Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
File:                     GoPORK5McB6pcdM036u8WyjmR24.mft (raw, json)
Hash identifier:          24IPSCqRUVsHB4/z50pCiKClJuGZ+iYslYmEmQ4rSv0=
Subject key identifier:   AB:2B:03:AC:2E:A4:1B:50:B5:3C:AD:C4:AB:D3:5D:9E:86:F0:C2:3F
Authority key identifier: 1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E
Certificate issuer:       /CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
Certificate serial:       019D27E035DA39CCB5603EF6454DF528121E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
Manifest number:          10D8
Signing time:             Thu 26 Mar 2026 02:01:38 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:38 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:38 +0000
Files and hashes:         1: GoPORK5McB6pcdM036u8WyjmR24.crl (hash: iJTSIHOluq+CKk5iveNC6Q93rXZpmVkz42ZdhKiSqPs=)
                          2: e7GASbeCgANWz5iegzo-dHYfZVM.roa (hash: l9HQNVcMldPVoQboUzC9kltlmdqxfM4f7etmfeKvc9E=)
                          3: l1XA1WxDomG_I7YpojfGXMLSADs.roa (hash: 5XkhMqZeEKAmgMdjJ9L6nB7pdTZD72Q0VcYVhIxf4rk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:35:da:39:cc:b5:60:3e:f6:45:4d:f5:28:12:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
        Validity
            Not Before: Mar 26 02:01:38 2026 GMT
            Not After : Mar 27 02:01:38 2026 GMT
        Subject: CN=ab2b03ac2ea41b50b53cadc4abd35d9e86f0c23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4b:f0:9a:db:94:5e:b3:92:75:2b:fe:b6:c8:
                    cb:60:fe:35:38:4a:d3:4c:8d:28:44:93:bc:4f:8b:
                    67:a2:72:69:ee:ca:28:ee:cf:f5:26:30:d2:38:a0:
                    52:14:27:ea:c1:1b:50:1a:1b:43:36:5e:39:bc:81:
                    21:74:b4:85:f2:a9:10:ea:1d:40:77:7f:79:4c:b3:
                    aa:05:80:72:b3:95:a8:5a:4a:55:dc:37:a1:3c:a6:
                    13:3c:71:dd:55:2d:72:68:b4:83:ec:76:55:2f:30:
                    40:41:3d:fd:e1:cc:bf:b6:2a:c2:14:02:4f:a9:e1:
                    e9:f3:82:53:59:08:b3:a4:e6:b3:76:c0:a3:19:43:
                    1f:00:75:1d:84:13:82:ad:6a:64:79:64:fb:0d:bd:
                    6c:29:6c:18:d7:84:c3:a6:44:b6:09:3e:6e:7a:9a:
                    39:c5:95:88:a3:cf:19:8e:eb:d8:ff:98:fc:0b:e8:
                    76:82:7b:9f:63:c3:50:23:46:3f:ae:a9:30:d1:3c:
                    c5:fa:da:d8:ba:3d:f3:55:ba:df:59:d9:7e:7c:55:
                    ed:99:39:04:2c:0a:c2:68:cc:0b:f3:e5:bb:6d:f5:
                    d4:e7:24:9b:8b:24:d2:cf:9d:ea:e5:69:b0:2c:54:
                    4b:8c:23:f1:ff:78:b3:ef:93:73:d1:83:c1:3c:4c:
                    65:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2B:03:AC:2E:A4:1B:50:B5:3C:AD:C4:AB:D3:5D:9E:86:F0:C2:3F
