Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
File:                     GWN5dpxXylsmosYfpdmsxSe-p4k.mft (raw, json)
Hash identifier:          BpwBvTyOPeqFWs/lRnLZ2OtsVMi1gZ4evCnl7h9nJCI=
Subject key identifier:   5A:CC:27:8A:4A:DF:6C:8A:71:E7:31:DF:7B:53:90:2C:9E:D3:70:88
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Certificate issuer:       /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial:       019E1EA2ADBE3102FB42A3CABF66D158F9F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 00:00:38 +0000
Manifest this update:     Wed 13 May 2026 00:00:38 +0000
Manifest next update:     Thu 14 May 2026 00:00:38 +0000
Files and hashes:         1: 3W77edW628jQxwd19lvVjtYuG1o.roa (hash: eeBqOwHI9v74XHIGFTRR/UVJPjywNaCr9KLzr8nBNf8=)
                          2: GWN5dpxXylsmosYfpdmsxSe-p4k.crl (hash: faqL4nmmYc1fTPr79dOqPvldcZ1WF0OOag+NEp5eL2k=)
                          3: bg16vmmigVbvm4o3Mdxq8cFNNQU.roa (hash: zFOo31LB1MSXG3aNBtx7FcoSwNGxRX0bLqGZpw+CvMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:ad:be:31:02:fb:42:a3:ca:bf:66:d1:58:f9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
        Validity
            Not Before: May 13 00:00:38 2026 GMT
            Not After : May 14 00:00:38 2026 GMT
        Subject: CN=5acc278a4adf6c8a71e731df7b53902c9ed37088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:43:69:3b:7d:e1:f5:38:7e:e6:6f:e8:8b:29:
                    83:fc:d0:4d:a2:e7:ca:5c:61:ab:4f:d8:90:bd:5d:
                    52:6e:0e:d1:e8:c0:1d:d4:10:4b:36:59:4a:bf:30:
                    8c:40:2c:1e:ef:fb:0d:92:f8:92:84:6b:bc:ef:35:
                    cf:3c:5b:8e:de:d6:22:31:b4:d7:aa:15:57:4d:48:
                    da:b9:36:ae:40:0f:66:da:8e:79:3c:6d:88:c7:c5:
                    3c:bc:c5:40:8d:52:2e:8e:38:18:a8:1a:f0:fd:c9:
                    2f:d9:e7:45:cc:b8:41:23:ac:06:2e:bf:30:c3:72:
                    82:f4:c7:6f:11:d5:12:fe:45:44:b6:90:de:eb:25:
                    a3:07:32:74:f5:60:06:72:b1:81:82:3e:e3:d1:e5:
                    a7:b2:f6:b3:6d:6d:c5:fd:e0:72:b5:5a:8f:93:6d:
                    2b:ab:f6:3b:17:1d:d2:a8:86:5a:b9:2d:73:41:0e:
                    22:4e:ee:55:8f:8a:9a:cb:8d:51:79:4a:9b:dd:74:
                    da:53:97:b9:4c:91:bf:4a:6b:53:bd:be:3e:07:0d:
                    b6:f0:46:97:ba:8e:ac:aa:0d:87:cc:4f:a3:2d:6a:
                    34:29:5b:5c:c9:43:64:4d:36:f6:ec:a4:7d:68:7c:
                    2a:a1:d3:dc:a3:1a:d8:03:35:98:73:bb:18:98:8c:
                    bc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CC:27:8A:4A:DF:6C:8A:71:E7:31:DF:7B:53:90:2C:9E:D3:70:88
            X509v3 Authority Key Identifier:
                keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:7d:7a:8a:61:0d:1c:cc:a4:05:e3:7a:90:39:09:9a:a7:91:
         b7:bd:96:6a:57:77:39:5f:8e:ed:98:5f:26:07:71:ce:c9:b9:
         56:db:ac:11:e0:89:3a:a9:b6:c4:1d:d2:4d:6e:cb:e2:68:e9:
         6a:64:88:4a:95:6f:f1:70:f7:2c:c8:e9:31:d6:23:f8:01:8d:
         b9:e4:f6:88:88:a7:00:a2:05:93:86:59:e2:e7:66:57:3f:5f:
         34:cd:b5:92:6b:40:03:fe:67:80:e9:ba:27:9a:82:43:7c:48:
         f3:d6:33:35:ca:8f:16:66:aa:8f:38:81:79:0c:2e:0f:fb:3d:
         8b:1b:f1:97:c9:59:9f:40:3a:54:0d:e3:79:90:8b:b7:b5:e1:
         f3:d2:3b:04:52:82:41:0b:45:30:50:1f:c0:db:68:3e:5e:84:
         62:bd:89:8d:b8:46:00:51:dd:96:36:0c:f4:3b:f7:e9:69:e9:
         a3:34:43:08:c0:66:40:19:6e:1a:c0:2d:ac:86:df:af:5b:24:
         8a:08:cf:40:76:30:99:92:46:26:e2:19:45:15:3c:23:73:36:
         11:e3:c1:69:48:bd:bc:54:53:b9:c9:2e:be:8a:98:ab:7f:6b:
         49:31:3a:3a:66:d6:6c:c4:7c:5e:db:b0:54:b1:26:96:43:11:
         06:99:08:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:29 2026 by rpki-client