Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
File:                     gHmvy6Wodi-3n05eDXo17oTNPfQ.mft (raw, json)
Hash identifier:          6w9smyepum6bk7NFyVkuXRi7hAavOrlUgzHWa+Yq9ts=
Subject key identifier:   4B:98:06:61:3A:E7:6F:EC:21:91:CB:E2:36:37:9F:DF:68:A2:E8:42
Authority key identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
Certificate issuer:       /CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Certificate serial:       019E1ED9A72FFEB06C8A6F895D0CC0B3C874
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
Manifest number:          0F83
Signing time:             Wed 13 May 2026 01:00:40 +0000
Manifest this update:     Wed 13 May 2026 01:00:40 +0000
Manifest next update:     Thu 14 May 2026 01:00:40 +0000
Files and hashes:         1: 3WDU47d2fLscnSW7F3hgvaXG5ss.roa (hash: BfORbJGgiA+wWZ0EeMRYkEWvSYxDk7NkNvd7Q4xSZco=)
                          2: C5clDNKWWV0HBKYFKcpzORw8EhA.roa (hash: XUJvNLXyYDdL2C6nEB+rx6DsIA04Nnq77ZyzZhlVv1Q=)
                          3: E50tmVkqcKJ8hvkMgzElVUsN-nk.roa (hash: v6/X+2RH7lba53xOm7erhTp0p/yhNOGtKRcVvRlqm6o=)
                          4: gHmvy6Wodi-3n05eDXo17oTNPfQ.crl (hash: NQIW8/AsRpT6+5VsGYkb8cofCTe1zUH4lyfdF4zGQwU=)
                          5: ppKOK1k4bpVipnmImPdupSEmNC0.roa (hash: F13uVr28Hl5+Q/lhAirlIzj/fvyS+AXLflKOQ84sZ2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:a7:2f:fe:b0:6c:8a:6f:89:5d:0c:c0:b3:c8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
        Validity
            Not Before: May 13 01:00:40 2026 GMT
            Not After : May 14 01:00:40 2026 GMT
        Subject: CN=4b9806613ae76fec2191cbe236379fdf68a2e842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:08:4e:8b:6a:51:46:98:a4:00:5e:f2:c9:ab:
                    a6:45:a4:89:ed:19:10:01:67:e0:85:f3:b6:f6:62:
                    20:4a:3d:b4:1c:40:1d:59:4d:0e:e8:f2:ac:f1:a2:
                    aa:41:a7:5b:43:55:ad:7a:76:04:68:88:ee:65:43:
                    d5:31:4b:d0:4f:8b:91:d9:91:b2:dc:0c:b9:72:e5:
                    5f:0b:9b:a5:1c:60:b9:4c:85:ac:6c:b3:65:36:94:
                    e7:51:eb:f3:4e:c3:8c:ba:4d:b2:a9:9b:92:67:81:
                    3b:fb:9a:43:6f:69:18:c3:c4:eb:2a:fc:4a:5f:3e:
                    33:72:8f:57:14:d9:82:f0:31:5a:57:e2:db:9b:6c:
                    19:96:8c:6c:c5:9b:81:36:76:f5:45:a2:49:0c:d8:
                    22:ef:a0:a2:01:ce:13:f3:5c:c7:54:5b:5f:bb:5f:
                    e5:4b:b9:c1:88:aa:8c:f6:2c:e5:39:3f:31:95:a1:
                    0c:17:c1:02:e5:bd:6c:54:56:0c:4d:f6:f0:84:8d:
                    03:da:3a:d8:85:ca:31:26:71:10:1e:36:7d:0d:ab:
                    6b:12:08:c7:9d:65:94:07:37:f7:6f:c2:d2:7e:da:
                    a5:55:68:9a:bf:90:5b:34:4a:87:49:e9:10:65:e4:
                    ca:8f:57:e0:b8:40:1a:e7:5e:90:8c:51:3e:71:a3:
                    35:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:98:06:61:3A:E7:6F:EC:21:91:CB:E2:36:37:9F:DF:68:A2:E8:42
            X509v3 Authority Key Identifier:
                keyid:80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:64:14:c9:b6:88:34:5d:a3:55:29:e2:c1:f5:24:bc:0f:57:
         0b:91:7b:42:ff:1e:8e:a2:17:2d:75:22:ae:0e:20:bb:a5:5e:
         8c:62:5e:52:e8:d1:0d:6a:aa:d3:ba:30:7e:5a:11:ab:de:e9:
         04:d0:91:48:ab:49:b5:69:da:33:57:ff:5e:4c:eb:e0:10:c3:
         11:76:76:8e:a0:ba:87:cc:ca:65:c6:8b:d4:e0:96:3b:79:b1:
         7a:f6:7b:f6:cc:a8:f2:e8:f0:57:e8:27:42:85:a3:d8:1a:4e:
         29:4d:62:3b:26:2e:0e:25:96:58:16:59:71:a4:1b:ad:ca:c6:
         97:c6:6b:58:0f:5d:6a:db:ef:93:f0:cc:6c:ee:6f:67:8f:0f:
         8b:a8:61:31:05:e5:3b:83:c2:24:3f:ea:db:3b:30:78:5a:23:
         2d:a7:dd:7a:9e:c4:aa:78:e6:02:aa:99:14:a2:09:4d:80:67:
         09:e3:4e:60:cb:d7:70:ad:7a:5d:04:15:06:c3:93:a5:ad:61:
         71:db:bb:c5:3d:fb:5a:f6:90:d8:91:62:2f:17:17:67:d5:27:
         dd:cb:f8:b3:ea:52:59:e3:28:6b:15:47:4c:6a:b6:db:ad:c3:
         75:6b:5d:55:6f:d1:c7:66:29:3d:25:c2:ec:8e:34:18:4c:0c:
         3c:96:e6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:11 2026 by rpki-client