Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
File:                     GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft (raw, json)
Hash identifier:          nYWgj3VDtgAZ1NiEgd4mc5HibcZvsneAICX87O2e7c4=
Subject key identifier:   E1:8B:C1:1B:71:BF:45:0B:E5:1D:85:D6:6F:C5:70:08:40:0C:5C:21
Authority key identifier: 18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49
Certificate issuer:       /CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49
Certificate serial:       019E2023D38C20696F7CE94EFEC5A96A8213
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
Manifest number:          1904
Signing time:             Wed 13 May 2026 07:01:18 +0000
Manifest this update:     Wed 13 May 2026 07:01:18 +0000
Manifest next update:     Thu 14 May 2026 07:01:18 +0000
Files and hashes:         1: GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl (hash: qSf8UmRx7zG/yYerIKC/nLp9wmqY8eGDjH+Vu/p/OLc=)
                          2: xehj5Em4-aZuqclVAlzpzKvC6hc.roa (hash: 6wuADDCEbwDf490Wgk0Vq7px+7XHcKgHXEBX1F0JtHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:d3:8c:20:69:6f:7c:e9:4e:fe:c5:a9:6a:82:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49
        Validity
            Not Before: May 13 07:01:18 2026 GMT
            Not After : May 14 07:01:18 2026 GMT
        Subject: CN=e18bc11b71bf450be51d85d66fc57008400c5c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6e:49:15:21:18:97:85:7f:d4:b6:0b:51:62:
                    79:fb:8f:2d:e7:a9:03:e7:db:47:6a:50:c7:51:51:
                    72:5b:37:1c:05:2d:83:67:c5:dd:85:65:a7:6f:81:
                    61:97:c2:17:10:15:80:b9:91:3d:ca:93:4b:49:7a:
                    9d:fe:cf:be:79:a6:50:f0:e2:7e:33:52:8b:3c:70:
                    fa:e4:4f:34:10:aa:66:26:93:e6:a5:1e:4d:40:d2:
                    88:28:3c:35:68:f8:29:90:6a:4f:27:fc:7d:50:ac:
                    f5:70:af:25:20:be:e5:f9:73:f1:bd:87:2c:01:d5:
                    3c:59:86:50:f2:c0:e0:75:3f:c0:08:77:7a:7d:fb:
                    ad:81:c4:8c:c1:1c:54:ea:eb:72:6f:b2:c2:27:c9:
                    0b:09:96:c1:fc:8d:b5:44:a5:96:71:b0:f5:23:2b:
                    26:51:fd:11:cd:ab:8e:f9:7b:83:68:16:36:e9:6d:
                    a5:09:00:f7:bc:70:5e:61:3d:a5:b5:ea:81:2d:73:
                    a8:75:a4:e1:7e:3a:fa:13:d4:8e:38:29:d2:44:1f:
                    87:7a:02:f9:bb:92:5a:92:0c:07:84:d0:1b:76:1f:
                    f1:b9:0b:1f:d7:3c:ed:ee:8d:9a:8b:98:ff:58:ec:
                    92:d6:ab:df:21:17:b7:8e:c5:01:2c:9a:dc:07:db:
                    7f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8B:C1:1B:71:BF:45:0B:E5:1D:85:D6:6F:C5:70:08:40:0C:5C:21