            X509v3 Authority Key Identifier:
                keyid:1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:6e:7f:92:84:94:c6:c8:d9:ae:cf:da:d5:d4:f3:e2:c9:52:
         1e:a8:87:dd:a8:f3:b2:2d:63:c4:a7:e8:dc:92:4b:98:22:d5:
         be:27:d4:d1:86:5e:62:92:49:2d:84:78:33:34:bc:44:6d:a8:
         b4:49:1e:14:67:68:9e:c5:e3:6a:df:b1:f2:4c:e1:2d:36:5f:
         9a:1a:6d:a0:8f:af:6a:67:c8:e4:6e:25:56:36:36:1e:0a:45:
         61:af:de:0b:40:2a:d2:3e:48:ac:aa:45:46:79:4f:36:00:b1:
         91:cd:62:42:dd:34:ca:e5:b6:c9:3c:f2:27:35:34:fc:b5:2a:
         13:73:f6:0d:3c:1d:75:e5:1f:fd:07:6b:66:b3:aa:38:ec:b2:
         0b:a7:40:ab:6e:dd:d6:a4:9a:18:36:84:0b:92:f8:52:a8:2d:
         89:a3:e7:4d:ed:be:4a:97:ae:7e:5b:c0:7f:02:83:aa:e9:21:
         25:e0:3d:95:2c:9b:21:4d:b8:ae:f8:d9:84:a9:1a:24:32:a5:
         5d:c8:12:b2:ec:26:c5:1a:ff:29:11:ad:71:98:91:19:07:cd:
         96:2f:d0:05:cd:55:37:e5:c0:2d:cd:03:ef:2e:81:bb:9f:da:
         16:06:ea:1d:01:65:a3:61:9a:dd:9c:ef:08:e9:a5:21:7f:11:
         5f:66:13:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4DXaOcy1YD72RU31KBIeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhODNjZTQ0YWU0YzcwMWVhOTcxZDMzNGRmYWJiYzViMjhl
NjQ3NmUwHhcNMjYwMzI2MDIwMTM4WhcNMjYwMzI3MDIwMTM4WjAzMTEwLwYDVQQD
EyhhYjJiMDNhYzJlYTQxYjUwYjUzY2FkYzRhYmQzNWQ5ZTg2ZjBjMjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0vwmtuUXrOSdSv+tsjLYP41OErT
TI0oRJO8T4tnonJp7soo7s/1JjDSOKBSFCfqwRtQGhtDNl45vIEhdLSF8qkQ6h1A
d395TLOqBYBys5WoWkpV3DehPKYTPHHdVS1yaLSD7HZVLzBAQT394cy/tirCFAJP
qeHp84JTWQizpOazdsCjGUMfAHUdhBOCrWpkeWT7Db1sKWwY14TDpkS2CT5uepo5
xZWIo88ZjuvY/5j8C+h2gnufY8NQI0Y/rqkw0TzF+trYuj3zVbrfWdl+fFXtmTkE
LArCaMwL8+W7bfXU5ySbiyTSz53q5WmwLFRLjCPx/3iz75Nz0YPBPExlxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsrA6wupBtQtTytxKvTXZ6G8MI/MB8GA1UdIwQY
MBaAFBqDzkSuTHAeqXHTNN+rvFso5kduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR29QT1JLNU1jQjZwY2RNMDM2dThXeWptUjI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yNzczYjMtNTEwOS00M2MwLTgwMDkt
NDI0ZGRhNTE5ZWYxLzEvR29QT1JLNU1jQjZwY2RNMDM2dThXeWptUjI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yNzczYjMtNTEwOS00M2MwLTgwMDktNDI0ZGRhNTE5ZWYx
LzEvR29QT1JLNU1jQjZwY2RNMDM2dThXeWptUjI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqW5/koSU
xsjZrs/a1dTz4slSHqiH3ajzsi1jxKfo3JJLmCLVvifU0YZeYpJJLYR4MzS8RG2o
tEkeFGdonsXjat+x8kzhLTZfmhptoI+vamfI5G4lVjY2HgpFYa/eC0Aq0j5IrKpF
RnlPNgCxkc1iQt00yuW2yTzyJzU0/LUqE3P2DTwddeUf/QdrZrOqOOyyC6dAq27d
1qSaGDaEC5L4UqgtiaPnTe2+SpeuflvAfwKDqukhJeA9lSybIU24rvjZhKkaJDKl
XcgSsuwmxRr/KRGtcZiRGQfNli/QBc1VN+XALc0D7y6Bu5/aFgbqHQFlo2Ga3Zzv
COmlIX8RX2YT1w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:34:52 2026 by rpki-client