Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
File:                     Gk-AAcMMrFRuP5IQO0sScy38v1I.mft (raw, json)
Hash identifier:          xR/Sjhpx8bvE/ZDqWivwNMpMhPnPf34pkWEIZdWZBHg=
Subject key identifier:   0E:CD:F9:07:F3:6B:DB:85:FB:4B:1B:BD:E4:CF:DD:AD:BA:FC:C9:74
Authority key identifier: 1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
Certificate issuer:       /CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Certificate serial:       019E1D90D73D95D2BEA14E676377FBB2AD17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 19:01:31 +0000
Manifest this update:     Tue 12 May 2026 19:01:31 +0000
Manifest next update:     Wed 13 May 2026 19:01:31 +0000
Files and hashes:         1: BCswXhh13-96UzaS6jsy6o1xQtA.roa (hash: ZcV3c026LJ5PD6nm+askgP2WeXj6YnsPaEau8hz76oA=)
                          2: Bl5slAIXRPgWtIinsLCmL3-jbzk.roa (hash: i6BHS+hInLwE4GPTdlCdthLjEksUt9oFXu6hrkt0YCc=)
                          3: Gk-AAcMMrFRuP5IQO0sScy38v1I.crl (hash: ADG0kiB+IlvbM+NfwzVhwmQcXPmUg0u5nL/QWo9PkV0=)
                          4: MULF19ROPV0W_fTYRqeyOCt3Yeg.roa (hash: JLSm0NR2yp/7sLvwbHrccBHG0dmWFI9G+KuJqUy4oRE=)
                          5: osuY-cnY6vhLD6H1gcoPAxb709k.roa (hash: uqRcFkq6jjVYOzdkGQsiVwhb9Q+ozJsUHkALBpXOot0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:d7:3d:95:d2:be:a1:4e:67:63:77:fb:b2:ad:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
        Validity
            Not Before: May 12 19:01:31 2026 GMT
            Not After : May 13 19:01:31 2026 GMT
        Subject: CN=0ecdf907f36bdb85fb4b1bbde4cfddadbafcc974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:88:1f:c4:df:cd:93:5b:c4:49:1e:bd:af:
                    5e:cb:6a:4f:20:de:23:78:4a:46:52:0f:7d:54:e4:
                    2b:72:83:f0:7d:a7:0c:d9:72:f9:3d:db:fc:7d:50:
                    9c:de:02:a2:3c:72:1f:58:69:ba:76:a3:83:db:9b:
                    a2:12:96:e5:92:5b:bd:60:61:46:41:6f:ac:b6:17:
                    eb:b4:aa:14:da:e7:38:5c:e0:f7:4b:71:2d:a2:64:
                    81:1c:c5:1d:53:06:ce:00:e4:1e:d2:3b:7e:a3:27:
                    58:56:0a:0c:6c:f2:33:13:36:53:f5:2d:c9:3a:ad:
                    2e:35:f8:98:55:bf:5c:71:c5:55:7f:1b:f5:19:0a:
                    36:44:aa:03:f9:ee:82:52:98:a5:dd:18:61:4b:cf:
                    95:f4:6a:3a:fd:76:1e:e8:e4:74:61:1f:cd:f8:43:
                    04:83:cd:d9:51:8f:e9:d8:de:44:e1:ed:d0:8b:db:
                    6c:8a:e7:9c:97:a0:d6:19:52:42:22:87:cf:0b:88:
                    61:bc:25:d3:fb:1b:a3:86:29:ad:a6:3f:67:d4:e7:
                    fd:99:c8:af:53:52:f4:b1:91:2e:38:3f:c6:12:e5:
                    b7:92:4e:80:ad:e5:bc:4f:ef:80:fa:52:21:5f:54:
                    88:86:e6:fa:dd:e3:53:5a:0b:0f:2d:56:0e:2b:b0:
                    77:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CD:F9:07:F3:6B:DB:85:FB:4B:1B:BD:E4:CF:DD:AD:BA:FC:C9:74
            X509v3 Authority Key Identifier:
                keyid:1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:03:4d:95:ff:81:b1:e4:f2:d2:fb:e3:8d:08:17:b6:ee:fa:
         81:24:e0:82:88:52:30:4f:a7:1f:d1:1c:bd:9f:74:ea:5a:ab:
         bc:23:75:95:19:cf:30:d2:7f:1c:c7:dc:70:ca:af:70:f6:ad:
         97:14:cb:b6:c3:0a:4a:f5:94:50:78:0b:15:96:88:89:ec:d7:
         f7:6f:44:3c:72:8a:15:39:fa:94:d3:ce:2c:52:a4:01:ae:c1:
         b4:27:e3:b8:17:c6:8f:f6:29:57:3e:d3:45:0c:2b:c8:39:3b:
         7c:d8:3b:2f:2e:dc:4b:09:e6:d7:8d:5f:21:9e:96:f9:6c:02:
         1d:af:38:98:6c:54:8c:c6:55:9d:a0:cd:c3:79:17:a6:d5:3c:
         dc:8a:9a:8f:7e:2b:26:c1:de:70:a4:c5:ef:24:d4:0a:7a:41:
         3d:63:a4:86:ac:a3:6f:36:9a:fe:61:d2:54:79:9a:6a:b3:04:
         b4:59:4f:29:45:07:bf:2f:49:16:24:e6:e8:5e:1a:d1:9b:9b:
         60:0d:7a:1d:c7:59:5a:23:ea:a5:09:88:76:9a:ab:18:af:9b:
         5e:f1:0b:fe:28:14:c2:05:6f:b0:1e:3c:d0:9b:4d:8c:8a:e1:
         cf:f3:c5:aa:54:f8:84:41:6c:9a:61:59:a8:b9:f7:b0:04:35:
         24:c2:cd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:45:51 2026 by rpki-client