Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
File:                     G1NNR62NtYlKX8k0LkVY-U5PF_E.mft (raw, json)
Hash identifier:          Q5t4LUV+64v1ggHCp1JdfJbpwV8Svd3B+lKr/IGDF2E=
Subject key identifier:   4B:D0:42:06:C5:BA:15:6D:E6:37:7E:D6:89:38:A4:E4:06:7F:AC:B8
Authority key identifier: 1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1
Certificate issuer:       /CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
Certificate serial:       019E1FB5D6816B607FA4D1D9F476DDC4083C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
Manifest number:          185D
Signing time:             Wed 13 May 2026 05:01:11 +0000
Manifest this update:     Wed 13 May 2026 05:01:11 +0000
Manifest next update:     Thu 14 May 2026 05:01:11 +0000
Files and hashes:         1: AovjLMzZvMdo98oRLMX3UQFhYGU.roa (hash: Pirq+8jQHRZFAz4jyR41JVpLGoXjS83ipQMbfBRQoac=)
                          2: G1NNR62NtYlKX8k0LkVY-U5PF_E.crl (hash: H3VFREBfBnvHvZ9fzKCjU95Rv/G1k16oXCC1PS00z0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:d6:81:6b:60:7f:a4:d1:d9:f4:76:dd:c4:08:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b534d47ad8db5894a5fc9342e4558f94e4f17f1
        Validity
            Not Before: May 13 05:01:11 2026 GMT
            Not After : May 14 05:01:11 2026 GMT
        Subject: CN=4bd04206c5ba156de6377ed68938a4e4067facb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4a:d9:54:5a:5c:2a:72:af:16:26:f9:d2:dc:
                    df:81:06:72:d8:c6:62:37:c3:2f:32:c8:46:1d:ec:
                    e5:35:4f:fe:74:c0:ae:91:df:ea:10:a7:e4:e2:23:
                    a8:a0:37:27:6a:f4:e6:23:07:4b:2a:87:0b:25:0c:
                    83:2c:82:72:cf:26:87:8d:45:ce:24:a1:95:95:71:
                    98:2a:06:f2:14:42:37:29:21:97:50:1e:df:b1:67:
                    67:d3:21:41:2c:8a:3a:6a:0a:84:d6:d5:0a:dc:a4:
                    3a:05:4d:37:3a:bd:d0:d3:d9:d8:97:a3:10:34:69:
                    65:a6:1f:6a:9e:09:96:d3:64:0c:7b:da:8b:55:ce:
                    55:ce:d1:7b:93:c6:32:a6:4b:6a:ef:46:ff:95:cc:
                    4c:fb:3c:82:ca:4d:8b:85:48:b4:45:9e:a5:81:77:
                    6b:2a:42:08:bd:21:04:ec:41:51:29:59:ce:64:c7:
                    50:9c:c5:a0:d0:38:1c:90:58:04:9c:a0:59:b7:a2:
                    9e:ca:f1:3a:2d:34:97:79:64:8f:6f:b2:35:c4:cc:
                    21:66:43:3f:87:cf:a8:64:07:3e:e3:c0:e5:37:b5:
                    cf:69:72:e5:40:43:8d:08:f8:8a:2b:f6:91:59:c9:
                    92:75:e1:29:bd:79:19:0e:d9:61:71:65:e2:a7:eb:
                    21:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D0:42:06:C5:BA:15:6D:E6:37:7E:D6:89:38:A4:E4:06:7F:AC:B8
            X509v3 Authority Key Identifier:
                keyid:1B:53:4D:47:AD:8D:B5:89:4A:5F:C9:34:2E:45:58:F9:4E:4F:17:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1NNR62NtYlKX8k0LkVY-U5PF_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6b4023-adef-4e4d-8cf6-32669737c517/1/G1NNR62NtYlKX8k0LkVY-U5PF_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:57:d2:d2:72:43:07:65:dd:7f:94:13:9d:39:1b:7f:b3:53:
         11:1e:f9:5a:46:5a:6d:6b:08:e8:98:77:6f:62:d8:57:c1:d2:
         35:c4:13:78:83:d7:9f:34:0d:c2:c0:78:b3:e6:3b:9e:df:03:
         ad:f3:20:0a:f2:1e:74:1a:73:0c:5e:7f:e4:90:e7:fd:16:d4:
         ca:84:44:31:3b:18:67:43:34:2d:9b:31:bb:90:c1:8d:af:9d:
         af:0f:af:9f:82:39:c6:f6:a0:d8:d3:09:2c:30:be:4a:35:5e:
         cf:c4:75:c4:1a:36:d4:a6:87:f2:51:bb:79:9c:f1:39:18:d8:
         99:4d:0e:01:2d:0e:3b:54:00:1a:75:e9:99:3b:8a:08:29:03:
         1e:57:ce:f2:26:bf:62:e9:27:c8:5e:34:6c:e7:5f:04:ce:3f:
         40:2a:c0:58:d0:bf:ee:82:f7:4d:49:49:09:3d:b6:f1:71:47:
         5b:8c:fa:fc:dc:c5:f9:39:7e:11:30:ef:42:db:98:fb:d3:f7:
         c5:d4:76:55:19:6b:75:be:ce:98:58:9d:a4:05:d9:ad:d9:53:
         67:e2:ee:80:14:dc:b2:d6:b2:49:6b:e7:f6:56:d1:72:06:55:
         22:47:ef:f9:f6:af:2d:9d:21:fb:d8:61:98:d8:9a:55:60:54:
         13:0c:ca:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:38:20 2026 by rpki-client