Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
File:                     GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft (raw, json)
Hash identifier:          Z4IqV2b0LHdH1oanjvTK8isYMwqB/1sq+MBFa0YMPj8=
Subject key identifier:   E5:F5:93:DA:88:D7:6B:F7:AE:6F:50:25:5F:C9:4E:19:B1:71:0B:87
Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Certificate issuer:       /CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Certificate serial:       019DA378BBA3ACDF196987DFEA9F2B44E34B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
Manifest number:          18CD
Signing time:             Sun 19 Apr 2026 02:01:31 +0000
Manifest this update:     Sun 19 Apr 2026 02:01:31 +0000
Manifest next update:     Mon 20 Apr 2026 02:01:31 +0000
Files and hashes:         1: 2OlXrMHEGCGdCIkFH9DwRH8m-_Y.roa (hash: EyDlhcGNJI5g7xCKKg+SLdnpu6y3b/Owb67XHcNo4LM=)
                          2: GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl (hash: y0hF91VMoastfnj+r7lGAR26+/pbLWkLbe4dxW7/h1w=)
                          3: frVqf7Qb9l_BsfQariFSVHz8ob4.roa (hash: YJglM4AaABJW1ebpCVy7ykfzKfkx+c4T33VsT0DyZ/M=)
                          4: lfErVfdcsg1i7vmEMxFgsv4bocY.roa (hash: 8hpg8Z6qBYfbCxzlnCltHugOjct8isyofGtd0CKT8v8=)
                          5: xoTCt08cS7BgB_IaDphUNXFIRxo.roa (hash: s3xQf9aSy+8qTNIu1cEAABJrY28zwSkcrisFpnI+ffU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:78:bb:a3:ac:df:19:69:87:df:ea:9f:2b:44:e3:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
        Validity
            Not Before: Apr 19 02:01:31 2026 GMT
            Not After : Apr 20 02:01:31 2026 GMT
        Subject: CN=e5f593da88d76bf7ae6f50255fc94e19b1710b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:77:54:4b:19:05:66:ab:24:2d:85:f8:c7:60:
                    d8:bc:39:d2:3f:cf:96:d4:3a:49:cc:6a:e3:7c:00:
                    00:49:1f:78:c8:e6:91:f7:8a:ff:73:b5:2f:93:ff:
                    62:c8:2b:84:73:24:30:f7:2c:4e:98:ad:76:3c:9f:
                    51:a2:50:a8:2e:28:85:f3:28:e8:08:eb:fd:7c:12:
                    b6:8f:44:11:9e:e6:b0:06:87:dd:e1:4f:f0:cf:aa:
                    c2:55:a5:bb:11:c6:17:9c:07:73:8b:44:57:34:90:
                    cf:98:aa:c0:ea:ed:54:dd:d5:b2:39:77:ef:11:a1:
                    fd:37:6a:fd:39:23:7f:8f:06:a0:56:f6:a9:1a:78:
                    44:23:7f:fc:35:a2:2d:b0:e2:04:81:ea:1c:6b:51:
                    c4:0f:73:dd:96:ce:57:ff:db:a3:12:34:4a:e4:c3:
                    a5:2f:24:88:ef:1a:b2:94:40:9f:2f:f8:64:1b:87:
                    c3:52:79:3b:5d:d8:7c:ec:7c:03:a5:98:d1:94:3e:
                    39:a0:8a:f4:96:6b:13:30:fa:9c:df:93:ff:48:7a:
                    55:65:5d:fb:4c:c9:c0:77:25:f7:fd:34:f6:f2:9a:
                    4a:10:cf:a1:3a:02:ac:a4:c5:e3:81:2f:ed:6a:1b:
                    14:99:ff:72:43:87:44:5e:2e:97:a7:77:b5:6e:72:
                    e5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F5:93:DA:88:D7:6B:F7:AE:6F:50:25:5F:C9:4E:19:B1:71:0B:87
            X509v3 Authority Key Identifier:
                keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:1b:ec:88:b1:49:1c:82:5e:fb:34:52:74:c5:07:be:d6:5a:
         53:c4:65:78:59:47:07:ce:59:83:51:66:53:fe:35:36:63:f0:
         6f:68:a5:6f:95:f9:de:2a:8c:51:25:d8:3c:79:ea:10:24:1b:
         dc:f0:f6:2f:f5:ad:64:02:12:b9:d3:c7:aa:95:2c:4a:cf:6f:
         ff:a5:6c:11:2d:b3:2a:28:ad:7b:43:ff:78:66:8e:4a:a2:9e:
         7a:fc:24:be:10:cf:5c:4c:f2:77:01:dc:70:52:65:0d:65:01:
         f0:ba:55:d5:15:fe:9c:93:6c:00:3a:ea:76:a2:72:d8:ab:59:
         da:92:66:34:c3:61:16:2e:43:5c:57:ec:5e:f4:2d:dd:b0:c5:
         83:7c:56:cf:5c:05:cd:c6:ed:92:d7:61:fe:97:9c:e6:10:64:
         34:c4:61:34:d9:c5:99:67:ff:be:52:32:ae:12:d6:c0:8b:5f:
         da:7c:db:8d:30:e7:5c:30:67:da:de:03:71:d5:7a:70:d1:14:
         90:42:6b:ea:3c:ed:03:73:af:10:01:87:1c:a5:05:5b:5e:cc:
         32:21:f7:81:d6:0d:e2:ea:5a:6a:e9:69:6e:05:ec:e5:ec:25:
         43:a0:7f:aa:42:d2:5e:62:52:d8:8a:9f:f9:12:3c:a0:ae:3d:
         8d:62:61:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:43:57 2026 by rpki-client