Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
File:                     Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft (raw, json)
Hash identifier:          hDehUv0Slhhz5+wx/MnfX2Ha8BV9t2fm8rC16ZL5Tlo=
Subject key identifier:   C9:52:66:67:49:71:36:68:05:D0:16:B4:96:80:86:A1:43:4C:1D:B3
Authority key identifier: 1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF
Certificate issuer:       /CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
Certificate serial:       019E1F116CA632A13A8E7E195E18FD983F0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
Manifest number:          1909
Signing time:             Wed 13 May 2026 02:01:35 +0000
Manifest this update:     Wed 13 May 2026 02:01:35 +0000
Manifest next update:     Thu 14 May 2026 02:01:35 +0000
Files and hashes:         1: Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl (hash: BFkEYbommNZkMWzy2cXT1/dUTnz5AZ2hUS/2621UEVU=)
                          2: R5kKLGujwVyN11kdJlzsqOL8oRw.roa (hash: cDKxoErZto4JESswwKsE0Hav5uBoVZS9w/0qja84b7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:6c:a6:32:a1:3a:8e:7e:19:5e:18:fd:98:3f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
        Validity
            Not Before: May 13 02:01:35 2026 GMT
            Not After : May 14 02:01:35 2026 GMT
        Subject: CN=c95266674971366805d016b4968086a1434c1db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:ca:99:13:25:f5:1f:6d:c8:a8:39:69:71:
                    d0:78:39:b9:00:43:d5:31:ec:bc:e8:e6:87:3e:ae:
                    1f:99:85:fd:2d:00:b3:f7:19:13:0d:08:d6:37:3c:
                    3b:b5:7f:71:10:0a:8b:42:eb:4d:e3:fe:18:69:7f:
                    83:0f:e0:db:b5:9f:f6:b4:9f:06:26:34:74:81:01:
                    88:d0:ce:34:06:6a:8a:bc:ef:f6:42:83:6a:e3:32:
                    88:99:93:3e:34:8b:1b:11:07:2b:3a:2e:dc:57:26:
                    44:e6:0d:60:76:f2:b1:b5:d7:34:64:18:47:6c:76:
                    53:dd:24:99:c5:a8:23:d9:b4:b9:35:b0:16:49:3a:
                    92:d4:3d:2b:7b:74:b8:f3:f0:f2:5e:b9:7b:37:5d:
                    64:84:3d:37:c6:b5:14:61:b5:9b:63:a3:dd:60:83:
                    cc:5d:0a:91:f0:98:61:ad:a1:73:43:6d:f8:e0:42:
                    de:5e:22:36:19:d9:e7:1d:ed:46:1d:ff:23:e1:24:
                    12:e8:32:d5:21:79:b4:48:1c:8f:7a:43:83:71:65:
                    55:f9:87:f3:dc:85:a9:42:d3:83:88:6b:c2:70:c7:
                    48:e5:9c:37:d8:40:7e:66:14:ab:2b:42:78:6c:1e:
                    85:38:35:0d:c3:e1:0e:b5:3b:b4:e4:db:4f:65:33:
                    6b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:52:66:67:49:71:36:68:05:D0:16:B4:96:80:86:A1:43:4C:1D:B3
            X509v3 Authority Key Identifier:
                keyid:1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:16:8a:30:29:d3:03:21:36:67:d5:47:55:31:ba:a1:30:b6:
         79:3c:8f:ca:b7:f4:77:78:24:59:95:3a:69:bb:0a:d5:87:e9:
         e4:5d:20:88:f9:81:ad:03:6f:d5:47:9f:ca:4a:e5:fc:72:94:
         f2:b0:73:e8:b8:95:e3:70:13:56:af:78:77:78:1d:d4:c2:eb:
         d1:a6:30:ec:fd:39:5c:e7:69:af:2a:98:20:ff:f3:78:9f:90:
         9b:a2:3f:c3:49:f4:6c:1b:6e:0d:4d:2e:07:38:9a:26:56:37:
         11:65:73:6d:b3:c6:b6:2b:ec:e6:63:8e:89:f7:cd:7b:b6:0b:
         06:17:4a:a2:3f:67:f5:be:63:8b:61:7a:5a:b7:c8:d0:64:68:
         68:67:2f:ea:af:b9:ce:d5:bb:c0:97:f1:06:d8:9b:28:58:f9:
         a0:9f:ff:24:ea:57:57:ed:cf:55:35:27:c5:d3:0b:e6:ea:98:
         fd:b5:a7:e1:61:e0:ab:fa:68:fa:2f:fe:f9:30:0f:52:74:78:
         54:17:e5:88:90:b0:69:0b:24:7e:1e:06:b0:8b:c4:84:e4:aa:
         1c:31:e7:a1:dd:4d:83:a9:57:59:e2:56:6f:5e:bc:70:20:e8:
         1a:6e:a0:9f:42:dd:ba:91:96:52:ac:61:21:6d:51:57:f6:94:
         c7:7b:e1:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEWymMqE6jn4ZXhj9mD8LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhM2U5NzBlZDYyNzcxMzQzYTA5NmZmYjJlZmMyNmFiYjdl
ZDY4YWYwHhcNMjYwNTEzMDIwMTM1WhcNMjYwNTE0MDIwMTM1WjAzMTEwLwYDVQQD
EyhjOTUyNjY2NzQ5NzEzNjY4MDVkMDE2YjQ5NjgwODZhMTQzNGMxZGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1zKmRMl9R9tyKg5aXHQeDm5AEPV
Mey86OaHPq4fmYX9LQCz9xkTDQjWNzw7tX9xEAqLQutN4/4YaX+DD+DbtZ/2tJ8G
JjR0gQGI0M40BmqKvO/2QoNq4zKImZM+NIsbEQcrOi7cVyZE5g1gdvKxtdc0ZBhH
bHZT3SSZxagj2bS5NbAWSTqS1D0re3S48/DyXrl7N11khD03xrUUYbWbY6PdYIPM
XQqR8JhhraFzQ2344ELeXiI2GdnnHe1GHf8j4SQS6DLVIXm0SByPekODcWVV+Yfz
3IWpQtODiGvCcMdI5Zw32EB+ZhSrK0J4bB6FODUNw+EOtTu05NtPZTNrjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlSZmdJcTZoBdAWtJaAhqFDTB2zMB8GA1UdIwQY
MBaAFBo+lw7WJ3E0Oglv+y78Jqu37WivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZjcwOTItZTNhNC00NzBiLTg1YTUt
ZDQ4OTA5NGM2NjA0LzEvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8wZjcwOTItZTNhNC00NzBiLTg1YTUtZDQ4OTA5NGM2NjA0
LzEvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzxaKMCnT
AyE2Z9VHVTG6oTC2eTyPyrf0d3gkWZU6absK1Yfp5F0giPmBrQNv1Uefykrl/HKU
8rBz6LiV43ATVq94d3gd1MLr0aYw7P05XOdpryqYIP/zeJ+Qm6I/w0n0bBtuDU0u
BziaJlY3EWVzbbPGtivs5mOOiffNe7YLBhdKoj9n9b5ji2F6WrfI0GRoaGcv6q+5
ztW7wJfxBtibKFj5oJ//JOpXV+3PVTUnxdML5uqY/bWn4WHgq/po+i/++TAPUnR4
VBfliJCwaQskfh4GsIvEhOSqHDHnod1Ng6lXWeJWb168cCDoGm6gn0LdupGWUqxh
IW1RV/aUx3vhyw==
-----END CERTIFICATE-----
Generated at Wed May 13 09:20:06 2026 by rpki-client