Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
File:                     GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft (raw, json)
Hash identifier:          RcBySK+vSMyFAmM1oziXQFTHI2Sa9UV5czUTdireDOc=
Subject key identifier:   8E:2C:E2:21:77:CB:E1:3A:99:B4:87:DA:74:A1:23:E6:BA:EC:F8:8E
Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Certificate issuer:       /CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Certificate serial:       019EBF5AC3FB2606ABDE683534D46E2EA140
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
Manifest number:          1960
Signing time:             Sat 13 Jun 2026 05:00:57 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:57 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:57 +0000
Files and hashes:         1: 2OlXrMHEGCGdCIkFH9DwRH8m-_Y.roa (hash: EyDlhcGNJI5g7xCKKg+SLdnpu6y3b/Owb67XHcNo4LM=)
                          2: GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl (hash: 3FoQbAtGNsJ2RPHMaNVRd75OSYxqcfcx4blhjRrbWwE=)
                          3: frVqf7Qb9l_BsfQariFSVHz8ob4.roa (hash: YJglM4AaABJW1ebpCVy7ykfzKfkx+c4T33VsT0DyZ/M=)
                          4: lfErVfdcsg1i7vmEMxFgsv4bocY.roa (hash: 8hpg8Z6qBYfbCxzlnCltHugOjct8isyofGtd0CKT8v8=)
                          5: xoTCt08cS7BgB_IaDphUNXFIRxo.roa (hash: s3xQf9aSy+8qTNIu1cEAABJrY28zwSkcrisFpnI+ffU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:c3:fb:26:06:ab:de:68:35:34:d4:6e:2e:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
        Validity
            Not Before: Jun 13 05:00:57 2026 GMT
            Not After : Jun 14 05:00:57 2026 GMT
        Subject: CN=8e2ce22177cbe13a99b487da74a123e6baecf88e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1b:20:9a:21:76:bd:ca:1d:87:16:87:82:6e:
                    8e:fa:fb:3e:53:d0:e5:3e:e5:7c:de:e1:21:5b:2d:
                    35:67:10:55:fc:58:a0:98:bb:83:f5:55:6f:2b:51:
                    5a:60:e7:a1:24:5c:d9:a5:5d:3d:90:ab:ff:9e:9b:
                    b8:9a:fa:d4:63:f2:36:22:44:03:6f:f2:e9:e3:3a:
                    7c:9d:a5:38:95:a9:fe:ad:32:67:93:83:fd:82:a5:
                    98:bf:00:11:65:b6:e6:89:e5:3d:ea:d9:09:68:af:
                    f8:07:56:0d:58:36:13:c0:c5:72:c9:4a:2f:d2:9b:
                    5d:24:79:16:bd:af:95:d3:c7:ff:50:51:dc:16:4a:
                    b6:2b:4b:7d:d7:6d:cc:d5:d4:42:31:e8:9d:97:97:
                    ac:0d:d7:ca:b7:08:2b:5d:30:f6:ea:12:da:6f:1e:
                    4f:0c:c8:36:15:a8:1a:a5:5b:ec:9d:5b:65:9a:d8:
                    7b:b3:4b:3a:76:cb:c5:1e:c1:34:24:4d:74:1c:cd:
                    55:02:f9:fc:b5:87:57:13:ac:3c:f2:cd:66:d5:c6:
                    5f:a0:70:dc:05:21:22:f7:0b:ad:f7:d4:e1:3c:4b:
                    2c:1a:64:e9:9d:25:50:9e:c4:f6:9d:27:00:c9:a8:
                    91:31:d9:8b:8c:fb:f4:1f:be:5a:ea:6e:71:3b:c4:
                    46:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2C:E2:21:77:CB:E1:3A:99:B4:87:DA:74:A1:23:E6:BA:EC:F8:8E
            X509v3 Authority Key Identifier:
                keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:6c:64:aa:db:c1:3e:ef:fc:e7:82:ae:34:8b:71:30:36:c7:
         88:d1:3c:92:ab:8f:c3:75:46:c5:a5:37:a9:ba:bd:1e:56:af:
         61:65:a0:f0:66:9b:1b:9b:e7:36:6f:e7:74:6f:e7:eb:44:90:
         e8:5a:32:05:ad:ba:cf:a2:bc:49:7c:c1:23:34:d7:ab:28:7e:
         df:20:b9:0d:ef:9c:1b:96:64:20:66:e1:55:2e:55:77:cc:b3:
         82:7d:35:b9:e3:ca:a2:95:28:a1:5e:b5:c9:37:fb:71:44:01:
         ca:2b:69:a6:57:85:ba:ad:28:e6:c2:a9:4f:ea:c8:06:d8:ad:
         05:85:f1:02:6e:40:78:1a:33:40:51:e6:b9:b1:1d:78:1b:21:
         23:44:6d:d6:59:a4:1d:9c:ca:13:29:c7:87:88:f3:98:d6:98:
         e9:f3:dd:8b:2a:d7:db:1d:de:a1:db:79:56:d5:bd:71:93:54:
         eb:20:75:e7:44:22:2e:5d:cc:24:3c:50:10:93:c4:10:1d:4f:
         d7:56:72:f1:b4:db:fa:ba:a4:51:72:6d:4a:92:06:f6:ff:9b:
         62:2b:2e:de:87:73:0a:03:54:95:b5:36:95:b0:27:75:6b:af:
         ad:b7:ff:42:53:6a:5c:c6:38:ff:39:6b:b8:82:b3:5c:5c:6f:
         f8:05:e0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:08:17 2026 by rpki-client