Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
File:                     gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft (raw, json)
Hash identifier:          benkPy7DpIIoA+//9m7V3/LUIH0APM3/xp9iEre/x8U=
Subject key identifier:   2C:F1:91:06:C2:E6:67:6E:2F:B0:B7:5D:30:56:7B:6B:42:BC:D2:E8
Authority key identifier: 81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E
Certificate issuer:       /CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e
Certificate serial:       019D9962E851D9E7B772C21F9C0D1FF45480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
Manifest number:          02E0
Signing time:             Fri 17 Apr 2026 03:01:29 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:29 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:29 +0000
Files and hashes:         1: G2YFM4i4daVeiu-YZOfdZi2K_5s.roa (hash: fZ6PKIPyu2LKbUXBpMg9IVsm03a/5oYSb04pbpjHKZ8=)
                          2: gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl (hash: iBU3pBoCTHps/fquOsC+iqwU8K4m2AjLvbvpZaniqac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:e8:51:d9:e7:b7:72:c2:1f:9c:0d:1f:f4:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e
        Validity
            Not Before: Apr 17 03:01:29 2026 GMT
            Not After : Apr 18 03:01:29 2026 GMT
        Subject: CN=2cf19106c2e6676e2fb0b75d30567b6b42bcd2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ba:01:1c:50:36:ba:4c:69:d8:27:0f:8c:fa:
                    99:42:34:37:d1:09:87:a0:be:8f:76:51:8d:76:a2:
                    73:63:d2:d1:a1:b3:d1:54:f9:bd:6a:d4:fa:32:dc:
                    43:d2:0f:03:89:c8:e4:20:79:ff:e0:f4:6d:85:38:
                    15:f2:87:bb:aa:19:0f:1c:a3:4d:8d:ad:bf:8f:79:
                    78:5d:46:53:17:36:c6:30:5e:26:f9:2c:49:3a:6b:
                    b9:f0:8b:0c:32:50:ec:e5:b4:1d:13:72:77:25:d3:
                    de:16:4a:c4:40:d4:dc:85:a1:40:75:cf:76:70:14:
                    4b:7b:f4:11:3d:19:b5:96:f1:b4:0e:e3:4b:3f:2d:
                    fd:a7:d8:c3:0b:a1:2f:93:07:ba:8d:65:e9:52:24:
                    3b:eb:83:da:6d:f0:49:1e:c6:af:80:88:3b:04:40:
                    51:1b:f8:20:24:c4:61:c3:ce:c5:40:41:c5:f3:e8:
                    25:64:90:e6:95:d0:11:d6:6a:d9:73:d0:d2:7b:a0:
                    21:3a:a9:00:3d:09:d4:27:98:b7:57:3f:6f:90:5a:
                    27:3f:c7:bf:36:ef:28:ca:c8:4f:e4:77:61:c9:83:
                    0b:0f:c1:7e:d0:be:bf:4e:00:48:98:23:3c:56:20:
                    cc:42:17:c9:87:29:b6:35:2f:ab:b5:01:69:a6:82:
                    e1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F1:91:06:C2:E6:67:6E:2F:B0:B7:5D:30:56:7B:6B:42:BC:D2:E8
