Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
File:                     G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft (raw, json)
Hash identifier:          9jA8H+0cY4mtp0gphKQ1Lj4OyJFDcKsSIvZtzelCJ3Y=
Subject key identifier:   7F:6B:82:23:6E:97:F4:25:7B:40:23:C7:49:BC:61:46:CF:9A:E1:31
Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
Certificate issuer:       /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Certificate serial:       019E1EA3C817861FDD608EC30B4B36317A88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
Manifest number:          17E0
Signing time:             Wed 13 May 2026 00:01:50 +0000
Manifest this update:     Wed 13 May 2026 00:01:50 +0000
Manifest next update:     Thu 14 May 2026 00:01:50 +0000
Files and hashes:         1: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl (hash: nie2w45YBT0ZFGpjIWGfiURiSV1sufnSvRV3MmG/Av4=)
                          2: GUn5C0R9BrAYfoyxCLwgJiIfUm4.roa (hash: TE3GqYvgyMZRi3G5/sygxcPRG4YEuD9ufDzYPZfPI5U=)
                          3: esdDEmlA_vp-DUa3L78lRMSFDrg.roa (hash: 89EU1646sjMts7fuWu8bk/NpsMoyPAALSAlqPCHzEdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:c8:17:86:1f:dd:60:8e:c3:0b:4b:36:31:7a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
        Validity
            Not Before: May 13 00:01:50 2026 GMT
            Not After : May 14 00:01:50 2026 GMT
        Subject: CN=7f6b82236e97f4257b4023c749bc6146cf9ae131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:68:8b:ff:11:03:6f:8b:d0:9a:7c:94:34:20:
                    49:84:89:5c:95:54:07:24:90:45:ce:73:f3:0a:e6:
                    3c:8f:34:9c:64:57:44:fb:fc:42:84:ed:12:40:20:
                    cf:b4:ac:e1:34:b2:5a:0d:75:0c:74:35:49:24:c3:
                    2c:25:b3:02:70:d2:88:f9:27:48:1a:16:2c:27:6f:
                    1d:35:b5:1f:36:f6:e4:60:61:fa:6b:1f:2b:13:fa:
                    b1:ce:2e:e5:8c:5a:10:c6:d1:3f:01:ac:7e:89:e3:
                    16:30:0f:2b:06:d6:ea:c7:5c:0b:89:b1:62:13:0a:
                    97:e8:96:a7:6a:9b:a5:ba:a0:fe:7a:3e:48:cc:00:
                    e0:7d:07:63:e5:45:05:1c:61:5a:f4:63:16:0b:e0:
                    1e:75:1f:73:e8:d9:75:c0:ef:22:11:56:06:5c:c3:
                    ae:e6:1c:2d:79:68:9e:59:ab:71:3f:c5:f1:44:ac:
                    43:5a:67:a4:88:68:dd:c8:c4:30:74:c3:4e:48:a1:
                    79:14:e5:01:bd:86:35:27:b4:9f:78:f9:64:9c:17:
                    f6:2f:b7:c1:cc:ed:45:04:62:6d:05:9f:02:c5:a7:
                    83:c7:3f:55:4f:8f:a3:96:24:66:2c:a5:14:c8:c9:
                    b9:7b:49:b0:06:18:fc:af:73:a7:4d:1e:ec:71:3c:
                    f2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6B:82:23:6E:97:F4:25:7B:40:23:C7:49:BC:61:46:CF:9A:E1:31
