Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
File:                     GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft (raw, json)
Hash identifier:          CL8TcrT3XaYfU2XcOO+D3MLBDwb7xZ73YcExo3DPzhI=
Subject key identifier:   4E:E7:15:D3:0A:ED:29:47:44:E0:00:2F:3E:A3:D8:67:A9:FD:38:F8
Authority key identifier: 19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E
Certificate issuer:       /CN=197fc930e4aa59b0303459f755698e8f998f471e
Certificate serial:       019E1F7F4F2FA782FA42A661C75C9A4EC516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
Manifest number:          189A
Signing time:             Wed 13 May 2026 04:01:37 +0000
Manifest this update:     Wed 13 May 2026 04:01:37 +0000
Manifest next update:     Thu 14 May 2026 04:01:37 +0000
Files and hashes:         1: GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl (hash: JTFN982I3dXdGnZCmmDMrOmsmF209dj5xVdMubJIang=)
                          2: Zxga6O5B6uWj5ovSd6ojGTRvTQk.roa (hash: B5IjyWOTGquDtIk33USdJO3jmFl66T5rjOlw+iwqVn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:4f:2f:a7:82:fa:42:a6:61:c7:5c:9a:4e:c5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=197fc930e4aa59b0303459f755698e8f998f471e
        Validity
            Not Before: May 13 04:01:37 2026 GMT
            Not After : May 14 04:01:37 2026 GMT
        Subject: CN=4ee715d30aed294744e0002f3ea3d867a9fd38f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:79:b0:39:c5:21:0d:85:ae:ea:31:7d:05:84:
                    16:d0:bd:18:47:75:06:20:d1:51:aa:77:18:69:55:
                    17:eb:93:5f:90:b0:5e:28:8a:32:2c:65:b7:b5:07:
                    8f:d6:0c:67:ab:59:b4:49:9a:3d:7d:53:54:10:13:
                    cf:a8:a6:5a:6b:eb:99:9c:96:60:84:6e:f4:28:75:
                    a4:8a:60:da:21:f2:25:53:76:dc:71:25:66:a2:66:
                    1f:93:b2:a8:ed:e3:0f:12:b6:c3:a1:ee:47:71:89:
                    8e:9b:8f:12:9c:00:7c:79:aa:64:86:1f:ba:be:a9:
                    16:a0:9b:80:8a:ff:ec:dd:0a:4a:4b:e8:29:f0:a6:
                    cb:8a:95:75:5a:91:ef:94:b5:0f:00:c0:12:39:6c:
                    8b:09:91:62:7d:2d:ad:8a:c4:2a:b5:cc:61:aa:4a:
                    38:07:e8:b0:47:81:d7:dc:f1:70:71:7c:66:dc:93:
                    c8:e5:5e:41:6f:5d:a9:2d:31:f2:de:74:39:12:c3:
                    5d:01:94:f2:9f:5f:10:15:ca:a0:35:c1:ba:15:6c:
                    9f:19:c2:5e:9b:5a:e4:c8:a8:87:94:32:4e:ea:81:
                    b0:c9:4a:e5:44:0a:53:9e:3d:ae:4b:6f:7e:62:17:
                    c2:9e:15:36:ad:8e:1a:c7:c9:d9:71:ac:73:63:46:
                    48:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E7:15:D3:0A:ED:29:47:44:E0:00:2F:3E:A3:D8:67:A9:FD:38:F8
            X509v3 Authority Key Identifier:
                keyid:19:7F:C9:30:E4:AA:59:B0:30:34:59:F7:55:69:8E:8F:99:8F:47:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GX_JMOSqWbAwNFn3VWmOj5mPRx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ea0e9-27f7-4d71-a900-27be09118c61/1/GX_JMOSqWbAwNFn3VWmOj5mPRx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:6b:91:d5:6c:6d:29:6d:87:0f:fb:94:85:d8:7a:a2:88:a5:
         5b:92:d5:f0:5f:5c:49:ce:63:90:cf:03:5c:94:f7:53:9f:73:
         d2:47:22:3d:9f:6c:16:6f:78:ed:fd:37:bd:78:77:b9:33:be:
         a0:93:b9:f9:b4:0b:b7:f9:eb:ac:c4:70:c3:4a:16:3a:ee:ec:
         fc:8b:ca:88:a4:ed:d6:58:04:af:b3:9a:d0:0d:79:68:76:79:
         cd:64:44:18:08:79:e5:c4:51:d7:b9:ed:70:d8:c7:fe:ae:1d:
         62:e3:5a:c0:cc:99:4d:f4:29:9c:e3:1a:9f:12:82:5a:c6:de:
         89:44:f8:e1:f0:93:b5:bb:f6:00:47:68:62:70:31:7c:ef:9f:
         e0:66:61:a8:39:8d:f0:78:6a:db:ab:04:27:cc:31:60:b4:2b:
         a3:a9:28:ee:c8:e5:8d:61:e4:69:14:5d:55:76:03:3b:3b:24:
         0c:9f:1f:b8:c7:97:42:10:c6:3e:57:1f:ca:23:26:81:36:f9:
         71:2f:f8:28:20:8c:3c:f7:f1:c7:17:44:72:fd:a2:55:df:aa:
         cc:93:09:1e:c0:9f:03:71:5c:4f:12:15:a1:2c:cc:1e:6e:33:
         a9:9f:63:e0:04:ae:25:f2:53:5e:fc:df:ec:0a:7e:a8:27:3d:
         21:0c:c6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:38 2026 by rpki-client