Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
File:                     gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft (raw, json)
Hash identifier:          qgK0DeHDY4aDGVxIUXWVwl40fbe2e2CH7bUahuIPmmE=
Subject key identifier:   F4:44:85:A2:0B:0B:5B:D1:5B:E8:7D:60:3E:DF:98:D9:28:E0:3D:9F
Authority key identifier: 83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74
Certificate issuer:       /CN=833a0b5594339aefe8b558e3729290b42bb1a974
Certificate serial:       019E314DF86491CDF036D459F492F6239D12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
Manifest number:          1289
Signing time:             Sat 16 May 2026 15:00:53 +0000
Manifest this update:     Sat 16 May 2026 15:00:53 +0000
Manifest next update:     Sun 17 May 2026 15:00:53 +0000
Files and hashes:         1: OJQiev2wZVG1ocXpX4-0xyIDLu8.roa (hash: P2/t8LDWw8ZhLGGXRvorDGL2cHxIBux66GV2OQKjLoE=)
                          2: gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl (hash: khrCEQ+Ey5rGEwWIl5ZDYL8QZepg6RpArEsATNSuOAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4d:f8:64:91:cd:f0:36:d4:59:f4:92:f6:23:9d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833a0b5594339aefe8b558e3729290b42bb1a974
        Validity
            Not Before: May 16 15:00:53 2026 GMT
            Not After : May 17 15:00:53 2026 GMT
        Subject: CN=f44485a20b0b5bd15be87d603edf98d928e03d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:79:3d:df:64:69:a3:2d:12:5c:e2:23:a3:20:
                    2c:eb:4c:10:73:76:e0:51:cc:58:1a:97:04:98:12:
                    72:9c:ca:ee:cf:3e:fb:27:95:fa:ff:5b:ac:0e:76:
                    e6:fc:fb:d2:3f:76:f5:16:19:ea:8d:b0:10:46:de:
                    f8:f8:06:e9:ca:df:57:f0:b5:62:be:d3:87:d4:33:
                    0b:fd:35:a2:b3:1b:9f:51:1a:c8:10:9d:c5:31:b2:
                    9b:a9:55:2d:ac:61:c9:d6:95:42:d0:70:34:33:41:
                    f9:37:56:69:21:9d:e8:34:26:a4:74:08:54:77:9c:
                    1d:87:fe:c6:5e:1a:3d:d3:34:54:d2:7b:63:cd:02:
                    ea:d1:f4:36:50:c8:ac:ad:4e:79:f0:9e:c5:27:59:
                    01:80:cb:f2:2f:8c:cc:ef:7e:46:b0:00:9c:d1:32:
                    16:50:d9:e5:9d:ba:9a:c4:bd:72:e1:b5:ac:6a:90:
                    49:85:b1:71:d6:b9:53:9e:a9:92:d4:cb:7f:e1:40:
                    d0:e6:32:c2:cc:1f:03:8c:89:d2:86:05:c2:d4:cc:
                    12:5f:c4:49:d7:31:b2:0f:d4:91:3a:7b:50:ed:8e:
                    5d:a0:92:90:bc:3d:bc:c2:8f:37:00:f4:92:64:c7:
                    cb:84:ae:bc:22:b3:e1:f4:75:fb:ae:20:d9:97:08:
                    92:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:44:85:A2:0B:0B:5B:D1:5B:E8:7D:60:3E:DF:98:D9:28:E0:3D:9F
            X509v3 Authority Key Identifier:
                keyid:83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a7:08:23:6f:3b:58:f2:94:62:06:c7:43:ae:fd:8e:04:5d:
         22:55:ea:64:a8:48:de:4b:42:af:58:36:63:48:04:e5:88:75:
         6e:b3:ef:ec:d6:b7:27:2f:65:aa:98:0e:5d:c9:36:08:5d:63:
         1c:41:63:41:6f:69:1f:c8:5e:72:bb:92:a6:07:a9:f7:48:5e:
         57:f6:98:cf:4e:99:3d:bd:e7:3b:02:d1:32:0f:53:8f:f0:66:
         f9:05:c9:6f:4d:c8:b4:9d:2c:e5:64:c3:11:bf:cc:b8:cf:c6:
         56:58:ff:38:86:29:69:6b:51:3a:5b:e1:27:e5:b9:a1:82:4d:
         51:17:23:61:be:bd:23:41:c3:fd:d8:c5:7e:b1:88:b2:8f:42:
         8b:43:4b:c0:70:4f:aa:01:a9:a6:1e:12:c0:b0:23:eb:17:6c:
         41:f2:a2:94:27:d3:b4:c8:4d:33:32:70:5d:3e:70:86:0f:3a:
         88:4e:ca:3d:ae:e5:91:9b:d0:22:36:29:82:d5:c4:27:a8:2b:
         28:5d:a5:76:d8:33:83:d1:ff:3e:3f:a2:60:f2:cc:93:53:c6:
         98:72:fa:05:e1:78:92:37:de:b7:fb:e7:06:b2:d4:96:b0:19:
         fb:9b:16:d9:82:ca:8e:54:d2:9e:17:f2:7a:27:db:76:24:cb:
         c4:f7:91:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:31:41 2026 by rpki-client