            X509v3 Authority Key Identifier:
                keyid:81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:68:cd:9b:42:02:ee:78:96:1d:b1:5d:b1:43:94:4a:1f:3d:
         80:57:c2:0b:d5:fc:4e:db:85:3d:10:4f:52:3b:ff:8f:25:4c:
         ac:8d:41:9f:43:3a:de:b6:68:cd:fd:55:e0:f7:28:4b:9b:8d:
         c8:52:45:95:e1:da:13:57:c2:86:0c:74:88:d5:a0:82:f3:9f:
         70:82:6f:dd:76:1e:48:8b:29:63:16:44:de:32:bc:dd:bd:2b:
         f5:fa:98:d6:c6:88:10:94:e3:76:a2:ef:71:25:b1:97:cc:da:
         e6:60:d4:45:46:b9:c1:44:b6:0b:2a:1a:67:70:c8:fe:d7:78:
         49:2a:df:0b:91:c1:b2:f4:de:2d:a9:fc:cc:2b:fc:c0:c3:b9:
         cd:4e:5b:7d:2e:02:a0:2d:3f:0f:13:ab:50:79:a4:cd:5a:11:
         13:22:12:99:4d:8c:88:fb:f7:5c:22:87:04:29:f2:6f:58:4e:
         7d:a0:dc:45:dc:81:15:57:26:74:0b:e1:00:da:fb:be:d2:2c:
         c1:45:14:88:28:44:df:12:6d:15:a1:4e:4b:c9:38:43:ab:cc:
         8a:5c:af:31:76:3e:0f:b7:de:5a:1f:5b:f4:d2:84:7d:bf:e6:
         63:d6:5d:54:78:01:30:9a:13:4e:f4:2a:ee:d6:78:61:8a:16:
         07:ad:dd:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYuhR2ee3csIfnA0f9FSAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMGU1MGY4YmUyMWU2NTU2YTJhM2I1ZTYwZTFkZTc2NWFl
MDJkNGUwHhcNMjYwNDE3MDMwMTI5WhcNMjYwNDE4MDMwMTI5WjAzMTEwLwYDVQQD
EygyY2YxOTEwNmMyZTY2NzZlMmZiMGI3NWQzMDU2N2I2YjQyYmNkMmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67oBHFA2ukxp2CcPjPqZQjQ30QmH
oL6PdlGNdqJzY9LRobPRVPm9atT6MtxD0g8DicjkIHn/4PRthTgV8oe7qhkPHKNN
ja2/j3l4XUZTFzbGMF4m+SxJOmu58IsMMlDs5bQdE3J3JdPeFkrEQNTchaFAdc92
cBRLe/QRPRm1lvG0DuNLPy39p9jDC6Evkwe6jWXpUiQ764PabfBJHsavgIg7BEBR
G/ggJMRhw87FQEHF8+glZJDmldAR1mrZc9DSe6AhOqkAPQnUJ5i3Vz9vkFonP8e/
Nu8oyshP5HdhyYMLD8F+0L6/TgBImCM8ViDMQhfJhym2NS+rtQFppoLh8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzxkQbC5mduL7C3XTBWe2tCvNLoMB8GA1UdIwQY
MBaAFIEOUPi+IeZVaio7XmDh3nZa4C1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1E1US1MNGg1bFZxS2p0ZVlPSGVkbHJnTFU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84ODBkZjQtZTMzNC00YTc3LThmNGEt
N2RmZGU4YjEyZTJjLzEvZ1E1US1MNGg1bFZxS2p0ZVlPSGVkbHJnTFU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84ODBkZjQtZTMzNC00YTc3LThmNGEtN2RmZGU4YjEyZTJj
LzEvZ1E1US1MNGg1bFZxS2p0ZVlPSGVkbHJnTFU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmjNm0IC
7niWHbFdsUOUSh89gFfCC9X8TtuFPRBPUjv/jyVMrI1Bn0M63rZozf1V4PcoS5uN
yFJFleHaE1fChgx0iNWggvOfcIJv3XYeSIspYxZE3jK83b0r9fqY1saIEJTjdqLv
cSWxl8za5mDURUa5wUS2CyoaZ3DI/td4SSrfC5HBsvTeLan8zCv8wMO5zU5bfS4C
oC0/DxOrUHmkzVoREyISmU2MiPv3XCKHBCnyb1hOfaDcRdyBFVcmdAvhANr7vtIs
wUUUiChE3xJtFaFOS8k4Q6vMilyvMXY+D7feWh9b9NKEfb/mY9ZdVHgBMJoTTvQq
7tZ4YYoWB63d9g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:50:47 2026 by rpki-client