Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
File:                     GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft (raw, json)
Hash identifier:          udLkTfeeLFH5j3li4oT2L8bmWxlkV5lHH/pILTfsY0g=
Subject key identifier:   06:E2:AA:FB:C7:03:2C:4B:92:BE:7F:CD:4F:17:C9:5C:92:0A:EF:6A
Authority key identifier: 19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
Certificate issuer:       /CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Certificate serial:       019E20C86DE883BAABD4128AC0C551411EB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
Manifest number:          07E4
Signing time:             Wed 13 May 2026 10:01:06 +0000
Manifest this update:     Wed 13 May 2026 10:01:06 +0000
Manifest next update:     Thu 14 May 2026 10:01:06 +0000
Files and hashes:         1: FiXFwvxiV6Y1ajHORGAWiqcT-Y4.roa (hash: Zs2NR7v6cxcECJIbaIPTJM9/Q7GTHlESDly+5o8OUyM=)
                          2: GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl (hash: 0W8HE/9jalPk0DFff25/25sJiLqqR5CgmIBtleJlwGw=)
                          3: aCTYERjrsgQgd2eNcJ-xT6iLuVA.roa (hash: FSNpstLHIA+MgvTMObqgBgedN4krH4ykjVcUB8HPSAs=)
                          4: geaRxoLVhDcZBVyhdeOs-L3dqH8.roa (hash: v/gk2RC/o7m5zSWvAzxtnnzxEOoHq+kiZCoASoCUoYs=)
                          5: n_tsv6Gyy6l05YXi3Ux3ZNxYK4k.roa (hash: tTwofU2ePVTBmlzrQLu6MXi58L90+r8cW89IO3vj7uk=)
                          6: oc64jGTa7tYBazn5B8iUtkhOiqA.roa (hash: RFnqxJshGlA8TNiqCYqoYq6mvbEyQL7fumOe50DNmVk=)
                          7: vGG_tLkKXFgbXJfTRyLCvmDQxbE.roa (hash: WShGMkUZgE0y2ZoQYvE7mjCYcDN54oRSnCg5kaDhPTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:c8:6d:e8:83:ba:ab:d4:12:8a:c0:c5:51:41:1e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b390b62d09950d500cd6bbbd78d0390560ec42
        Validity
            Not Before: May 13 10:01:06 2026 GMT
            Not After : May 14 10:01:06 2026 GMT
        Subject: CN=06e2aafbc7032c4b92be7fcd4f17c95c920aef6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6b:88:62:b6:f8:33:40:f5:83:42:0a:fc:1c:
                    08:49:78:28:ce:44:4f:87:0c:7e:89:1c:bb:21:ae:
                    a5:a5:ed:d3:c6:5c:94:75:a6:56:a1:cf:ab:d5:b4:
                    ac:ea:48:74:4a:1e:c3:57:18:03:89:4a:41:9b:be:
                    16:48:c1:a4:aa:b3:70:44:20:80:e3:b6:4e:0a:23:
                    f9:cd:d3:9d:ef:d7:0a:70:ee:c3:8c:6d:3a:4b:b4:
                    a6:a4:b7:35:e3:d8:1e:4f:fc:ab:e3:ef:b2:f4:32:
                    a5:b6:14:cb:16:5c:cc:58:1c:24:28:d1:2a:48:c7:
                    ea:2f:23:1f:68:ef:95:73:d3:0b:ed:12:d6:a1:c8:
                    f1:8a:ac:d1:6c:ea:43:1c:46:13:dd:00:5f:7c:fd:
                    66:40:d1:16:d0:25:77:cb:0e:6e:a3:90:c3:3f:d3:
                    0c:a1:8a:10:10:42:c6:d2:3e:c4:55:a5:78:6c:52:
                    27:7d:89:05:c7:d1:2c:70:ff:5d:d1:05:d6:c5:35:
                    49:a4:47:40:45:c2:d1:19:46:76:a3:40:d3:33:20:
