Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
File:                     gQacCVUbP-O6LJpuVdjgWbugsYY.mft (raw, json)
Hash identifier:          6DwjhfL3xbJDOn7QaxaVnur7FDNsGtePFOgJe65Gad4=
Subject key identifier:   D9:EF:DA:35:16:B4:94:D8:42:33:A9:0D:63:9F:C3:3A:A5:BD:F2:F8
Authority key identifier: 81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
Certificate issuer:       /CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Certificate serial:       019E209249B87BA7FBE5DF599C4D62753FF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 09:01:58 +0000
Manifest this update:     Wed 13 May 2026 09:01:58 +0000
Manifest next update:     Thu 14 May 2026 09:01:58 +0000
Files and hashes:         1: bCfnN8Cs-rhA4Q1_kWGUzS2fAKc.roa (hash: KNO75JkgNbMb91A1hmTO0xTL3a65pxvLADRxVDguCYw=)
                          2: gQacCVUbP-O6LJpuVdjgWbugsYY.crl (hash: wxtVey++OBOA3LI9yiGJtkdWYHhRdfULNaShQR98n74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:92:49:b8:7b:a7:fb:e5:df:59:9c:4d:62:75:3f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
        Validity
            Not Before: May 13 09:01:58 2026 GMT
            Not After : May 14 09:01:58 2026 GMT
        Subject: CN=d9efda3516b494d84233a90d639fc33aa5bdf2f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:7d:95:7c:40:87:ba:0c:54:f8:46:0d:aa:
                    d7:aa:6b:91:f1:76:ed:6d:54:b7:1a:a7:fc:cb:f7:
                    fa:ac:de:4e:a8:88:03:17:b8:3a:a9:da:22:8f:1a:
                    ab:c0:90:1d:7c:d8:dc:1c:eb:05:39:eb:d1:59:7b:
                    64:0b:b0:13:51:4f:64:0b:71:46:fa:cd:52:2a:1e:
                    52:53:a0:6d:7c:1b:4a:53:25:ad:cf:3d:34:bc:6a:
                    a9:9f:82:5d:33:50:1d:7b:2d:02:25:2e:41:0d:19:
                    84:f0:f0:4f:c9:4d:b5:bc:fb:6f:8e:36:76:5f:10:
                    91:60:5e:dd:96:12:3e:b2:ec:af:c2:00:9b:14:9f:
                    e2:fd:9a:27:d3:19:b0:5b:02:9f:71:86:d3:45:ef:
                    ae:32:7e:6a:98:1f:a1:d2:7b:28:ba:7b:04:24:89:
                    59:68:d2:80:f8:c6:fb:b7:1f:aa:bd:e5:00:60:82:
                    75:06:55:aa:36:6c:ac:74:02:fa:22:c2:8e:04:25:
                    03:8f:bc:9f:4b:f2:3f:66:fe:6d:15:be:a1:31:da:
                    fd:e1:9a:e9:b6:b2:8e:75:92:d6:40:97:63:2a:6f:
                    8d:e4:3b:f3:af:6b:7d:c4:9f:c4:3e:9d:10:d6:d6:
                    d8:20:d2:3a:5f:ce:e6:28:e0:27:3b:71:9c:07:e1:
                    1d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EF:DA:35:16:B4:94:D8:42:33:A9:0D:63:9F:C3:3A:A5:BD:F2:F8
            X509v3 Authority Key Identifier:
                keyid:81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:b4:a6:66:2b:5b:0e:8d:df:f1:97:cc:e3:fd:a7:cf:ef:31:
         ef:1b:f8:48:1b:61:3b:ef:6b:f5:15:ab:4b:40:c5:fd:05:d1:
         87:9a:dd:d8:d2:4c:b2:f3:13:e5:2e:7f:2f:74:f2:53:e8:7e:
         77:22:8c:9e:a4:70:fe:9a:02:1e:91:3c:b4:9c:84:3d:00:0d:
         4b:93:d5:df:3b:ef:86:3c:a5:47:86:46:ac:14:39:df:5f:02:
         f4:f1:12:1d:b7:66:9c:a7:76:32:cb:ad:52:d3:f3:ff:d4:58:
         18:7a:0e:30:b7:0a:17:73:b6:fc:84:bf:ec:5d:9f:db:bc:16:
         9d:4e:bc:9d:81:c8:ae:80:13:58:33:21:4b:0e:4a:0b:cb:29:
         74:43:72:ee:0f:22:50:fa:fc:01:00:dd:28:47:58:e7:61:8e:
         c7:46:8e:ec:a3:dd:20:04:87:5f:cf:39:63:76:43:60:23:14:
         f4:07:f9:bf:e9:01:46:63:ea:bc:dd:bb:61:26:53:6e:27:b6:
         88:2e:c6:32:98:52:93:19:64:1e:a9:ec:4f:ae:61:98:64:03:
         2f:7a:8c:64:1f:3d:6a:d4:95:cf:ed:6b:61:69:1c:23:d4:c2:
         be:26:cb:ce:0e:5e:18:62:cf:75:eb:bc:ca:95:9e:f8:e9:18:
         76:d3:0c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:21:42 2026 by rpki-client