Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
File:                     GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft (raw, json)
Hash identifier:          m10qQ/+zEK2j1BqBuJ8YDjNaM2qZdSG5Uqn3ub+lwhA=
Subject key identifier:   4F:55:2F:46:47:C0:4C:20:9E:AC:47:12:3F:5A:ED:DC:73:A8:16:B1
Authority key identifier: 19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01
Certificate issuer:       /CN=195a12a0e73482d993260598a25c8f5a5c49d201
Certificate serial:       019E2091E3497A612428696D5707F34CDC47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
Manifest number:          1904
Signing time:             Wed 13 May 2026 09:01:32 +0000
Manifest this update:     Wed 13 May 2026 09:01:32 +0000
Manifest next update:     Thu 14 May 2026 09:01:32 +0000
Files and hashes:         1: 3HmTEpC4VIL74bvtHgwwr4J0_bA.roa (hash: 0DTR/kx+aEJlJfsijVCjICf0fvERpyfE2z6J9TqKYQs=)
                          2: GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl (hash: rtnhfStEBH24KslHtiSzs+k/W9F1WJX7wDJ6RXwjszw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:e3:49:7a:61:24:28:69:6d:57:07:f3:4c:dc:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195a12a0e73482d993260598a25c8f5a5c49d201
        Validity
            Not Before: May 13 09:01:32 2026 GMT
            Not After : May 14 09:01:32 2026 GMT
        Subject: CN=4f552f4647c04c209eac47123f5aeddc73a816b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8a:79:87:72:32:c1:e2:ee:4f:bd:c8:fd:f1:
                    2e:52:44:d9:60:a7:65:eb:88:1a:40:f7:79:7f:84:
                    68:9d:b3:21:58:2c:f0:95:8e:5f:ae:f8:c1:5c:da:
                    1f:06:a6:a4:25:94:68:89:0c:f1:8e:51:0d:59:ab:
                    c2:a0:f6:04:62:d8:49:a8:11:22:a4:5a:ab:72:93:
                    51:13:8b:ca:2d:a5:45:26:01:21:d6:a5:22:4f:53:
                    59:43:ec:5b:83:f4:ce:3a:84:c4:8e:52:ab:2c:ad:
                    05:74:22:47:15:e1:23:0a:6b:95:3e:43:ab:66:cb:
                    0c:ba:bf:49:2c:0a:6a:0f:f3:a2:1e:2d:f4:ed:e5:
                    3c:20:bc:b9:e4:a3:dc:e2:c0:be:73:14:1b:94:a5:
                    93:11:49:5d:ea:1d:5a:0c:d8:67:9d:c5:11:cb:12:
                    30:c5:a3:1e:47:10:75:a5:73:ea:71:26:5e:77:52:
                    36:01:e8:91:4c:a1:48:c3:30:16:ee:7a:df:cf:e7:
                    a6:fe:23:aa:56:30:fa:63:8d:5e:6d:0f:ea:12:89:
                    6e:15:d7:1c:ca:17:15:65:70:23:be:12:1f:55:36:
                    b7:1f:4c:7c:75:d0:5f:de:ec:b8:12:da:1e:5d:51:
                    b6:75:f2:32:6f:27:cf:9d:15:74:49:c2:e3:3b:94:
                    2b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:55:2F:46:47:C0:4C:20:9E:AC:47:12:3F:5A:ED:DC:73:A8:16:B1
            X509v3 Authority Key Identifier:
                keyid:19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b9:72:c5:ef:ac:f3:58:92:43:ba:98:c0:52:85:3d:78:e1:
         af:a0:41:28:50:0f:61:8e:68:b6:aa:42:27:40:2e:b8:8d:7d:
         3c:84:30:75:7f:d5:68:69:67:7a:8b:f6:c1:54:5b:9c:68:4e:
         d8:e0:17:99:be:3b:bd:08:71:24:02:30:a8:17:50:f2:ad:06:
         16:e5:74:2b:95:4f:84:2b:d6:6b:59:b3:42:6d:df:50:5b:ee:
         65:0e:c5:ff:b9:37:c0:f1:06:77:f1:55:d6:ec:29:75:87:4b:
         e0:13:bc:b0:c9:58:d8:59:7b:aa:c8:56:b7:38:10:48:07:cd:
         55:55:1c:da:8d:70:73:92:d3:b4:cb:44:ef:24:43:a0:91:2c:
         8f:30:7a:72:4a:32:02:65:59:02:84:32:4d:e6:4d:f2:14:2a:
         83:2b:32:80:fe:d7:f0:4e:cc:c9:04:49:3e:19:57:4b:99:5e:
         5b:4c:18:10:d5:31:c8:91:81:03:a0:f4:72:e5:ee:e5:b6:27:
         0a:f9:62:8b:d6:b4:65:9e:80:d7:72:18:7b:c5:cd:b0:34:c9:
         8b:b4:2f:93:27:6b:09:66:15:b4:a5:21:18:65:a8:56:7a:10:
         7e:20:74:20:ca:d4:68:4e:b0:2b:bd:10:ba:cd:90:98:e0:67:
         fa:f5:44:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:19:37 2026 by rpki-client