Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
File:                     gWZdbPJtk3SE27RjN0PgZX7M3F4.mft (raw, json)
Hash identifier:          9W0WegLsv+oLT2uk/Fz9c0HYozGtOGCrUao7VxHOTs0=
Subject key identifier:   58:0B:73:00:66:50:19:C2:5B:DD:D4:F3:D2:C2:70:2B:9E:C5:B6:06
Authority key identifier: 81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
Certificate issuer:       /CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Certificate serial:       019D27A894297E63092240EEC72ADF0104E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
Manifest number:          1854
Signing time:             Thu 26 Mar 2026 01:00:52 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:52 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:52 +0000
Files and hashes:         1: 5st_HHpLD54WE6_4L8XNFgUjL_w.roa (hash: JHjXO9P1p0iqaGPwSoXPmKvMaRiV2yvxi6yn0kC2stg=)
                          2: gWZdbPJtk3SE27RjN0PgZX7M3F4.crl (hash: RikA/UJah4UlO8PDrjGMwwxeEVWJduCd6995soYsslI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:94:29:7e:63:09:22:40:ee:c7:2a:df:01:04:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81665d6cf26d937484dbb4633743e0657eccdc5e
        Validity
            Not Before: Mar 26 01:00:52 2026 GMT
            Not After : Mar 27 01:00:52 2026 GMT
        Subject: CN=580b7300665019c25bddd4f3d2c2702b9ec5b606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f5:02:14:78:f7:3b:18:98:1a:ba:80:8e:9f:
                    2e:bf:88:f7:0e:a0:1e:13:fc:c1:ba:a0:fc:c1:6c:
                    4b:46:5b:55:65:37:e2:fc:b4:e3:56:98:e6:d3:59:
                    89:d6:cd:1d:9d:8b:8d:48:59:ac:81:52:6b:ce:ad:
                    41:b2:13:2c:40:3c:19:a8:14:69:c1:de:d7:45:b9:
                    9e:d8:c3:51:8a:4d:f7:95:a7:8b:e0:fd:10:b9:ba:
                    fa:90:8b:3e:2a:95:18:07:ec:df:82:9f:5a:4a:4c:
                    95:f2:27:60:68:31:4f:ad:36:1b:3f:85:2b:9e:76:
                    92:bb:2b:b6:dc:28:9f:cb:43:e1:6e:7d:e6:30:38:
                    21:a8:22:f6:b0:58:48:ca:cd:a3:aa:4c:d0:d9:eb:
                    5c:fa:fb:70:a6:ab:0a:6d:c1:08:fa:59:f2:ca:34:
                    7f:2b:4e:71:cb:86:9d:bf:23:94:8a:12:c5:ad:2a:
                    b6:c6:0b:75:63:0b:7a:70:20:1c:b9:f1:4f:e0:d2:
                    66:9e:d1:a4:f8:55:29:34:5f:54:e9:e8:7a:cc:80:
                    29:42:57:e2:72:1a:63:55:f0:d5:13:a4:df:a5:24:
                    50:ad:d6:d2:06:c0:53:b0:c0:82:4e:91:5f:7c:c2:
                    b1:b5:39:df:52:ee:bc:b4:4a:ec:98:3d:4c:ef:c6:
                    f5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0B:73:00:66:50:19:C2:5B:DD:D4:F3:D2:C2:70:2B:9E:C5:B6:06
            X509v3 Authority Key Identifier:
                keyid:81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:56:6b:b4:55:c4:f4:a5:60:c5:ce:ec:fe:62:ca:11:5f:e1:
         a6:ac:2e:49:ae:00:d2:0f:a3:62:d1:14:70:0d:0e:10:12:44:
         9d:21:d5:e1:49:80:aa:05:70:fc:ad:58:ca:54:35:93:d8:e7:
         01:05:29:19:44:a6:e1:99:58:6a:93:70:aa:30:52:f8:12:ee:
         01:04:34:7d:29:21:d8:0f:b6:26:61:5c:71:1d:b7:3f:bb:b8:
         37:7e:b0:33:e3:15:57:be:18:f3:ac:cf:67:a3:84:41:9c:6c:
         f2:bd:aa:36:70:69:b6:36:21:57:6d:0a:6f:a3:51:3a:cc:99:
         30:52:d1:48:3e:57:f0:e6:b8:29:c0:74:51:4c:e4:f5:6c:0d:
         51:06:9a:8d:33:f4:39:19:da:b7:45:8d:cb:a8:82:85:2d:e0:
         ac:45:09:d8:af:e3:76:2d:f7:64:ad:a9:2e:7d:a3:23:27:7b:
         33:b5:0b:62:e9:b8:02:7c:3f:52:50:ba:a6:45:24:39:a3:61:
         d6:c7:76:15:f8:9b:63:5d:ef:18:77:9b:45:bb:28:27:62:61:
         17:78:43:f1:a8:be:5d:d3:4c:7d:e8:bc:0f:e8:59:8c:7f:8e:
         01:6b:29:e0:e6:5a:eb:50:69:78:f1:b3:1e:1a:48:50:43:72:
         29:6e:ad:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:54:43 2026 by rpki-client