Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
File:                     GNtfz9wY74Qh4mUfGybBZaAdU_E.mft (raw, json)
Hash identifier:          JfQmdCv3+DZwVklSEK2cxzatP8ywbqvpWrg0xKvp/kg=
Subject key identifier:   00:41:09:59:25:3B:ED:FB:E3:0D:EE:0B:0F:1F:64:93:39:FA:18:84
Authority key identifier: 18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1
Certificate issuer:       /CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
Certificate serial:       019D2816FCE0E88293750B21095E9C8C5F78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
Manifest number:          1885
Signing time:             Thu 26 Mar 2026 03:01:28 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:28 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:28 +0000
Files and hashes:         1: GNtfz9wY74Qh4mUfGybBZaAdU_E.crl (hash: sw0hnIQfM0WbppHYO6p192FPGx2G7CFUbQ45fC6vlfM=)
                          2: HyBfdHBu-E_xnT2LV4MR8Uj2x2g.roa (hash: ECkHLWD5o4a328xINTv5HTRD82ypaSriGLU8WBsJUfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:fc:e0:e8:82:93:75:0b:21:09:5e:9c:8c:5f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
        Validity
            Not Before: Mar 26 03:01:28 2026 GMT
            Not After : Mar 27 03:01:28 2026 GMT
        Subject: CN=00410959253bedfbe30dee0b0f1f649339fa1884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:e0:b0:b6:3a:64:1e:00:42:75:70:3a:f2:
                    f3:99:34:32:82:47:f9:29:98:fc:96:ff:78:0b:93:
                    f5:41:a7:ef:ab:4b:d5:ee:ba:6b:3c:50:5a:41:d5:
                    75:ab:5c:91:14:ed:99:54:b4:99:08:d0:41:61:a7:
                    78:b6:0f:40:f6:43:ee:3b:16:78:8d:b0:f0:b1:83:
                    e3:28:a7:e6:20:e2:91:87:73:1b:40:47:08:eb:d9:
                    f4:25:9d:2a:52:1d:b7:82:de:53:ba:c3:eb:8c:1f:
                    45:f4:79:c1:11:b4:88:0d:d2:95:c9:c1:4a:e7:0a:
                    55:89:cd:be:bd:52:28:56:6a:78:72:cc:9f:af:44:
                    ac:7a:4b:23:10:57:a2:f7:e4:84:56:c6:31:86:b0:
                    98:19:4e:e3:b5:53:74:db:c9:25:d2:7c:78:79:02:
                    36:11:26:df:36:d3:eb:10:4a:e3:9c:77:94:58:aa:
                    50:80:6e:29:53:fa:e4:65:ad:fc:4a:8f:01:67:57:
                    ee:5f:49:af:f6:e6:a9:42:68:76:a2:4e:ed:d9:49:
                    36:44:03:27:d0:b6:68:51:7e:15:8b:60:dd:71:d9:
                    e2:4d:1c:b8:5e:d6:e8:62:0e:f3:25:13:ff:8c:51:
                    e6:04:13:d5:ec:1b:59:1c:89:5c:e5:31:22:3c:b7:
                    3a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:41:09:59:25:3B:ED:FB:E3:0D:EE:0B:0F:1F:64:93:39:FA:18:84
            X509v3 Authority Key Identifier:
                keyid:18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:28:e9:a6:82:9b:eb:c1:fd:6b:45:91:a7:97:b7:b8:39:be:
         b1:f0:dc:a1:4b:49:3b:22:bf:90:ee:2d:1c:60:db:b9:f6:82:
         c8:40:70:b7:85:69:34:1e:13:4b:ef:29:a5:c2:23:a1:0f:02:
         f3:80:c6:62:00:48:1d:2d:e1:5d:fc:fb:8f:50:3f:4a:14:ef:
         10:3d:80:6a:6a:b2:ba:a8:8b:98:0e:b8:3a:2b:4d:de:f9:30:
         5f:91:b4:37:09:04:85:f2:2e:4c:3c:16:72:77:3c:a6:51:74:
         0e:5a:52:b9:e5:52:1e:ba:67:a9:ae:e3:a1:5d:76:e5:50:c3:
         0b:2c:a1:25:ae:ee:39:aa:4a:ae:0d:59:38:01:49:88:e1:75:
         4e:5e:39:6c:1c:84:36:3e:e9:dc:fa:ef:19:be:3f:42:f9:01:
         91:12:7b:b5:e2:47:0a:db:1e:d4:dd:6f:4a:3f:eb:82:c8:9c:
         6e:86:4c:e5:22:20:aa:2e:5b:bb:60:4e:d8:f7:d3:5f:42:59:
         fd:f8:63:60:69:32:ca:68:29:2c:8d:0e:38:f0:4d:b8:86:33:
         24:38:62:ae:85:44:a4:37:93:2d:63:cd:bc:39:25:51:6e:40:
         e0:a3:78:f4:73:6f:74:59:ef:4e:c0:d6:a9:a9:ed:f9:e0:2a:
         35:d2:ea:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:13 2026 by rpki-client