Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
File:                     gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft (raw, json)
Hash identifier:          QT4OPGTFZE4HJ3NwUUn/FWAjxUSjt7u8cwCg399Iw5Q=
Subject key identifier:   7B:A8:F2:CE:13:2C:6E:CE:1F:1C:9B:0F:BD:4D:C7:84:97:28:39:D3
Authority key identifier: 81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
Certificate issuer:       /CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Certificate serial:       019E28EFD103E7F7C60D3BB58AF1C8F67B85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
Manifest number:          1095
Signing time:             Fri 15 May 2026 00:01:05 +0000
Manifest this update:     Fri 15 May 2026 00:01:05 +0000
Manifest next update:     Sat 16 May 2026 00:01:05 +0000
Files and hashes:         1: 1-0ESjCcBgJ9ilRz4WpnDiMgllHI.asa (hash: HPraMMTMSnrRxM+nmnBuJokSt3AldiyftyO21H+JBCM=)
                          2: U0VXVBNH_sq5iJd2GKeaUQVKrlM.roa (hash: 9SxTMnA/ARh1HjLKf0PfWKa0umnzt2pBGbzQr2CW6PA=)
                          3: gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl (hash: arho7hpuoqjBxN+VNFjzzGEMR3WaEzExk/AwcYuTkBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 00:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:ef:d1:03:e7:f7:c6:0d:3b:b5:8a:f1:c8:f6:7b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
        Validity
            Not Before: May 15 00:01:05 2026 GMT
            Not After : May 16 00:01:05 2026 GMT
        Subject: CN=7ba8f2ce132c6ece1f1c9b0fbd4dc784972839d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fd:3c:d2:7b:07:02:60:e7:2f:1f:8a:46:67:
                    ae:be:0b:fa:a1:9a:69:ee:8b:50:2d:14:e8:b8:9b:
                    b5:b3:2d:55:ca:3f:e9:7e:d2:6f:e1:ab:48:fa:ec:
                    72:d0:61:63:9c:22:ce:ed:a2:d8:16:0e:15:69:9e:
                    ae:93:27:14:52:fd:61:17:5f:3b:33:60:11:84:bc:
                    2f:66:e0:7d:4b:67:68:8f:af:52:00:4a:83:2f:d4:
                    93:df:ba:72:f3:6c:e4:66:62:86:36:cd:5a:92:d8:
                    4e:05:b8:b1:f1:78:51:e6:ed:45:49:a9:de:64:d1:
                    f3:ec:3e:71:57:77:c5:56:82:99:10:57:9f:89:70:
                    ca:e9:c7:0b:33:62:1a:87:dc:37:e1:a7:48:44:e9:
                    ca:44:ed:08:31:0d:60:9f:8b:1b:aa:d3:69:4d:dd:
                    9b:37:22:88:51:5a:3e:bf:08:cc:48:cf:7e:15:d4:
                    d3:1f:ee:7c:99:22:6e:30:f3:e7:bb:ad:91:b7:72:
                    21:13:c6:72:0d:80:b4:25:69:68:75:d8:a7:53:27:
                    64:0a:3a:93:23:69:34:4f:5d:5a:dd:f3:58:73:c7:
                    8b:6b:46:3c:b1:fb:db:e9:3a:30:ea:a6:22:b8:d9:
                    e3:0c:08:74:07:02:69:67:38:d7:86:c6:23:82:6a:
                    33:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A8:F2:CE:13:2C:6E:CE:1F:1C:9B:0F:BD:4D:C7:84:97:28:39:D3
            X509v3 Authority Key Identifier:
                keyid:81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a8:c1:0c:d1:4b:e9:65:52:0b:79:67:96:11:df:42:fe:c4:
         57:a2:3a:6f:8a:03:4f:ae:24:15:4c:4d:c6:0e:a0:92:4d:00:
         a2:bf:54:7e:58:01:ff:57:8b:0b:78:37:23:64:02:f9:c9:da:
         57:4a:f4:42:b0:72:a4:51:06:59:9e:c2:ce:0b:a4:72:57:16:
         d8:40:8f:fb:63:46:19:3e:f2:77:f7:13:3b:95:75:61:fc:dd:
         4d:90:75:28:e7:28:fd:16:f3:f3:91:a3:fc:3d:45:48:30:79:
         ac:d1:a7:c1:7d:4e:54:c3:74:16:71:8c:6d:76:db:9e:34:b6:
         4e:f8:01:d6:ac:42:df:50:4a:3b:78:a7:3d:67:0f:1c:b2:06:
         d7:b5:66:40:e2:33:5a:3a:3f:b6:ee:2a:e4:30:6f:e3:f2:bc:
         4b:3b:f7:6f:4a:8b:76:14:c5:43:41:7b:73:e8:ac:e6:b9:b4:
         11:c1:5d:c9:7f:95:50:7e:8e:94:93:13:a2:0d:72:f2:ae:b5:
         ba:9a:0c:6e:38:df:64:c6:ca:98:92:be:9c:84:cf:d1:e8:92:
         5b:2c:5b:43:83:48:31:06:1f:64:5c:d0:ca:ee:f4:59:b2:9b:
         4a:c8:79:a8:e7:86:c3:47:d9:e6:ef:c9:ac:6e:59:0e:c4:a8:
         72:56:a1:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4o79ED5/fGDTu1ivHI9nuFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxODEyMzg1YjgyZGRhMGZkNDgyNmFiYjdhZWZlYjBkZjNl
YjhmZmQwHhcNMjYwNTE1MDAwMTA1WhcNMjYwNTE2MDAwMTA1WjAzMTEwLwYDVQQD
Eyg3YmE4ZjJjZTEzMmM2ZWNlMWYxYzliMGZiZDRkYzc4NDk3MjgzOWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP080nsHAmDnLx+KRmeuvgv6oZpp
7otQLRTouJu1sy1Vyj/pftJv4atI+uxy0GFjnCLO7aLYFg4VaZ6ukycUUv1hF187
M2ARhLwvZuB9S2doj69SAEqDL9ST37py82zkZmKGNs1akthOBbix8XhR5u1FSane
ZNHz7D5xV3fFVoKZEFefiXDK6ccLM2Iah9w34adIROnKRO0IMQ1gn4sbqtNpTd2b
NyKIUVo+vwjMSM9+FdTTH+58mSJuMPPnu62Rt3IhE8ZyDYC0JWloddinUydkCjqT
I2k0T11a3fNYc8eLa0Y8sfvb6Tow6qYiuNnjDAh0BwJpZzjXhsYjgmozYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuo8s4TLG7OHxybD71Nx4SXKDnTMB8GA1UdIwQY
MBaAFIGBI4W4LdoP1IJqu3rv6w3z64/9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEt
ZGEyZWM4Y2ZiODg4LzEvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEtZGEyZWM4Y2ZiODg4
LzEvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6jBDNFL
6WVSC3lnlhHfQv7EV6I6b4oDT64kFUxNxg6gkk0Aor9UflgB/1eLC3g3I2QC+cna
V0r0QrBypFEGWZ7CzgukclcW2ECP+2NGGT7yd/cTO5V1YfzdTZB1KOco/Rbz85Gj
/D1FSDB5rNGnwX1OVMN0FnGMbXbbnjS2TvgB1qxC31BKO3inPWcPHLIG17VmQOIz
Wjo/tu4q5DBv4/K8Szv3b0qLdhTFQ0F7c+is5rm0EcFdyX+VUH6OlJMTog1y8q61
upoMbjjfZMbKmJK+nITP0eiSWyxbQ4NIMQYfZFzQyu70WbKbSsh5qOeGw0fZ5u/J
rG5ZDsSoclahRg==
-----END CERTIFICATE-----
Generated at Fri May 15 07:02:18 2026 by rpki-client