Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
File:                     gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft (raw, json)
Hash identifier:          Kc2qBfD0PVfUsqZvdyjQliYiDmCHoz0DTuU287chp64=
Subject key identifier:   A8:A3:46:D3:0C:2F:8F:14:2D:78:F9:37:4F:AF:71:A9:57:6F:9D:F5
Authority key identifier: 83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
Certificate issuer:       /CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Certificate serial:       019E216D86BB3A9C1A65604B2E2595542787
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 13:01:26 +0000
Manifest this update:     Wed 13 May 2026 13:01:26 +0000
Manifest next update:     Thu 14 May 2026 13:01:26 +0000
Files and hashes:         1: GFlr8uF2r8cVqmDJ2JXiNxwY91k.roa (hash: gwpmNBpGA7FAOM9cF2rmHJiCr7Axf/GeGVR5kW5sxyc=)
                          2: eR1kJt3AkvnRh9nnXa_66NaaHYY.roa (hash: vhKP6Uu//ijg9IWe7RT8txZCBV20sw0GmYZPsJN+rXk=)
                          3: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl (hash: BcFddKKlj6NGrud9l4uKucotRkLtJMYGj0r9c6WBE2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:6d:86:bb:3a:9c:1a:65:60:4b:2e:25:95:54:27:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
        Validity
            Not Before: May 13 13:01:26 2026 GMT
            Not After : May 14 13:01:26 2026 GMT
        Subject: CN=a8a346d30c2f8f142d78f9374faf71a9576f9df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ca:5b:9c:cb:ed:b2:9d:55:75:ae:96:4d:53:
                    18:78:a8:90:29:f4:5a:46:4b:ca:62:91:44:dd:5c:
                    19:e3:9e:fc:ad:f6:22:7b:8c:d4:7f:48:24:6c:ff:
                    f7:fc:5c:43:c9:57:b1:54:ee:be:de:1b:d7:a8:33:
                    ee:74:fa:fd:a8:48:06:bc:70:16:9d:9a:d9:a5:db:
                    9e:79:6d:ad:53:49:20:98:1b:75:c1:7b:e4:e7:e3:
                    fa:7e:78:06:07:3b:06:05:d8:4f:90:ff:6a:1d:f5:
                    25:75:44:a4:62:0c:1e:60:16:b0:4b:16:1d:1b:12:
                    a8:ec:2e:5b:f6:b6:ff:64:ac:11:8c:7e:dd:03:37:
                    88:9d:36:44:3a:fa:dd:db:5c:18:91:76:77:0e:19:
                    8a:53:ee:9e:e4:7e:fe:38:1c:e8:06:d7:2b:84:8e:
                    0e:53:4e:68:22:cd:fd:b5:90:52:dc:80:82:ff:b2:
                    75:c0:f0:3c:64:ee:36:7c:da:49:d7:6c:e5:b7:01:
                    be:15:b6:17:15:9e:5f:70:36:86:74:56:57:9c:68:
                    1b:c7:5a:20:16:65:4e:a7:39:af:e2:68:39:cd:6d:
                    37:e3:8f:b2:cb:c8:7f:90:51:b7:85:e3:3f:8b:2f:
                    5d:fd:12:15:82:8e:33:9a:0c:57:8d:90:12:34:04:
                    20:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A3:46:D3:0C:2F:8F:14:2D:78:F9:37:4F:AF:71:A9:57:6F:9D:F5
            X509v3 Authority Key Identifier:
                keyid:83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b9:66:ca:20:3a:87:11:39:5b:78:96:4d:b7:e0:38:e4:48:
         dd:22:d3:39:c1:59:34:a6:c0:ba:cd:d1:db:a2:3f:81:74:49:
         e7:9e:e6:66:df:45:c0:a0:63:d2:65:0a:06:61:91:82:66:8e:
         a9:78:55:9e:5b:e7:d4:10:60:03:7b:36:05:33:21:46:e0:c8:
         f5:71:73:ef:16:24:b1:9f:cb:c0:f7:95:45:c5:40:9a:16:d6:
         cc:8d:b0:cf:bf:7d:4f:48:f5:d6:0c:5d:a7:05:0c:63:a5:af:
         44:55:27:43:85:c7:d6:eb:90:9e:ec:20:9b:d8:3a:f4:92:4a:
         28:fc:26:8a:68:71:77:d9:f0:1e:0e:c9:7e:20:6d:1d:0b:3f:
         6c:0d:01:64:60:fb:a1:47:7d:9b:2a:d1:fd:6a:d6:a9:37:69:
         3a:18:ac:70:9d:cd:98:51:f0:f8:7b:13:a3:26:d5:17:00:ea:
         31:94:bb:cd:f4:dd:c4:a3:e7:4c:88:46:e0:31:c3:ca:9e:74:
         97:11:b1:c5:a5:7b:90:ed:a6:d6:10:fd:4b:02:03:ef:f5:9f:
         b6:f3:f1:08:cb:46:16:23:83:95:fa:74:25:0a:fd:26:58:45:
         1d:fe:21:3c:c6:15:75:66:0f:ab:33:5f:6c:3d:e2:01:4d:92:
         d4:2c:08:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:29:01 2026 by rpki-client