            X509v3 Authority Key Identifier:
                keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:4f:8b:15:27:d9:85:2c:be:e5:ad:68:33:1d:2f:27:61:57:
         e7:62:55:f0:3c:3b:d3:3c:e7:ee:c5:bc:7e:e9:ef:7a:69:c2:
         19:43:fb:ce:36:af:3a:83:e3:11:e3:d1:b8:04:ac:39:af:10:
         5e:8e:b5:07:46:1a:fa:03:5d:cd:f1:fe:59:26:dd:b4:59:c0:
         ce:54:18:8b:68:94:6d:71:e1:51:f7:3d:6d:b9:dd:aa:d9:c8:
         2b:fe:be:b4:61:4b:70:cd:83:04:71:60:5c:16:4d:a2:f1:ed:
         db:f8:ac:a0:c0:94:65:41:6c:21:97:c2:a2:69:a3:6d:95:95:
         12:2d:0b:74:ec:58:65:30:e2:0b:fe:2d:38:8f:d4:ab:f4:40:
         e6:63:3c:f8:8a:26:ef:c0:d6:bb:ee:a4:8f:a4:0a:9f:5c:8f:
         f2:46:3a:cc:59:ac:82:f7:29:d9:25:93:5e:c3:74:fb:16:76:
         70:df:07:ab:c5:05:58:63:0f:b7:be:d7:d8:04:89:da:05:bd:
         43:1b:b5:a7:96:f2:a7:27:d9:81:ad:f0:8c:72:ca:2b:24:62:
         ea:d6:f7:f4:9b:e5:ac:c8:8f:49:33:d6:fb:ea:0b:4f:5e:59:
         63:55:48:88:58:ee:e3:5f:e6:32:fd:fd:57:c7:bb:c6:c1:02:
         48:d1:f1:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo8gXhh/dYI7DC0s2MXqIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZGJhMDEzNjU1YjliYjBjYWEyODVkNzVjMTQyYzFlZTMw
Zjg4NTQwHhcNMjYwNTEzMDAwMTUwWhcNMjYwNTE0MDAwMTUwWjAzMTEwLwYDVQQD
Eyg3ZjZiODIyMzZlOTdmNDI1N2I0MDIzYzc0OWJjNjE0NmNmOWFlMTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2iL/xEDb4vQmnyUNCBJhIlclVQH
JJBFznPzCuY8jzScZFdE+/xChO0SQCDPtKzhNLJaDXUMdDVJJMMsJbMCcNKI+SdI
GhYsJ28dNbUfNvbkYGH6ax8rE/qxzi7ljFoQxtE/Aax+ieMWMA8rBtbqx1wLibFi
EwqX6JanapuluqD+ej5IzADgfQdj5UUFHGFa9GMWC+AedR9z6Nl1wO8iEVYGXMOu
5hwteWieWatxP8XxRKxDWmekiGjdyMQwdMNOSKF5FOUBvYY1J7SfePlknBf2L7fB
zO1FBGJtBZ8CxaeDxz9VT4+jliRmLKUUyMm5e0mwBhj8r3OnTR7scTzykwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9rgiNul/Qle0Ajx0m8YUbPmuExMB8GA1UdIwQY
MBaAFBvboBNlW5uwyqKF11wULB7jD4hUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzl1Z0UyVmJtN0RLb29YWFhCUXNIdU1QaUZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82YTI5NDYtZjBhNC00ZTg1LTkzMGUt
ZDRlZGYxNmUwOTc4LzEvRzl1Z0UyVmJtN0RLb29YWFhCUXNIdU1QaUZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi82YTI5NDYtZjBhNC00ZTg1LTkzMGUtZDRlZGYxNmUwOTc4
LzEvRzl1Z0UyVmJtN0RLb29YWFhCUXNIdU1QaUZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkU+LFSfZ
hSy+5a1oMx0vJ2FX52JV8Dw70zzn7sW8funvemnCGUP7zjavOoPjEePRuASsOa8Q
Xo61B0Ya+gNdzfH+WSbdtFnAzlQYi2iUbXHhUfc9bbndqtnIK/6+tGFLcM2DBHFg
XBZNovHt2/isoMCUZUFsIZfCommjbZWVEi0LdOxYZTDiC/4tOI/Uq/RA5mM8+Iom
78DWu+6kj6QKn1yP8kY6zFmsgvcp2SWTXsN0+xZ2cN8Hq8UFWGMPt77X2ASJ2gW9
Qxu1p5bypyfZga3wjHLKKyRi6tb39JvlrMiPSTPW++oLT15ZY1VIiFju41/mMv39
V8e7xsECSNHx8Q==
-----END CERTIFICATE-----
Generated at Wed May 13 05:06:14 2026 by rpki-client