Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
File:                     GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft (raw, json)
Hash identifier:          X7DFDlgHo1ycBS57efvg/LVXyrNCh9vrj9p2EM9Axj0=
Subject key identifier:   32:3F:56:EB:C2:03:F4:92:7A:36:44:C0:2C:6D:99:E1:64:E6:1A:70
Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Certificate issuer:       /CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Certificate serial:       019E1F1199BFB19B04A04803F2BE3BA81E06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
Manifest number:          190D
Signing time:             Wed 13 May 2026 02:01:47 +0000
Manifest this update:     Wed 13 May 2026 02:01:47 +0000
Manifest next update:     Thu 14 May 2026 02:01:47 +0000
Files and hashes:         1: 2OlXrMHEGCGdCIkFH9DwRH8m-_Y.roa (hash: EyDlhcGNJI5g7xCKKg+SLdnpu6y3b/Owb67XHcNo4LM=)
                          2: GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl (hash: xr9FZ+gtbQZLdapZ5+wAc9vBY5HqioKmzgtm0Ffhf3g=)
                          3: frVqf7Qb9l_BsfQariFSVHz8ob4.roa (hash: YJglM4AaABJW1ebpCVy7ykfzKfkx+c4T33VsT0DyZ/M=)
                          4: lfErVfdcsg1i7vmEMxFgsv4bocY.roa (hash: 8hpg8Z6qBYfbCxzlnCltHugOjct8isyofGtd0CKT8v8=)
                          5: xoTCt08cS7BgB_IaDphUNXFIRxo.roa (hash: s3xQf9aSy+8qTNIu1cEAABJrY28zwSkcrisFpnI+ffU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:99:bf:b1:9b:04:a0:48:03:f2:be:3b:a8:1e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
        Validity
            Not Before: May 13 02:01:47 2026 GMT
            Not After : May 14 02:01:47 2026 GMT
        Subject: CN=323f56ebc203f4927a3644c02c6d99e164e61a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ba:58:c1:20:d5:ef:f7:af:97:ab:d8:1a:8b:
                    ec:d5:43:5b:46:f2:0c:d8:f3:6d:d2:72:0b:3a:a9:
                    f6:9e:bb:89:bc:8c:82:02:fc:3e:cf:3d:b7:dd:40:
                    30:bf:a0:91:e8:9a:bf:b3:54:5a:40:89:5c:76:18:
                    12:46:e8:54:3f:05:e3:c9:f3:e7:49:e9:f2:ad:85:
                    c6:ab:94:aa:c8:a1:5a:d8:d8:40:75:e3:c7:93:c3:
                    5b:36:16:21:ca:85:04:fa:64:20:7e:f8:7d:70:52:
                    94:ba:7d:47:35:4f:6b:b8:1b:f0:e1:1d:43:3a:6e:
                    1e:96:63:a1:ae:e4:23:48:5b:de:d8:e0:4b:6a:b5:
                    bd:51:9f:47:b6:9d:e1:fa:9b:2a:cb:14:ce:71:ad:
                    98:7b:34:d1:f3:86:b1:47:96:33:aa:d9:cc:af:82:
                    a8:68:1e:4a:51:25:76:d7:7c:9d:d2:c8:00:40:00:
                    c2:7f:23:68:7e:a8:c8:1f:cb:c6:65:71:35:f4:ff:
                    c8:a7:5d:5f:d8:2e:79:ee:ca:4f:c3:5a:e5:4a:6e:
                    de:31:e6:47:9e:b8:d9:ca:42:fd:1b:d3:2e:3c:5c:
                    5e:eb:21:a8:48:b1:a9:f4:bd:c8:f5:de:0c:c0:01:
                    61:42:25:fd:82:71:96:63:49:5c:62:e1:c5:df:ce:
                    71:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3F:56:EB:C2:03:F4:92:7A:36:44:C0:2C:6D:99:E1:64:E6:1A:70
            X509v3 Authority Key Identifier:
                keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:1b:0a:63:d4:8a:33:4f:62:97:18:5c:d6:94:bf:8b:e9:32:
         e2:5d:99:27:fa:1c:47:7b:e4:f3:39:9c:a8:da:9d:03:9d:f0:
         e1:63:8b:fd:f2:8a:8f:5a:be:17:4d:d7:5d:6f:22:09:88:02:
         7a:c9:fa:28:6e:8b:36:0c:7d:db:98:9d:06:9f:13:25:00:aa:
         4f:e7:bc:7a:5f:ae:89:7e:bd:9c:83:e0:0e:07:7a:f5:44:bc:
         1f:42:c4:bf:ed:bd:87:e9:42:50:88:1c:02:e1:95:fa:55:1c:
         7f:c3:87:bf:05:06:73:9b:0e:ef:d4:b7:bd:95:9d:64:2e:d7:
         c0:fd:d4:80:29:ca:b2:a1:66:b8:91:ba:98:22:0f:6b:bc:09:
         60:29:69:25:d6:bc:1d:e8:8b:37:ac:7a:8a:35:95:b0:53:bf:
         c1:dd:1f:5b:bb:1d:f9:24:38:f8:f0:f2:20:e4:a1:be:db:92:
         81:3f:76:52:05:87:c3:5c:f1:f0:03:c1:3c:66:76:4a:44:44:
         be:cd:8c:a4:b7:c4:7b:8e:9a:d1:46:a0:69:80:13:29:1c:03:
         6f:03:b6:78:f5:48:e1:4e:a4:fa:ee:53:86:57:b3:52:b6:b6:
         87:a1:7c:24:ee:f3:81:b0:3a:0e:e2:c0:cb:f2:bc:47:e0:c0:
         db:5c:14:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:28 2026 by rpki-client