Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
File:                     GNgB3p_opmgHWIF4I642ugZcYQ0.mft (raw, json)
Hash identifier:          ublf4OFJVZkwdEKwEWEBiYzQCpbyMxP1MS9ZIz0JW90=
Subject key identifier:   EF:EE:01:74:5B:BF:71:E4:7C:2D:8B:DB:27:A8:66:7F:16:33:86:FD
Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
Certificate issuer:       /CN=18d801de9fe8a6680758817823ae36ba065c610d
Certificate serial:       019E1FB5C5AAF70F24BEA761AE4689F4B4E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
Manifest number:          190A
Signing time:             Wed 13 May 2026 05:01:06 +0000
Manifest this update:     Wed 13 May 2026 05:01:06 +0000
Manifest next update:     Thu 14 May 2026 05:01:06 +0000
Files and hashes:         1: 7lAzklFt5hv21weZsd8RUSnd9Ig.roa (hash: +VKWZFr+6W37JzEA9GSsY/1+wtiBPUM4ZOAfeR7K+UM=)
                          2: GNgB3p_opmgHWIF4I642ugZcYQ0.crl (hash: wnYpnuiH+PpwONGHtfgLOT/uOhuTraA3gsEuSS9fLLg=)
                          3: GaSCMV4XmzAxLCAeAkrFJsSYL68.roa (hash: 8armHfXsLYxT8u8vHUQJGjHAEIP47gs/JgtUgM3M2bw=)
                          4: JdvrcoE9zh9DtjU5-xbVFH-VvDA.roa (hash: 3jAnXeJ9BBJ28SdlPUy/mU91gOnFLPiC/VnWiJcQ3Ig=)
                          5: c3aSu8i9jdfT3MZzyY5MkVH86Ys.roa (hash: Rr6OkRDr/ak6ymVFHMUijIRhq9Kp5PxtMbQP8vM+1GU=)
                          6: m-SQr7hnhmE960j3hH0IgSeLpa0.roa (hash: NGsZYn3E8/y+KwalpvGEjudnpYUMa2+kf6D4NeIdWbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:c5:aa:f7:0f:24:be:a7:61:ae:46:89:f4:b4:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d
        Validity
            Not Before: May 13 05:01:06 2026 GMT
            Not After : May 14 05:01:06 2026 GMT
        Subject: CN=efee01745bbf71e47c2d8bdb27a8667f163386fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:98:50:c9:4a:17:02:31:bf:b8:bf:62:04:e2:
                    ab:d0:b0:63:89:30:0f:c9:90:0e:cb:33:f0:4d:e7:
                    78:19:0d:6f:4e:86:93:78:8f:f2:ec:bb:76:61:90:
                    7b:68:ad:df:d3:b2:f7:9f:2c:2b:29:2c:6c:34:86:
                    9e:67:6f:8d:da:b0:ad:f5:df:95:0f:a9:fe:07:4a:
                    0b:a1:e1:9b:ba:c3:52:28:fe:a6:b1:51:7b:ea:9f:
                    7b:81:ac:3c:2f:26:36:90:df:03:5a:12:f6:9f:56:
                    a8:43:45:35:dd:c0:4f:5d:38:43:13:ed:38:bf:a8:
                    60:0e:37:03:34:04:e9:4c:f6:0f:c3:b3:fd:f4:ee:
                    9d:77:06:a9:8d:aa:22:f1:ab:b6:6c:40:d0:83:5a:
                    d0:1a:a1:4b:40:e3:3f:1d:a4:2c:9b:d3:1a:2e:a1:
                    dd:bf:d9:6e:59:62:67:db:1b:e1:72:d2:bd:6d:c6:
                    6b:e0:f0:98:98:f9:14:4c:4a:49:4b:88:88:1f:2d:
                    10:d6:2e:af:7d:bc:fc:11:7b:1f:98:ba:c3:50:97:
                    7b:2c:b0:cb:21:a7:ea:da:aa:f2:0c:c8:02:50:65:
                    0f:16:9b:95:a8:91:da:17:1a:c6:bd:9f:18:31:d3:
                    2c:d7:1d:f8:11:44:ad:a9:c6:f0:41:0d:2a:30:6f:
                    28:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EE:01:74:5B:BF:71:E4:7C:2D:8B:DB:27:A8:66:7F:16:33:86:FD
            X509v3 Authority Key Identifier:
                keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b2:ad:89:ed:94:28:68:70:6b:b8:d5:5f:78:e4:fb:ee:bd:
         64:60:6b:8b:8e:8a:14:09:21:73:b7:9e:1d:01:94:af:a4:11:
         3e:c5:56:f2:db:58:c7:3a:27:4e:f3:5a:05:3f:cc:b6:b1:73:
         74:ba:7c:d2:b3:b4:69:ea:af:cb:56:e1:03:ce:dc:f8:19:82:
         55:bc:57:ea:cd:46:c4:c3:eb:c9:bc:91:2b:eb:6d:99:6a:c3:
         5b:b9:57:cf:1d:4d:3d:37:37:30:c0:1f:4c:e4:16:df:bc:17:
         07:60:4f:99:fd:5c:95:eb:34:8c:06:a7:ec:4a:c5:b0:64:7b:
         9d:a1:f7:2c:f6:c8:75:18:d5:53:b3:da:be:91:0e:b8:f2:53:
         e0:6b:9d:8c:ad:58:3a:5c:bc:a3:91:a4:3a:03:82:ac:84:a1:
         7d:7b:3b:71:ff:46:a6:ee:03:d2:8d:60:7c:98:b9:9a:52:0b:
         9a:3b:ad:be:f3:ff:b6:11:93:b8:6d:81:74:5d:d2:9b:68:b6:
         ab:ee:55:d2:87:11:25:af:8e:2c:aa:a2:02:03:24:87:4c:03:
         51:66:71:26:36:d9:f8:1f:58:68:9f:4e:62:5c:61:b2:36:e8:
         4d:0d:2f:44:b8:73:3d:77:a8:06:1d:f4:ea:e9:71:d2:c2:07:
         91:1e:b7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:28:35 2026 by rpki-client