Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
File:                     gQbZlKEhklejzsntkc0Ym8PZOws.mft (raw, json)
Hash identifier:          4GslO2NZO1kXW0I2rbIA3NmE8H2q9il864hOcYU2qpw=
Subject key identifier:   55:86:99:5B:FB:B8:74:33:31:EF:71:77:DC:7D:27:B7:BE:6A:CF:9D
Authority key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
Certificate issuer:       /CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Certificate serial:       019E1D914BB1CED9C23E43984B8CC1CA4DD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
Manifest number:          190A
Signing time:             Tue 12 May 2026 19:02:01 +0000
Manifest this update:     Tue 12 May 2026 19:02:01 +0000
Manifest next update:     Wed 13 May 2026 19:02:01 +0000
Files and hashes:         1: F2IHJrnPyRwbzKo1HP_xqBvLdvQ.roa (hash: FgszxDdrz1FfhJ+T4y5DQNjiDZnx4cEgXP5k1Bjw7eg=)
                          2: gQbZlKEhklejzsntkc0Ym8PZOws.crl (hash: DHZjapsf82nC3xj1DKwXOF56Y78+QOo8WRXsN3/r+Jg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:4b:b1:ce:d9:c2:3e:43:98:4b:8c:c1:ca:4d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
        Validity
            Not Before: May 12 19:02:01 2026 GMT
            Not After : May 13 19:02:01 2026 GMT
        Subject: CN=5586995bfbb8743331ef7177dc7d27b7be6acf9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2c:7f:10:34:eb:ca:0f:46:df:7c:e3:50:00:
                    1e:65:73:42:72:24:9e:53:e7:7c:6e:e1:5e:ae:b0:
                    5c:91:ec:58:fd:9d:29:f6:e8:c3:fb:c0:25:2e:96:
                    99:66:2e:31:f3:1d:bb:5a:2b:df:1b:a1:27:b0:61:
                    17:10:04:d5:d2:86:a0:0d:8a:84:80:20:79:11:31:
                    80:27:29:6e:ca:5e:dc:1e:e1:09:db:c4:42:3f:65:
                    cf:69:52:e8:e0:cf:fb:49:f7:84:8b:54:96:d3:81:
                    52:3f:ec:03:40:20:1c:fd:c9:6a:0a:9e:3c:9c:f1:
                    1b:71:c2:dc:33:38:36:d0:4d:71:36:d6:84:f7:13:
                    10:23:58:31:ad:c3:58:07:1f:cc:8a:21:b9:29:25:
                    60:82:09:c0:85:4f:4a:61:f7:6b:23:9c:a3:3f:ad:
                    5f:ae:a9:16:74:28:9d:cb:54:35:27:89:14:fe:ec:
                    d6:a8:5f:a0:f9:7c:cc:81:71:96:9e:20:ad:a1:89:
                    e5:cc:c7:c4:e4:08:68:c2:17:c9:b6:fe:c8:dd:a4:
                    24:94:8d:7f:63:6d:27:8a:e2:2c:fd:dc:95:e5:80:
                    82:f4:f2:ca:43:c8:20:9d:e2:bb:b9:e8:62:ff:cb:
                    13:18:44:37:ef:3b:c4:86:7c:16:d9:d2:5f:c2:33:
                    e3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:86:99:5B:FB:B8:74:33:31:EF:71:77:DC:7D:27:B7:BE:6A:CF:9D
            X509v3 Authority Key Identifier:
                keyid:81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:de:85:e6:00:8f:a9:0f:c4:44:d1:4d:4e:ae:32:2d:49:ce:
         8e:07:12:02:de:b2:ea:28:9f:24:9b:16:c1:e9:c6:62:b2:ce:
         88:18:0a:63:ff:1c:ab:7b:66:03:b6:dc:29:30:53:2d:7d:e1:
         f9:03:fb:d9:2b:7c:b3:6a:80:94:4a:a3:d0:07:ec:2b:3d:c0:
         f5:48:c4:38:8a:ce:45:30:0a:96:53:73:3c:eb:97:c3:71:86:
         78:04:bf:6c:28:2e:07:ef:b6:f9:b5:ab:f5:59:ff:0f:fa:79:
         4f:30:11:16:b6:2b:df:60:f4:87:02:63:e3:34:03:2d:26:77:
         7e:00:4f:3e:44:79:5b:4b:ef:cb:3a:11:33:a6:90:d7:46:24:
         2a:ec:12:96:cf:a5:2d:c0:de:68:1e:27:6c:fe:65:e3:0f:32:
         b4:4a:1d:a3:73:57:fc:41:87:a8:21:d8:79:9a:2d:e6:f4:6c:
         21:4b:7b:c5:9c:c0:7f:d3:ff:0b:6c:d2:85:5d:82:80:80:0b:
         14:d7:8a:3a:35:23:43:df:18:2e:cf:1f:f1:41:53:e2:99:45:
         5b:df:28:ad:ff:29:cb:01:ea:bb:a1:5b:51:e5:3d:72:e4:a9:
         36:5a:e5:c9:fc:ac:56:33:5f:7d:56:1f:ec:06:06:f6:21:c1:
         d1:80:ff:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:00:57 2026 by rpki-client