Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
File:                     GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft (raw, json)
Hash identifier:          5/Vl3nhpBTeXgEa3Wm7eGAHCtjWQm6kzKO23ymga5lY=
Subject key identifier:   1D:D1:A3:8F:6F:A1:35:05:1A:8C:B0:2C:21:A5:64:32:B0:BA:D2:24
Authority key identifier: 19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
Certificate issuer:       /CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Certificate serial:       019D2A18708114569E151F7EFCD2A821077E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
Manifest number:          0762
Signing time:             Thu 26 Mar 2026 12:22:17 +0000
Manifest this update:     Thu 26 Mar 2026 12:22:17 +0000
Manifest next update:     Fri 27 Mar 2026 12:22:17 +0000
Files and hashes:         1: ESDAcJLHfjqrwnrts6KYyW0KS1o.roa (hash: 5uEPAvT3xbVzgsFIOnaQIxZp/g0qb8lHPuYCQbHaDA8=)
                          2: FiXFwvxiV6Y1ajHORGAWiqcT-Y4.roa (hash: Zs2NR7v6cxcECJIbaIPTJM9/Q7GTHlESDly+5o8OUyM=)
                          3: GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl (hash: 50GSqXA5gY8Ui5tnT9rPZ6Wm6uEHLIlA0eUVE5tGhuU=)
                          4: aCTYERjrsgQgd2eNcJ-xT6iLuVA.roa (hash: FSNpstLHIA+MgvTMObqgBgedN4krH4ykjVcUB8HPSAs=)
                          5: e-bWAWxjxQJbnJGblL9z-udKDeg.roa (hash: F1tIuwxbtLRrgISklNjmuzhPscky9ofsgkm8xnxx5MU=)
                          6: oc64jGTa7tYBazn5B8iUtkhOiqA.roa (hash: RFnqxJshGlA8TNiqCYqoYq6mvbEyQL7fumOe50DNmVk=)
                          7: vGG_tLkKXFgbXJfTRyLCvmDQxbE.roa (hash: WShGMkUZgE0y2ZoQYvE7mjCYcDN54oRSnCg5kaDhPTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:18:70:81:14:56:9e:15:1f:7e:fc:d2:a8:21:07:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b390b62d09950d500cd6bbbd78d0390560ec42
        Validity
            Not Before: Mar 26 12:22:17 2026 GMT
            Not After : Mar 27 12:22:17 2026 GMT
        Subject: CN=1dd1a38f6fa135051a8cb02c21a56432b0bad224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:36:34:ca:ae:6a:91:19:6c:b1:d7:56:6c:7e:
                    0b:53:6b:c7:67:c0:0e:8e:7f:73:54:88:0a:0c:68:
                    49:37:0a:e3:62:9e:fe:18:23:f7:e2:72:e4:47:8e:
                    69:51:ad:72:a3:7f:ad:d5:83:b8:bb:cf:36:cf:ac:
                    79:6f:42:f0:8a:d4:55:05:fe:74:ff:d1:d5:32:cd:
                    5a:7b:98:bf:76:00:ed:29:19:07:40:f3:e3:44:28:
                    2c:f9:b9:dc:5e:61:66:80:f8:f5:22:64:1f:60:b5:
                    bc:c2:97:a2:0b:81:e1:55:57:85:43:e4:ca:b4:b7:
                    8a:46:23:6f:8b:87:2e:f7:dd:5a:36:26:77:7e:f4:
                    40:f2:d4:78:5c:97:98:a8:3a:b0:b6:02:bf:88:d6:
                    04:d9:34:4d:12:2f:d5:d3:c2:d4:d3:55:4b:96:20:
                    a7:03:f3:77:c7:7d:0f:1e:57:14:47:5d:3a:ff:fe:
                    f7:12:c0:06:28:21:94:0e:1f:76:18:0c:fa:6b:29:
                    c1:21:60:b8:a7:ab:58:f3:5a:19:0a:98:b5:27:24:
                    51:3f:12:f1:03:ea:84:29:12:cc:38:fb:ef:ac:45:
                    fa:4e:51:af:89:72:bd:87:a2:35:78:14:d9:83:2c:
                    2b:09:6a:f5:58:7a:8b:98:64:25:dc:b2:00:c4:a4:
                    15:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D1:A3:8F:6F:A1:35:05:1A:8C:B0:2C:21:A5:64:32:B0:BA:D2:24
            X509v3 Authority Key Identifier:
                keyid:19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:55:ee:46:be:6d:df:dd:b7:95:ec:1a:22:70:be:4f:65:ac:
         97:74:20:d4:1d:7e:f6:a1:6a:ba:81:67:57:bf:50:fd:db:f5:
         e3:6a:f4:c8:77:c1:f8:c9:83:11:8e:42:98:38:60:ab:a2:b7:
         f2:a8:33:45:7e:fc:15:fd:31:2e:03:e6:e7:83:63:40:2a:0c:
         59:6a:39:90:d1:db:f4:98:6f:30:b6:6c:a4:03:7e:81:73:ae:
         20:17:a1:09:12:cd:c0:3c:8b:34:ee:1c:83:ec:bf:c1:a9:bc:
         20:40:96:f3:22:2a:fa:ec:bb:17:c4:fc:55:4e:ae:30:b3:dd:
         58:40:61:76:48:1b:90:fb:b6:9a:27:7c:ff:32:3b:2c:fd:15:
         73:15:09:31:9a:e5:4a:32:08:dc:6f:96:e5:15:50:8c:fb:5d:
         bb:94:23:3a:fc:32:5d:fd:26:a6:d1:32:22:1f:83:99:95:c3:
         7d:73:4a:b5:09:32:43:9b:93:59:ef:28:f7:64:e8:de:c7:29:
         fd:7d:8c:9a:f6:4e:c1:7a:55:d0:8d:78:2b:6a:8a:8b:6b:62:
         fd:33:43:16:b0:b5:5c:a6:93:72:dc:fb:54:eb:0d:25:7e:cb:
         02:d1:5f:f3:41:1f:59:aa:cb:66:e2:63:59:69:ad:0d:5f:20:
         6d:02:bd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:19:01 2026 by rpki-client