Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
File:                     Gf__KJ8trQ_AhFawutVNe6RJpJI.mft (raw, json)
Hash identifier:          rhCSmTphl2OEGqvg1kZ66hlkXSZ75gex5QXxkyKGKyE=
Subject key identifier:   39:F0:29:F8:82:DF:CB:D0:3D:60:00:0D:14:CB:C6:E4:B4:37:6D:80
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Certificate issuer:       /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial:       019E1E35CE5EFC5CABBABACB42B8305ACE8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
Manifest number:          191B
Signing time:             Tue 12 May 2026 22:01:43 +0000
Manifest this update:     Tue 12 May 2026 22:01:43 +0000
Manifest next update:     Wed 13 May 2026 22:01:43 +0000
Files and hashes:         1: BCTCosehzN-IVujDky1DFPEPdk8.roa (hash: dD51Omff3fmTkuQoAW0zLyIe0HD79k7wegGUmnwdJ5U=)
                          2: Gf__KJ8trQ_AhFawutVNe6RJpJI.crl (hash: PkQcS3sSszYbrf6d5MiBkwW1qD9bGB+F11VhDBe5MtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:ce:5e:fc:5c:ab:ba:ba:cb:42:b8:30:5a:ce:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
        Validity
            Not Before: May 12 22:01:43 2026 GMT
            Not After : May 13 22:01:43 2026 GMT
        Subject: CN=39f029f882dfcbd03d60000d14cbc6e4b4376d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:93:db:12:88:2c:44:c5:31:11:45:7f:08:b4:
                    cb:c5:b1:d5:e9:22:96:6c:39:41:f7:01:3d:54:79:
                    8d:c1:ab:62:6f:ff:8b:af:75:f3:63:58:1e:d8:ae:
                    b4:09:5c:df:0d:39:f6:12:c0:3f:49:49:d5:18:03:
                    44:9c:16:50:1b:6f:a5:fe:b5:09:f4:8d:8b:71:74:
                    07:8d:cf:ee:a3:bb:2f:0a:04:6f:bf:4e:c9:b3:5b:
                    2a:fe:00:de:bd:f5:df:bc:94:f3:55:e8:33:7b:bb:
                    fd:5b:59:92:58:b8:ee:dc:07:f5:46:d1:72:39:3f:
                    ba:ac:55:a0:ba:9c:34:d4:4b:3d:4b:78:0a:14:42:
                    7a:eb:14:6e:56:04:57:ab:8c:9f:f3:2a:bd:1c:a5:
                    03:f3:63:b4:f7:e1:be:00:49:ac:6d:39:d9:34:bf:
                    b9:a3:1f:bc:76:ab:42:08:4f:81:f4:51:b1:97:59:
                    c4:d5:f1:c1:78:1e:6a:e6:4e:03:9c:18:56:26:25:
                    2f:66:9f:77:27:ff:e9:f7:e7:8d:f2:e8:8c:4e:01:
                    0a:e4:ec:92:da:f8:43:c9:20:4d:ea:64:fd:02:0c:
                    a7:6b:8e:64:09:ac:a6:1f:7b:f6:56:2e:57:da:1e:
                    75:e0:5a:fd:72:e1:b6:d7:b7:5b:71:3c:31:3f:4b:
                    27:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F0:29:F8:82:DF:CB:D0:3D:60:00:0D:14:CB:C6:E4:B4:37:6D:80
            X509v3 Authority Key Identifier:
                keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:95:92:87:dc:26:d3:06:48:e0:33:e9:cb:35:d9:bf:32:b7:
         66:84:99:e0:68:6b:4d:c2:94:73:98:97:06:2c:eb:37:dc:02:
         12:40:b7:34:d4:0a:39:eb:73:be:86:9c:6a:af:6d:8c:e1:a8:
         0b:ad:ee:a9:f5:51:bf:a5:7b:fc:51:6f:15:1e:d4:85:2a:93:
         6e:3a:4d:d5:69:6b:3e:9b:f3:4b:a0:a5:66:4b:46:ed:43:98:
         65:cc:a8:1f:73:bf:16:fa:f0:84:2f:14:6d:ec:20:55:80:f4:
         18:d7:d2:4c:f7:a2:21:39:7b:d8:10:95:5b:da:af:09:99:c6:
         ad:c8:35:e2:0d:3c:b1:ed:eb:3e:d2:e6:b9:01:b4:91:47:39:
         f6:b5:7e:d6:7e:30:3b:35:3e:7f:61:44:d3:32:ae:5f:aa:3d:
         ac:24:d0:55:45:7e:5d:97:0a:e7:24:4f:6b:8b:0c:2b:08:16:
         7a:a8:39:f9:40:bd:fd:f5:cc:63:6b:55:d1:0d:79:5f:48:bf:
         19:98:9a:3c:df:ce:12:be:5d:84:d6:7c:d6:d7:64:de:3b:bd:
         fb:e9:66:fb:d3:10:04:62:ce:0f:39:ed:09:38:50:be:3d:6a:
         46:a3:41:98:ca:0b:d6:72:26:7b:22:08:b9:e2:ee:5f:63:f4:
         d7:ac:6d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:09:04 2026 by rpki-client