Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File:                     GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier:          WEeL/X6OQsjoHBKrO7/xy8smTTw2LDQm6Qkvi4eANUA=
Subject key identifier:   D0:5A:CE:A8:19:E8:89:92:BC:0E:A2:84:8C:BF:48:86:97:37:19:A6
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer:       /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial:       019E1CEBF741963A0C5CDF8A2FED9A435BAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number:          1899
Signing time:             Tue 12 May 2026 16:01:26 +0000
Manifest this update:     Tue 12 May 2026 16:01:26 +0000
Manifest next update:     Wed 13 May 2026 16:01:26 +0000
Files and hashes:         1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: RxofGmi8Q15mvMO4lIdX0eTcyUmWJJcroxB4BZ+VijY=)
                          2: Z2umXdj8rXKQHGCd4mt2FC6IjeM.roa (hash: hNS38512ED5SaAduPnnfGixmvuVAAKqHK4KB5eSeNCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:f7:41:96:3a:0c:5c:df:8a:2f:ed:9a:43:5b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
        Validity
            Not Before: May 12 16:01:26 2026 GMT
            Not After : May 13 16:01:26 2026 GMT
        Subject: CN=d05acea819e88992bc0ea2848cbf4886973719a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:89:d8:ce:6a:63:ee:94:00:5e:30:a9:f3:82:
                    37:ba:ab:8f:0b:7f:80:2b:0b:d4:70:cb:da:fa:3a:
                    b3:be:4e:66:76:fa:f6:ab:bf:16:22:c6:fc:ae:12:
                    c6:38:a5:e8:bb:f5:f1:a1:44:c1:9c:07:3b:25:a1:
                    91:55:f6:d5:4e:ee:d0:30:34:78:fb:8c:00:1a:7d:
                    91:57:b3:fe:88:d1:36:56:c3:27:83:c9:7b:68:dd:
                    c7:eb:33:2c:db:dd:07:b6:45:a2:53:0f:ed:0c:75:
                    8d:59:1c:73:62:53:eb:ae:a0:ef:70:36:31:bf:ce:
                    a3:a5:fa:1b:1d:b9:6b:a7:89:26:c1:c8:49:a7:54:
                    c0:30:cc:3d:cd:03:c6:40:35:1f:8e:6a:38:89:44:
                    db:bc:50:de:00:6f:c5:84:94:80:95:6c:9b:f9:0b:
                    a4:35:20:af:49:4b:a0:25:c2:cf:a8:dc:db:6f:7e:
                    3c:53:c0:ae:3a:1c:ce:9b:51:ff:41:8b:f1:fd:79:
                    33:13:2b:e3:12:bc:4c:cb:2f:f2:38:29:85:3a:39:
                    31:f8:d8:7b:ad:03:47:d2:16:a2:1f:ac:1f:4b:50:
                    98:0c:f9:c3:d8:0a:99:f1:dd:2e:fc:0a:0b:c4:5f:
                    68:7f:a2:e8:20:b9:57:a2:34:a6:d1:50:0a:b5:95:
                    ea:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5A:CE:A8:19:E8:89:92:BC:0E:A2:84:8C:BF:48:86:97:37:19:A6
            X509v3 Authority Key Identifier:
                keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:79:a1:dd:e6:b8:fa:b9:bb:de:f1:9e:53:1e:ab:ee:3f:8a:
         12:61:f6:89:47:0f:37:5a:8a:15:b3:7b:3e:68:56:49:bd:f0:
         1b:29:0a:69:29:d3:1c:a3:e6:02:36:c1:e0:e2:74:d2:12:f7:
         28:2b:e1:13:e9:60:88:2b:9d:5f:01:fb:3a:72:5e:86:e4:81:
         ae:56:da:c3:c9:9b:3b:29:01:e2:2e:2a:46:8f:8d:d6:cf:bf:
         64:db:a7:b0:f0:9e:86:e6:56:3d:e6:b1:33:e3:58:f1:69:b9:
         bf:a6:a0:b6:3d:d8:19:d8:1d:2b:4d:fc:27:46:ee:fc:e0:71:
         fb:4b:29:53:fe:85:22:ca:87:15:4d:37:e3:cd:44:95:55:d5:
         62:91:5e:2a:fd:26:0e:14:58:06:77:9d:59:e9:7c:b1:f9:4c:
         be:01:6b:d1:ff:b9:59:5e:13:5e:95:3f:9e:0b:fe:9e:1c:e0:
         17:94:a4:20:8f:4e:91:6d:d4:00:62:17:c0:f5:44:fa:b8:41:
         48:df:60:09:1a:5d:3a:77:87:c2:f8:a9:87:52:70:ba:01:53:
         27:0d:5f:2a:c8:ae:05:b4:72:7c:a9:74:fd:09:8b:26:08:a4:
         9b:46:48:e1:a4:0f:11:74:c5:21:56:e4:c0:f3:9f:49:d8:0f:
         e5:57:48:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:09:50 2026 by rpki-client