Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
File:                     GTdDRntNpBxilek1EVMwlYa6I5k.mft (raw, json)
Hash identifier:          SxEbFslcXYdQfHQpNhAZkp7AvBBGc9rnxqm/S61LA3M=
Subject key identifier:   A6:A3:2A:0E:62:97:81:D7:C8:D9:30:6C:7A:3B:8B:A9:6F:22:76:A0
Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
Certificate issuer:       /CN=193743467b4da41c6295e9351153309586ba2399
Certificate serial:       019E1ED9FC3523E4CB3E2A25F1B3EDEBED53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
Manifest number:          1589
Signing time:             Wed 13 May 2026 01:01:02 +0000
Manifest this update:     Wed 13 May 2026 01:01:02 +0000
Manifest next update:     Thu 14 May 2026 01:01:02 +0000
Files and hashes:         1: GTdDRntNpBxilek1EVMwlYa6I5k.crl (hash: IMgon9TrW/h7LyU6BG/wJLo/iUvYzw/JpIXa7DQzrh4=)
                          2: a1Wzzm6d-RLRzAcChfLkzjD6yj4.roa (hash: u2suJZ9dSTEdpIWAwFWYGCWey0B3AvIkAHlBujdVtCc=)
                          3: bonvg5XaBQcMsNMwCdMc5lDAhv0.roa (hash: ZSoRPjPH88M9xek3/eVzci4XvPHF1Itjvf+UZyNuK0s=)
                          4: h-e8ELzqBHgqs0gO88cD6j4kiUw.roa (hash: IFfM4s3xZcomvpllzauBa/HUt3f3fExXfJyGi7VQ3a0=)
                          5: tgxCEeVuZ-EDQmEz7GRXe-l5ETE.roa (hash: LUh2uL8YOcgSTcCxK3/07PSsvLuQW83QgTZqddE2hIU=)
                          6: y8107xFwU5xNTZHiPZVC-6uA80E.roa (hash: VzBljyrPOFT8EeSOV+zQI6XF+CUR92IpElZIDzHyEnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:fc:35:23:e4:cb:3e:2a:25:f1:b3:ed:eb:ed:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193743467b4da41c6295e9351153309586ba2399
        Validity
            Not Before: May 13 01:01:02 2026 GMT
            Not After : May 14 01:01:02 2026 GMT
        Subject: CN=a6a32a0e629781d7c8d9306c7a3b8ba96f2276a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8e:e8:85:02:8e:ac:f1:72:34:96:50:52:8f:
                    58:56:4a:dc:2e:d6:1e:57:15:98:1c:23:2a:2f:54:
                    d1:e9:c8:1f:fb:54:cc:7c:d8:93:03:dd:9f:92:8d:
                    ec:40:37:66:ad:c3:b1:84:81:6f:0e:5c:00:a6:d9:
                    ac:da:9e:d3:bd:a2:99:86:82:69:07:24:8b:ba:4c:
                    5f:34:a2:aa:d7:62:0d:d4:7f:90:b3:10:03:dc:79:
                    19:04:82:f3:a7:50:1e:15:2f:ca:af:33:22:3b:46:
                    b4:be:ec:04:fd:b8:9d:27:c8:58:8c:1a:6a:17:22:
                    41:8e:ec:b4:76:22:7f:7a:5f:17:08:9e:34:68:9a:
                    6b:b3:79:04:e4:33:9d:b3:2a:d2:fd:76:11:f5:85:
                    8e:f7:14:5f:da:68:60:87:8e:e5:00:4b:d8:22:92:
                    07:29:51:02:4e:03:2a:a6:11:41:04:e2:63:e4:48:
                    5a:53:e3:08:d5:7c:17:74:f7:d0:29:2b:21:7f:83:
                    e4:55:2c:3e:3a:c3:75:da:4d:18:46:e3:ca:a1:f2:
                    3b:9a:5e:b1:ef:a5:a6:c8:51:a4:a4:88:e4:3b:60:
                    a7:f4:b0:24:30:d1:ab:9f:d2:5e:e8:58:93:80:99:
                    31:c3:71:f1:2f:90:e7:4d:45:3a:4e:01:3c:53:58:
                    dc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A3:2A:0E:62:97:81:D7:C8:D9:30:6C:7A:3B:8B:A9:6F:22:76:A0
            X509v3 Authority Key Identifier:
                keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:6a:7c:80:71:38:1a:e0:fa:47:90:c7:9f:2c:0b:1d:41:ac:
         e8:b1:63:cb:df:06:23:01:46:a2:f6:42:c9:ef:95:f8:0f:d7:
         23:52:c5:11:b0:23:ac:45:6d:9b:8f:27:03:e8:96:2b:dc:de:
         7e:ca:03:4e:8c:02:54:8f:0d:46:b6:cb:44:a7:79:d6:bb:c4:
         58:a4:2c:e3:98:07:1a:a1:23:09:55:07:18:c9:0e:90:86:b2:
         fb:48:e4:7b:c5:c2:09:d1:73:dc:ad:a9:ba:68:0d:8b:39:c6:
         11:8f:57:29:b6:87:63:7b:fb:81:de:a2:c7:9e:41:e7:90:a4:
         23:62:c4:42:05:4d:49:b8:1f:d4:31:20:2f:db:08:8d:5f:f2:
         a2:d2:99:f1:67:2b:a4:38:ff:06:6e:8a:ad:f1:0d:11:88:cc:
         dd:57:1b:c7:3f:5c:4c:8f:36:80:99:c9:e0:58:5c:63:61:b2:
         0d:c4:89:75:26:24:d8:14:6c:d4:8c:43:c0:eb:44:ed:c1:60:
         6a:cd:40:e9:a6:f9:57:76:ac:60:43:c5:d3:2b:1b:23:fc:02:
         3a:8b:b4:cb:72:9f:15:aa:d3:d2:a2:b2:b0:25:64:e6:51:26:
         d0:e0:80:0f:f3:91:c2:54:c2:e8:24:3b:de:a6:94:69:e3:5c:
         c7:bb:e6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:30:43 2026 by rpki-client