            X509v3 Authority Key Identifier:
                keyid:18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:dd:23:af:99:85:31:c2:53:28:81:8d:85:a9:3c:41:9b:a2:
         2e:b8:c4:ab:37:07:4e:75:cb:bb:55:30:f0:92:97:21:af:25:
         0b:16:ad:cf:56:50:fe:ab:f6:bf:f5:84:59:18:79:dd:05:9d:
         1d:f2:94:7e:5c:4a:95:7d:3a:70:f1:a9:a0:dc:d1:d5:47:31:
         6b:23:cf:10:d4:1a:5b:18:00:bf:2f:8b:19:6a:61:0f:87:80:
         cb:41:41:a0:98:d5:b3:bd:6e:23:9b:6d:80:07:af:2c:06:ee:
         4f:aa:3a:79:ba:71:b3:c8:36:ae:e7:b9:31:0a:d2:f9:92:ca:
         33:f9:a5:76:39:c9:8c:92:a5:e8:ff:eb:b7:2b:bd:2a:87:3a:
         14:28:17:d1:55:ac:7e:ba:c0:a4:03:2f:db:fa:47:8b:cc:86:
         1f:26:0f:ee:82:c2:bc:c7:42:2b:11:e9:e3:ac:f2:6d:b9:de:
         58:fb:e6:64:8a:e2:b9:83:ef:08:d2:55:d5:1b:3d:fc:08:36:
         2f:7d:92:5a:96:e2:d8:b5:7d:35:24:61:a2:c8:d3:ec:63:a9:
         d1:1f:bc:05:0d:db:aa:b2:05:3a:02:f2:44:7e:d4:34:ce:23:
         63:d1:4c:25:bb:58:80:31:cd:18:c2:fb:f9:77:32:6e:bb:cb:
         2c:16:af:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gI9OMIGlvfOlO/sWpaoITMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4M2FlOGY4ODg3YTEzMDliYTU0YmM0ZDI3NjFiNGIzMGVh
MjhlNDkwHhcNMjYwNTEzMDcwMTE4WhcNMjYwNTE0MDcwMTE4WjAzMTEwLwYDVQQD
EyhlMThiYzExYjcxYmY0NTBiZTUxZDg1ZDY2ZmM1NzAwODQwMGM1YzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG5JFSEYl4V/1LYLUWJ5+48t56kD
59tHalDHUVFyWzccBS2DZ8XdhWWnb4Fhl8IXEBWAuZE9ypNLSXqd/s++eaZQ8OJ+
M1KLPHD65E80EKpmJpPmpR5NQNKIKDw1aPgpkGpPJ/x9UKz1cK8lIL7l+XPxvYcs
AdU8WYZQ8sDgdT/ACHd6ffutgcSMwRxU6utyb7LCJ8kLCZbB/I21RKWWcbD1Iysm
Uf0RzauO+XuDaBY26W2lCQD3vHBeYT2lteqBLXOodaThfjr6E9SOOCnSRB+HegL5
u5JakgwHhNAbdh/xuQsf1zzt7o2ai5j/WOyS1qvfIRe3jsUBLJrcB9t/VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGLwRtxv0UL5R2F1m/FcAhADFwhMB8GA1UdIwQY
MBaAFBg66PiIehMJulS8TSdhtLMOoo5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0Ryby1JaDZFd202Vkx4TkoyRzBzdzZpamtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lZGQ5ODQtOWIzZS00Nzg2LWIxY2Yt
NjBmNmZhODgxODQ1LzEvR0Ryby1JaDZFd202Vkx4TkoyRzBzdzZpamtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9lZGQ5ODQtOWIzZS00Nzg2LWIxY2YtNjBmNmZhODgxODQ1
LzEvR0Ryby1JaDZFd202Vkx4TkoyRzBzdzZpamtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMN0jr5mF
McJTKIGNhak8QZuiLrjEqzcHTnXLu1Uw8JKXIa8lCxatz1ZQ/qv2v/WEWRh53QWd
HfKUflxKlX06cPGpoNzR1UcxayPPENQaWxgAvy+LGWphD4eAy0FBoJjVs71uI5tt
gAevLAbuT6o6ebpxs8g2rue5MQrS+ZLKM/mldjnJjJKl6P/rtyu9Koc6FCgX0VWs
frrApAMv2/pHi8yGHyYP7oLCvMdCKxHp46zybbneWPvmZIriuYPvCNJV1Rs9/Ag2
L32SWpbi2LV9NSRhosjT7GOp0R+8BQ3bqrIFOgLyRH7UNM4jY9FMJbtYgDHNGML7
+XcybrvLLBavxQ==
-----END CERTIFICATE-----
Generated at Wed May 13 14:06:29 2026 by rpki-client