Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
File:                     gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft (raw, json)
Hash identifier:          jn1EEDxzIQHbltSkUplPJPzb4/zJ9xDPb//45w2140w=
Subject key identifier:   D2:B1:D8:A4:8A:70:C5:5E:51:3B:C5:8D:14:0D:68:E8:6C:F1:FD:99
Authority key identifier: 82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1
Certificate issuer:       /CN=8293905afa134944f0630c949f3abda40646dac1
Certificate serial:       019E3072F56EA13DFEFFF7E1633B5D028928
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
Manifest number:          1914
Signing time:             Sat 16 May 2026 11:01:40 +0000
Manifest this update:     Sat 16 May 2026 11:01:40 +0000
Manifest next update:     Sun 17 May 2026 11:01:40 +0000
Files and hashes:         1: ATLOmeA5cf4AwJ9U-Q-N1ldTcPE.roa (hash: hnP5uN1NwwvHi/WK/M6S1b6bdfJWGxirQCx3zSYRXtM=)
                          2: gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl (hash: K4n8/T+CKzUBO1N9d2nEi0LvhAQKpNLJwh7VzrOcGzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:f5:6e:a1:3d:fe:ff:f7:e1:63:3b:5d:02:89:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8293905afa134944f0630c949f3abda40646dac1
        Validity
            Not Before: May 16 11:01:40 2026 GMT
            Not After : May 17 11:01:40 2026 GMT
        Subject: CN=d2b1d8a48a70c55e513bc58d140d68e86cf1fd99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ad:e7:74:df:dd:a5:fe:6a:51:86:0a:a1:a6:
                    f8:e0:81:38:28:67:01:3a:f8:ae:f2:7f:9b:19:d0:
                    78:04:96:fc:5f:c6:80:d2:5b:e0:b9:8e:ca:57:82:
                    73:2e:ec:cc:9a:70:6f:9f:9a:be:f7:7a:e5:08:42:
                    f2:a6:27:f2:21:3a:9d:37:2f:ca:a8:36:f1:25:d3:
                    c7:54:ee:0f:f5:a1:72:37:b2:58:30:84:f6:95:88:
                    1a:ab:f2:91:48:ca:1e:e7:24:4d:2b:37:23:61:ce:
                    64:36:ca:db:ac:fc:57:35:ab:8b:68:ae:4f:22:05:
                    d3:38:8e:a9:69:1e:d6:43:2a:91:da:73:d2:76:db:
                    e1:02:d5:f3:11:d2:53:17:e9:be:50:79:8f:6e:de:
                    d9:dc:69:5f:e8:e3:2a:97:b9:ee:38:b1:1a:23:d6:
                    70:93:fe:aa:0d:f7:5f:08:ad:19:7a:aa:6a:06:27:
                    41:af:77:4a:86:db:c1:fa:d6:27:a4:94:2a:01:ca:
                    03:05:b2:0a:36:70:fb:cf:3c:ea:86:e2:c5:59:bd:
                    03:5c:b2:c7:2a:d7:77:94:0a:65:28:5a:ba:b2:16:
                    cf:4a:27:32:9d:e5:b3:46:63:36:f4:32:b6:3d:c3:
                    f8:2f:23:6d:67:64:fb:fc:81:1e:19:6c:b8:25:11:
                    da:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B1:D8:A4:8A:70:C5:5E:51:3B:C5:8D:14:0D:68:E8:6C:F1:FD:99
            X509v3 Authority Key Identifier:
                keyid:82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:56:13:fa:e8:88:73:52:54:6b:02:4d:91:56:a5:53:38:06:
         68:fc:3b:87:51:75:f4:62:b2:8f:ba:21:22:d3:ff:48:73:41:
         0b:d7:81:55:00:6b:9f:bc:78:c5:d8:33:c0:05:fe:c3:eb:e2:
         6f:02:c1:51:a5:3f:4d:47:df:c7:f2:bd:84:b5:ec:87:d7:89:
         f7:d5:bc:39:2d:40:71:15:51:02:5d:38:9a:e7:1d:44:4d:46:
         79:b7:f2:b8:33:cd:cb:3e:23:30:58:d9:45:32:04:44:61:44:
         48:5a:a9:39:4e:5a:9e:3b:3e:f0:6e:d0:6c:d0:cd:e1:e6:30:
         b3:92:2c:b0:c3:46:a2:fe:23:e5:d1:d6:75:66:f3:31:3b:0f:
         8f:be:62:00:a0:27:59:a7:ed:2c:04:01:fa:91:c3:0e:07:30:
         e9:ce:c9:84:96:92:ff:11:20:55:ff:3f:5f:ac:99:58:31:8b:
         ab:32:40:e5:e3:4c:a0:bb:f3:c5:79:4b:e7:ba:33:03:d5:a5:
         9e:82:d4:cc:1a:59:56:1c:cf:61:c6:75:c6:46:d6:9b:98:d0:
         d2:39:4e:0e:2e:70:3c:d5:fd:f3:56:60:3b:11:bc:fe:06:bc:
         09:1f:28:82:d4:45:d0:c0:43:ea:99:5b:f1:23:58:31:0c:a0:
         57:70:ce:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:14:24 2026 by rpki-client