Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
File:                     gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft (raw, json)
Hash identifier:          Br7NPszEonmcDiVto2BmdzL/Xe06osHgH61TsKQCmy8=
Subject key identifier:   C8:0E:7F:04:16:D6:55:6E:41:33:08:F8:97:28:1A:C6:39:21:26:B5
Authority key identifier: 80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
Certificate issuer:       /CN=80ab4c0945b738edda0583a274b63c1b8673a630
Certificate serial:       019E205A9034C6FEA659F7DCCE9E25C8F5FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
Manifest number:          190A
Signing time:             Wed 13 May 2026 08:01:06 +0000
Manifest this update:     Wed 13 May 2026 08:01:06 +0000
Manifest next update:     Thu 14 May 2026 08:01:06 +0000
Files and hashes:         1: gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl (hash: Oc9Dz636FB93gyjUtfTWINfm9rbwo1O+EqLpnUuZG0k=)
                          2: xQLXNMGtJIEmbmsa0yimk8gh264.roa (hash: 681EcZV9/rvtEn+cL3EpnhUhg/0vWlpEsupf9xZzDx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:90:34:c6:fe:a6:59:f7:dc:ce:9e:25:c8:f5:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80ab4c0945b738edda0583a274b63c1b8673a630
        Validity
            Not Before: May 13 08:01:06 2026 GMT
            Not After : May 14 08:01:06 2026 GMT
        Subject: CN=c80e7f0416d6556e413308f897281ac6392126b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8d:75:19:b3:b9:f6:b8:03:1e:88:48:f3:fb:
                    c4:4d:d0:e6:37:78:bd:46:47:4d:b5:a6:2a:cc:7b:
                    12:d0:81:a5:f5:12:fc:84:9d:47:ed:96:79:f8:27:
                    b2:d2:97:b4:a1:0d:9d:69:d1:b2:5f:a8:d2:6f:a9:
                    d8:a2:18:01:68:d2:73:bb:e9:2f:98:36:37:30:47:
                    a7:ac:90:9c:03:21:06:0f:16:e4:5b:60:8b:c1:f8:
                    f6:13:55:ac:0e:ec:81:f9:4f:9d:5a:df:d4:d5:ba:
                    6b:38:7a:9d:6e:ec:cb:bf:ca:fe:ef:0d:e5:21:5b:
                    41:2e:35:c4:64:f8:3c:ae:68:6a:2c:2a:c4:f1:7c:
                    97:27:9d:d7:de:ce:f3:81:4d:e3:d6:f2:a0:60:8f:
                    d1:af:e6:43:a3:bc:a5:e7:1d:f1:bc:3b:37:98:74:
                    19:2d:98:de:e4:37:2b:ad:58:68:f5:76:f5:a1:5a:
                    0c:86:ba:a8:8a:f4:0f:fe:2b:6a:67:89:c5:5b:bc:
                    f5:1c:3d:25:78:3b:1c:ce:16:fb:9d:df:54:ce:8e:
                    05:0d:ba:98:c1:c0:d3:4d:74:b8:66:4d:39:1f:2e:
                    ef:fd:b0:dc:6e:e6:74:ff:f1:f2:5a:46:56:1c:a0:
                    cf:a0:13:aa:85:47:03:c8:d7:42:cb:2b:6b:59:c2:
                    67:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0E:7F:04:16:D6:55:6E:41:33:08:F8:97:28:1A:C6:39:21:26:B5
            X509v3 Authority Key Identifier:
                keyid:80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f3:4c:7b:bb:06:25:76:e2:b6:0a:a8:b8:30:ae:8e:cf:3d:
         2b:40:c4:06:07:68:e9:46:19:16:ba:af:d6:0c:b9:ea:27:9e:
         7b:89:9a:fd:d2:0d:a0:9a:0c:95:b2:3d:49:a8:0c:cb:70:67:
         a8:eb:4b:83:46:05:f9:91:13:68:9f:0f:58:a4:f1:57:6e:e6:
         0a:75:06:e1:d1:41:7e:96:b2:5a:ae:04:60:0e:b7:8b:cc:5e:
         9d:c4:98:dc:f0:7f:e0:12:87:2c:3b:8f:16:f6:c2:14:cc:c7:
         6a:a9:0e:79:b0:13:99:60:7c:c1:95:ac:3b:c1:5a:cf:85:c7:
         e4:af:7c:5c:fb:d6:32:61:b9:1e:04:68:b9:52:46:4a:29:02:
         8e:d3:ab:70:69:dc:3f:48:58:3a:94:48:95:27:1d:68:e6:81:
         0a:7f:18:e7:1f:98:bc:c0:d3:eb:44:55:49:93:3e:58:f2:eb:
         72:59:7f:64:e9:49:55:48:98:5b:25:1b:4b:e1:fe:90:e0:a6:
         96:e4:bf:7d:08:71:57:e8:b8:35:d2:ae:b7:ae:aa:52:58:fc:
         4c:2c:2c:86:13:ca:f7:ca:cb:3f:b4:ea:48:95:6a:94:64:57:
         c8:51:df:06:d3:a6:03:d3:ac:68:08:22:a1:22:83:ba:b1:47:
         cb:90:88:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:24 2026 by rpki-client