                    1b:b3:91:db:ee:52:c7:b9:fd:ac:cc:49:32:62:0d:
                    f7:5b:66:e9:8e:3f:d7:db:86:bc:a0:a5:12:94:5f:
                    2b:0e:8a:cd:4a:3a:8e:49:95:1e:4b:f7:cb:83:99:
                    50:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E2:AA:FB:C7:03:2C:4B:92:BE:7F:CD:4F:17:C9:5C:92:0A:EF:6A
            X509v3 Authority Key Identifier:
                keyid:19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:57:93:52:4c:a0:5f:52:23:99:35:88:62:36:a5:93:d9:3e:
         a6:34:02:76:05:5d:d5:b1:14:58:54:cd:36:aa:bc:8d:fb:52:
         4b:42:96:28:a6:62:9a:6b:66:b9:ee:1f:c3:6d:0c:03:3c:12:
         5c:0a:aa:6a:72:43:bd:be:ca:e2:69:ff:5f:a1:99:37:7d:0a:
         88:29:e6:6c:49:15:65:da:53:67:78:8c:76:26:27:9d:db:0f:
         5a:41:10:45:52:58:32:b0:af:8b:70:50:61:b8:60:e3:c6:f5:
         2e:f1:32:c8:ff:8c:73:66:28:5e:27:7f:f2:58:01:1f:bd:2c:
         45:09:21:c7:f8:5a:0e:47:f2:1d:d9:fb:b8:05:71:cc:19:52:
         ae:4e:57:28:f1:72:c2:1f:cd:cb:a0:f2:09:be:d0:2d:ee:f5:
         bf:bb:e1:69:c7:37:3a:bf:8b:ed:f7:11:04:58:cf:da:89:ea:
         fa:30:8c:80:65:94:ec:87:88:27:63:a7:d5:53:0e:d0:6c:39:
         38:24:54:91:80:fc:b6:5d:13:ae:f6:e7:29:53:69:61:ad:a9:
         4c:0a:a6:5e:88:25:c9:18:c0:fb:76:b2:2a:e1:13:2a:4d:ac:
         29:4e:6f:37:26:4a:0d:79:65:d6:c7:fb:fa:7c:2f:16:c1:88:
         ec:84:4b:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gyG3og7qr1BKKwMVRQR6wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YjM5MGI2MmQwOTk1MGQ1MDBjZDZiYmJkNzhkMDM5MDU2
MGVjNDIwHhcNMjYwNTEzMTAwMTA2WhcNMjYwNTE0MTAwMTA2WjAzMTEwLwYDVQQD
EygwNmUyYWFmYmM3MDMyYzRiOTJiZTdmY2Q0ZjE3Yzk1YzkyMGFlZjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22uIYrb4M0D1g0IK/BwISXgozkRP
hwx+iRy7Ia6lpe3TxlyUdaZWoc+r1bSs6kh0Sh7DVxgDiUpBm74WSMGkqrNwRCCA
47ZOCiP5zdOd79cKcO7DjG06S7SmpLc149geT/yr4++y9DKlthTLFlzMWBwkKNEq
SMfqLyMfaO+Vc9ML7RLWocjxiqzRbOpDHEYT3QBffP1mQNEW0CV3yw5uo5DDP9MM
oYoQEELG0j7EVaV4bFInfYkFx9EscP9d0QXWxTVJpEdARcLRGUZ2o0DTMyAbs5Hb
7lLHuf2szEkyYg33W2bpjj/X24a8oKUSlF8rDorNSjqOSZUeS/fLg5lQLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbiqvvHAyxLkr5/zU8XyVySCu9qMB8GA1UdIwQY
MBaAFBmzkLYtCZUNUAzWu7140DkFYOxCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iMzE1ODYtMzU2Ni00N2IwLTk1Y2Mt
MTQ0ZDc0NzNlYTU5LzEvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9iMzE1ODYtMzU2Ni00N2IwLTk1Y2MtMTQ0ZDc0NzNlYTU5
LzEvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq1eTUkyg
X1IjmTWIYjalk9k+pjQCdgVd1bEUWFTNNqq8jftSS0KWKKZimmtmue4fw20MAzwS
XAqqanJDvb7K4mn/X6GZN30KiCnmbEkVZdpTZ3iMdiYnndsPWkEQRVJYMrCvi3BQ
Ybhg48b1LvEyyP+Mc2YoXid/8lgBH70sRQkhx/haDkfyHdn7uAVxzBlSrk5XKPFy
wh/Ny6DyCb7QLe71v7vhacc3Or+L7fcRBFjP2onq+jCMgGWU7IeIJ2On1VMO0Gw5
OCRUkYD8tl0TrvbnKVNpYa2pTAqmXoglyRjA+3ayKuETKk2sKU5vNyZKDXll1sf7
+nwvFsGI7IRLfA==
-----END CERTIFICATE-----
Generated at Wed May 13 16:13:47 2026 by rpki-client