Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
File:                     g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft (raw, json)
Hash identifier:          xjxXScVxqUoBnBBG/KOlxPhzBYvXMhOfLxuqFTg9wGY=
Subject key identifier:   6E:39:02:30:48:64:CA:75:7C:5F:65:EE:80:66:1E:D5:E5:E5:73:FA
Authority key identifier: 83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
Certificate issuer:       /CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Certificate serial:       019D996251806160B4D404F9B226CACC6B69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
Manifest number:          095D
Signing time:             Fri 17 Apr 2026 03:00:50 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:50 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:50 +0000
Files and hashes:         1: b1KrSMtgQ3wtC7LRVXqRaRG-Kyo.roa (hash: 1Mhz+jZ0j26sgAjplNt7YLlv8U2oEM5WHSOMuFm4FJo=)
                          2: g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl (hash: 9Y/sYu8dWkiPoiDsYtf6tk1QyjUarRa6DeVDdBbGT3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:51:80:61:60:b4:d4:04:f9:b2:26:ca:cc:6b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
        Validity
            Not Before: Apr 17 03:00:50 2026 GMT
            Not After : Apr 18 03:00:50 2026 GMT
        Subject: CN=6e3902304864ca757c5f65ee80661ed5e5e573fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:11:2c:69:06:72:bd:84:3f:6c:06:66:75:b1:
                    d5:98:1d:3f:91:03:64:01:d7:cb:fe:7a:46:86:28:
                    b1:66:04:ee:8f:57:9e:93:c7:d6:e3:a3:07:87:22:
                    c9:ea:a1:b9:50:d2:b7:1f:9f:86:dc:24:e4:ce:35:
                    ac:3f:6f:5c:14:c6:31:0c:82:58:b0:0d:b0:e2:40:
                    5e:e4:58:fd:79:49:75:17:78:bd:ee:a9:a1:b2:ac:
                    d6:d4:cf:f4:da:c1:da:09:fd:7a:83:ff:53:35:83:
                    7d:83:89:cc:f4:fd:1d:57:8f:0a:5b:d1:4b:1a:51:
                    d5:d3:6b:75:c1:b9:90:de:df:46:d1:f9:cc:5d:32:
                    e5:a2:d9:70:39:78:c1:09:43:ab:a4:b4:17:2c:4a:
                    ed:b0:60:b4:cd:17:a9:98:95:50:13:05:80:d9:34:
                    2a:bc:9d:4e:f9:a1:45:a1:e5:c5:a0:eb:a9:f9:bc:
                    04:fc:53:82:83:64:67:75:34:90:73:e2:81:65:a5:
                    ff:25:ce:db:9d:32:b1:a4:61:11:74:10:44:d2:5c:
                    09:a0:72:5f:2f:ec:a6:15:48:c0:0e:45:97:8c:50:
                    dd:00:a3:11:a9:65:9d:9b:ae:c2:77:f4:0a:07:73:
                    d2:bc:5b:a8:3b:a1:b1:31:d3:66:f6:9f:65:15:db:
                    3d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:39:02:30:48:64:CA:75:7C:5F:65:EE:80:66:1E:D5:E5:E5:73:FA
            X509v3 Authority Key Identifier:
                keyid:83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:68:02:05:a4:ea:28:65:c9:4b:e0:61:4f:bd:1a:a3:10:67:
         67:ad:16:2f:f2:8d:4c:dc:41:22:c2:a3:79:c3:00:f7:d9:91:
         3c:e2:eb:8f:cd:16:51:b3:69:03:cf:92:0a:37:ef:4a:53:56:
         86:ea:02:69:e9:bd:05:a1:43:99:31:0c:c8:c5:d4:cf:b9:bf:
         e7:ed:34:44:2d:52:90:a7:a3:80:96:82:b8:5e:cb:b2:54:9a:
         0a:8c:23:12:c3:b2:c0:2d:ab:9f:57:f2:0f:b3:eb:01:eb:6f:
         59:e6:6f:99:dc:a3:e2:84:ab:62:aa:83:11:46:54:91:d8:23:
         3a:f5:d7:c7:b0:6e:c1:74:13:b3:5f:1b:f5:e3:32:e0:2e:10:
         81:9a:e1:ad:e6:b2:2a:c1:68:16:34:cb:52:38:35:d5:29:5a:
         63:ef:06:fa:f8:76:1c:0e:9f:b8:a6:ff:e9:e2:52:9f:e5:8d:
         50:9c:0f:cf:a3:a1:6b:92:dd:42:65:57:e4:88:46:02:a8:c9:
         21:18:ef:66:d0:35:d6:0d:bf:cc:3f:d0:35:57:8b:14:77:8f:
         33:f8:ed:6f:c7:3e:60:4d:7c:09:6a:05:1e:9b:ce:26:33:ec:
         ca:dd:ad:49:3e:19:ef:56:3a:96:d8:a9:9c:4f:f5:f9:01:d5:
         1b:d6:f3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:04:30 2026 by rpki-client