Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
File:                     gmf7Sgtne4N3kHuC-x-4gQov7wg.mft (raw, json)
Hash identifier:          8L0sRLizlkbVceOyuUv6laxhzFj19ZMUhZVWCuDXwTQ=
Subject key identifier:   6D:A9:E0:F1:05:B2:EE:95:7A:70:5B:EB:7C:FA:98:E6:E4:95:A6:E2
Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
Certificate issuer:       /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Certificate serial:       019E1F7E77E52A7AD17C54961A5E0F327AB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
Manifest number:          1915
Signing time:             Wed 13 May 2026 04:00:42 +0000
Manifest this update:     Wed 13 May 2026 04:00:42 +0000
Manifest next update:     Thu 14 May 2026 04:00:42 +0000
Files and hashes:         1: BfT142IZrG6w9x_sdv9NlYOwnjk.roa (hash: nMyUMScF9ierHQNaWf4H2FAJS6EPcrZmAIOFL2K/38E=)
                          2: WbmA7_GX8lhYD5gwDfMty_B0UMU.roa (hash: pbu61dkoeJNOEFlPCcPVO/fOlKpt2IKFm6HwfwnwwJQ=)
                          3: gmf7Sgtne4N3kHuC-x-4gQov7wg.crl (hash: fiBJmeCyBLR6eu7QgYyBNfrg1ZeYYC2auz1++gs3uJk=)
                          4: hIyRTGN4bqnLKJCwc1F2Eg7MBmc.roa (hash: VGcdVOE9BIoWHNOMBje5zrVkxvWhg/+tqscfV1XcAU8=)
                          5: ltFa2izzbGOqtwBVA_TWfrJgXcI.roa (hash: OPV1MRSkrBUfBNL/wEtgSLV80hiGFh9joek6UVN6nV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:77:e5:2a:7a:d1:7c:54:96:1a:5e:0f:32:7a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
        Validity
            Not Before: May 13 04:00:42 2026 GMT
            Not After : May 14 04:00:42 2026 GMT
        Subject: CN=6da9e0f105b2ee957a705beb7cfa98e6e495a6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6c:dc:3d:be:ed:ba:a9:7d:1d:19:dd:74:4a:
                    67:d0:e6:4b:50:87:59:64:32:1d:5e:4f:b7:f4:14:
                    3e:6a:dd:cc:13:04:ce:2d:a6:1b:30:9f:17:87:5a:
                    8d:f1:da:98:81:75:d5:32:f6:7d:df:90:9d:92:d4:
                    5b:ec:69:ed:cb:89:04:df:57:0f:d6:6c:ab:18:fc:
                    cc:bf:35:76:13:75:d0:a0:f1:b5:38:b5:b2:74:de:
                    75:ed:e3:86:93:6f:2a:76:a4:a5:41:cc:41:b2:13:
                    bf:cb:0e:4c:e2:f0:c0:b0:b2:ea:38:87:a9:12:b4:
                    0e:74:cb:e4:83:09:60:e4:30:8a:cd:5a:53:cc:9f:
                    76:93:c1:8f:27:0b:64:7f:07:d4:cd:85:b9:1e:d7:
                    24:15:72:fa:33:25:31:0a:65:f7:a7:ff:10:79:e6:
                    15:76:d2:6d:37:3d:a6:a5:04:a5:4a:79:39:67:e6:
                    9f:50:6c:ce:a9:aa:73:3e:3c:dd:5d:97:52:de:9e:
                    57:e7:0c:21:8f:d8:0b:45:f1:c5:04:64:98:9c:e7:
                    97:f7:78:cf:bf:cf:c5:60:84:50:22:5c:16:44:e9:
                    e8:3e:63:03:37:5c:58:0c:36:d6:ca:43:f7:9d:f4:
                    cc:49:eb:40:8c:b9:17:71:f3:6c:12:b5:9f:37:58:
                    14:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A9:E0:F1:05:B2:EE:95:7A:70:5B:EB:7C:FA:98:E6:E4:95:A6:E2
            X509v3 Authority Key Identifier:
                keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:2a:f0:83:00:86:40:60:49:36:84:5d:46:47:8a:c2:79:ab:
         ff:c8:f1:c5:d1:d6:03:02:b6:88:7a:70:f6:20:03:89:94:5e:
         8c:06:79:fe:9e:31:21:33:ab:22:5d:c6:ee:42:ca:d2:c4:f8:
         07:41:1f:a2:df:02:7b:30:ec:f3:e3:f3:f9:18:07:4d:f4:8c:
         a1:a8:a2:b8:59:be:d6:4e:96:68:fd:e1:9d:03:92:3f:db:f5:
         ab:c7:b0:e2:1d:f5:cf:a8:31:bf:00:f4:29:22:cb:55:d2:67:
         20:dc:48:32:78:34:8a:1b:55:8d:96:15:75:0f:af:55:23:c7:
         99:35:44:38:55:89:4f:bd:36:81:4d:7a:9a:16:6f:86:c5:92:
         2d:ff:32:c8:fc:8d:04:e4:92:19:70:fd:02:36:ff:db:d2:b7:
         db:df:8b:f2:cc:6c:a4:ac:83:4d:63:23:ed:43:18:21:ed:f2:
         62:be:a3:67:fa:a4:e5:53:5a:79:ae:c3:20:23:cd:a8:02:19:
         ff:8e:39:80:b1:b9:32:0b:8d:83:06:cc:6a:a9:21:1d:73:6b:
         4a:21:bf:e6:72:18:79:72:58:4c:3b:59:51:22:11:85:c0:46:
         20:76:14:f9:dd:02:86:d0:8c:b3:af:09:4e:81:9a:3a:57:07:
         17:35:40:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:17:52 2026 by rpki-client