Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
File:                     gL0AgpU21HdF9H2p0ainL23UYtQ.mft (raw, json)
Hash identifier:          OI/U/KBxHjeKtLkcD010YJx8fgOT/2f0aOr3nOxVbk4=
Subject key identifier:   A5:FB:6B:27:C6:CD:7B:5E:F2:1A:34:E8:61:9B:EB:A0:90:5B:7F:91
Authority key identifier: 80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4
Certificate issuer:       /CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
Certificate serial:       019E20C8DCA1DDC3FB12BDB2DFC4FDFE12C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
Manifest number:          190C
Signing time:             Wed 13 May 2026 10:01:34 +0000
Manifest this update:     Wed 13 May 2026 10:01:34 +0000
Manifest next update:     Thu 14 May 2026 10:01:34 +0000
Files and hashes:         1: K4rNlv6gYUKRgIqav4ptqCTSNGg.roa (hash: peGnClYWPqnMOOfi13oSusAgZ5+U+k8ztyI3Zgy/aPo=)
                          2: gL0AgpU21HdF9H2p0ainL23UYtQ.crl (hash: D6d7dOGIsjXJi7d0b1+5eznYb5UuE5lr5DE5G1YamoU=)
                          3: zposQW8-Ml33uc3ENu1a83hxjEI.roa (hash: aFqmx16M5gCNIMqJZ5eqfmDRHZVtOgPSXQjK2JfuQ3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:c8:dc:a1:dd:c3:fb:12:bd:b2:df:c4:fd:fe:12:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80bd00829536d47745f47da9d1a8a72f6dd462d4
        Validity
            Not Before: May 13 10:01:34 2026 GMT
            Not After : May 14 10:01:34 2026 GMT
        Subject: CN=a5fb6b27c6cd7b5ef21a34e8619beba0905b7f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b1:f5:4e:33:40:50:08:63:db:50:b5:64:90:
                    3e:bd:49:7b:99:a7:fe:cd:9d:a9:ae:c1:15:96:17:
                    24:e3:53:f4:a3:c0:d4:3a:88:b8:6e:72:e1:2a:c6:
                    60:74:f2:2f:3f:08:9d:00:30:b8:52:49:ca:96:13:
                    f4:8d:c3:86:84:d9:fa:77:60:43:85:ad:e6:07:77:
                    ed:4a:62:30:75:4a:ed:02:ab:00:6d:9c:c6:3e:6c:
                    33:60:14:94:51:44:f8:54:c7:d2:08:a4:9d:18:29:
                    f2:ae:c7:64:de:98:58:9d:30:fb:9f:a2:2c:03:5e:
                    ee:ac:e9:b8:f7:eb:cd:b1:3f:5e:cc:8c:d6:cc:84:
                    c7:5f:43:db:53:15:cf:b9:13:83:c3:aa:f5:ea:58:
                    76:8c:93:50:20:fb:5e:fc:ce:21:e0:8f:3e:51:e0:
                    ce:ba:d3:2e:62:12:f0:e4:35:89:9c:25:6e:a9:85:
                    03:8a:27:c0:51:da:41:b2:22:20:3e:4b:ff:90:10:
                    87:30:eb:29:35:2d:af:ae:a4:69:37:80:20:01:45:
                    d4:4f:55:b2:bf:b2:ad:be:26:79:4f:c2:16:20:d7:
                    22:04:a7:08:54:10:e0:55:90:45:bd:7b:85:42:14:
                    1f:60:a2:6e:56:cd:42:3d:4e:f3:57:f5:48:bb:29:
                    f7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FB:6B:27:C6:CD:7B:5E:F2:1A:34:E8:61:9B:EB:A0:90:5B:7F:91
            X509v3 Authority Key Identifier:
                keyid:80:BD:00:82:95:36:D4:77:45:F4:7D:A9:D1:A8:A7:2F:6D:D4:62:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gL0AgpU21HdF9H2p0ainL23UYtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/64e19f-fe54-42cd-8923-09b9920fe00f/1/gL0AgpU21HdF9H2p0ainL23UYtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:90:a0:9e:74:dc:44:78:fe:45:ea:3e:d6:34:e0:74:22:c7:
         6b:27:55:4a:7c:d3:6a:69:25:26:20:1e:6e:95:76:e4:de:97:
         97:cb:35:d3:b3:97:4f:3e:1d:85:ff:d3:ed:a3:6a:a3:28:55:
         5f:8a:1a:1b:2c:ad:60:1d:ce:87:e9:16:5d:d0:d8:3e:9b:d5:
         8a:d0:5e:01:97:c5:28:d5:3b:62:70:37:69:72:27:dd:73:1b:
         18:a6:48:60:eb:55:3a:4e:b5:7f:fc:31:d3:80:46:65:ad:86:
         e4:f6:80:3b:7f:a4:a8:21:24:7a:10:4c:f6:1f:7a:11:a7:28:
         49:5d:bd:39:07:c7:cc:6e:2e:27:21:48:20:40:dc:df:ec:83:
         1c:d8:5b:f7:d4:38:1a:b2:bb:98:29:e9:bb:79:84:42:4d:ee:
         c4:c0:1e:28:99:7d:64:c5:b9:b7:6e:6e:e4:3b:6f:43:f4:8f:
         8a:1e:4b:29:9c:52:ba:8e:70:7c:70:df:33:4f:ed:34:e3:18:
         3e:9e:7a:06:23:4b:c1:cb:23:3b:46:7f:7a:63:12:db:17:54:
         e9:50:1a:e8:39:11:08:d4:6c:de:cf:8f:c6:9e:43:df:f3:ca:
         bb:b3:0c:a0:d3:d0:1d:37:1a:1b:de:5f:ba:e1:b8:31:97:69:
         fa:46:a9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:01:24 2026 by rpki-client