Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
File:                     GYOwLhDKghv-G-bnUdks9z1tTAs.mft (raw, json)
Hash identifier:          rNCx3SmHAqPFWYaMRlvSb0vxlGVbNxshry3sMeeg2zs=
Subject key identifier:   CE:6B:CB:13:B7:4A:DF:3B:A4:3D:A6:40:6E:C5:C7:69:29:33:2D:82
Authority key identifier: 19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B
Certificate issuer:       /CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b
Certificate serial:       019E20FF4A64D2E89762E2B69D595B924549
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
Manifest number:          0C1B
Signing time:             Wed 13 May 2026 11:01:02 +0000
Manifest this update:     Wed 13 May 2026 11:01:02 +0000
Manifest next update:     Thu 14 May 2026 11:01:02 +0000
Files and hashes:         1: 4siB5e1GQm-axBvoOugw52N_IkE.roa (hash: /3IxrvNXYC3JPq03y8Dq56bw9cEQPSNh5PVk8H407no=)
                          2: GYOwLhDKghv-G-bnUdks9z1tTAs.crl (hash: 8p5l0DWfi1X7vs7hrmAt+44N0C22St8vc+NkMSHj080=)
                          3: OoPG2MT4AbshroGKma-go4-mAqg.roa (hash: MmH8u7qEGNsEDukTF/vmrjDahE/w+pZkLOqm+xYo1ZE=)
                          4: ughKvz4zorztqh7yWUjfuuHBP5E.roa (hash: XOZZpijgX85rlrIVt7kzdBz4Rca7aZetcDWsBATSYMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:ff:4a:64:d2:e8:97:62:e2:b6:9d:59:5b:92:45:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1983b02e10ca821bfe1be6e751d92cf73d6d4c0b
        Validity
            Not Before: May 13 11:01:02 2026 GMT
            Not After : May 14 11:01:02 2026 GMT
        Subject: CN=ce6bcb13b74adf3ba43da6406ec5c76929332d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f2:32:a5:85:21:cb:68:df:ef:dc:43:65:2c:
                    63:18:4e:eb:7d:85:e8:20:7b:aa:6e:30:40:7a:37:
                    67:97:f7:14:cc:07:34:5b:99:63:5a:93:76:bb:bf:
                    5f:a4:e0:40:4a:19:23:b8:29:89:a8:db:16:9f:33:
                    ae:26:f6:f7:f7:2f:bb:8c:52:e2:bc:f3:1e:14:db:
                    62:62:ec:09:8a:a0:63:70:3f:07:3f:0c:b7:00:f4:
                    28:7e:c2:2e:ef:3c:c3:ce:1b:91:9e:a3:36:e0:e0:
                    f2:02:9e:b8:73:f4:59:8c:b4:c2:fe:47:5b:d4:9d:
                    34:33:2b:8c:12:d6:13:99:c5:48:34:12:7e:fe:26:
                    b4:a4:7a:4e:2b:c2:16:dd:b8:04:0c:68:e1:7c:c0:
                    7b:5f:9e:66:9b:3c:a0:93:3d:6c:b0:55:ae:3f:cd:
                    41:44:80:b9:e4:d0:3b:c4:d2:21:38:fc:ba:3b:31:
                    ac:d0:28:2a:96:1b:84:3e:4a:f7:92:41:54:0b:18:
                    de:49:29:be:2b:d2:03:34:23:d8:6e:53:b1:87:5c:
                    17:83:cb:32:d2:10:f1:1c:8b:83:71:f8:d1:80:30:
                    73:a7:d1:56:9e:f9:6f:6b:6a:6b:39:d9:c1:aa:ee:
                    79:f5:f0:4d:70:5d:75:e6:53:1c:0b:59:e7:7f:7c:
                    94:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6B:CB:13:B7:4A:DF:3B:A4:3D:A6:40:6E:C5:C7:69:29:33:2D:82
            X509v3 Authority Key Identifier:
                keyid:19:83:B0:2E:10:CA:82:1B:FE:1B:E6:E7:51:D9:2C:F7:3D:6D:4C:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYOwLhDKghv-G-bnUdks9z1tTAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/096c17-dd83-4058-82e1-cda36256296c/1/GYOwLhDKghv-G-bnUdks9z1tTAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:23:7a:5d:aa:8c:f0:ac:6c:68:2d:04:d0:d4:a8:34:c8:f5:
         62:38:5d:7b:04:cd:2e:b8:55:14:cf:29:6c:53:e3:bf:71:28:
         6c:4a:28:65:30:6f:fe:9f:20:38:50:5f:c3:fc:78:9b:65:8c:
         f3:a6:eb:78:28:cf:ca:3c:73:54:50:60:18:49:19:52:ba:fb:
         96:c7:bc:6a:04:bb:7f:52:b5:52:3b:fc:4d:19:4b:63:55:37:
         ef:11:ed:8b:e0:91:cf:5b:8a:3a:2d:c7:8f:48:5b:38:c0:40:
         b7:af:14:a8:fd:74:d3:72:ba:08:f8:f5:f1:58:1f:72:33:51:
         c9:2d:dc:56:44:16:4f:26:b6:4b:1d:d3:5e:a0:68:85:13:e9:
         0b:c0:38:d2:06:3b:3c:9b:c8:75:b1:f7:26:6f:5c:9a:6c:0f:
         65:d2:b2:8a:ab:91:05:f4:5a:7b:8a:a0:c4:52:4a:6a:56:a4:
         9c:cb:88:df:c9:ee:ee:09:6e:cc:c4:35:6d:c9:08:9b:e4:d5:
         b4:bd:ac:71:94:0c:e5:a5:ce:9b:2e:01:de:87:d4:85:cc:a3:
         f1:55:31:67:28:dd:37:fe:f5:c9:9c:d7:32:97:b0:33:4a:56:
         ba:c0:3c:ea:d0:6b:b7:74:54:62:d0:78:0b:89:ec:e6:31:31:
         9e:0f:5f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:37:41 2026 by rpki-client