d:80:10:3b:84:43:e5:4f:26:50:5e:37:1f:28:c4:b0:
         74:b7:ce:e9:b6:2e:85:91:c4:13:10:66:99:ff:21:c5:55:5f:
         87:ea:82:3e:52:5b:0c:f7:bf:17:a8:26:05:f1:86:1c:1f:7d:
         a3:5f:2b:f4:5a:ab:fa:ff:87:58:41:dc:95:ba:17:31:04:63:
         cb:ad:b2:e1:b7:04:2e:69:9a:0c:7f:f1:c5:e2:6b:80:f0:5d:
         7a:1e:98:7b:00:47:fe:b6:fa:f3:0e:84:12:68:8d:d3:92:fe:
         8e:77:84:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 06:30:02 2026 by rpki-client