Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
File:                     Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft (raw, json)
Hash identifier:          /pWRLx6zvX0i3Hadd+mqhbP1uuLJV9poWeZjN2ZHVTM=
Subject key identifier:   43:D0:CE:36:98:3D:2E:35:77:D9:B5:46:98:DC:8F:3B:E3:52:0F:1A
Authority key identifier: 1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43
Certificate issuer:       /CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
Certificate serial:       019D27A944ACDD903138A9F28E7B5F4B0383
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
Manifest number:          1883
Signing time:             Thu 26 Mar 2026 01:01:37 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:37 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:37 +0000
Files and hashes:         1: Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl (hash: /nxAqwsWlEhytsS9X1S4HVlXyiNmHAItHdudltVliaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:44:ac:dd:90:31:38:a9:f2:8e:7b:5f:4b:03:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
        Validity
            Not Before: Mar 26 01:01:37 2026 GMT
            Not After : Mar 27 01:01:37 2026 GMT
        Subject: CN=43d0ce36983d2e3577d9b54698dc8f3be3520f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:04:70:8f:e7:3c:96:8a:d8:62:43:d4:68:82:
                    8b:00:2d:19:a7:13:45:4b:e9:c0:78:bd:22:97:3f:
                    93:7a:06:5f:8a:fc:6a:f7:f7:de:35:3f:91:5b:6b:
                    30:96:fe:75:59:1c:30:19:59:4c:8c:b3:39:34:21:
                    b3:c1:31:94:b4:22:d1:2f:77:50:4e:e8:68:4e:75:
                    d2:24:48:ee:d5:f5:61:ad:c1:ae:58:c4:42:d1:e7:
                    f6:a1:48:93:79:04:ab:a8:23:1f:6f:44:f9:fa:ca:
                    1b:16:2f:3f:f0:6b:03:6a:b1:c8:fd:44:00:42:19:
                    3c:68:fb:35:47:dc:32:ee:af:d9:b2:c8:b7:eb:cf:
                    75:8e:1e:7c:09:af:49:4e:6b:a1:f1:b7:16:56:9f:
                    09:a1:43:e9:12:9e:c1:a1:d8:15:94:cc:66:fd:80:
                    8d:48:63:cf:fe:30:ad:b8:da:54:3e:86:0e:a4:2c:
                    81:7a:fb:99:13:f8:49:f6:9e:1e:56:b6:59:7b:0a:
                    39:f5:30:19:f7:7b:e6:55:ff:c8:16:58:fb:84:b5:
                    22:b9:e4:fe:99:4e:c4:84:2d:bb:c7:c2:dc:20:12:
                    53:60:75:b4:75:cc:a9:8a:47:f2:65:0e:f8:c4:00:
                    83:e8:e2:03:62:ef:13:4c:51:be:cc:e4:75:d1:ac:
                    db:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D0:CE:36:98:3D:2E:35:77:D9:B5:46:98:DC:8F:3B:E3:52:0F:1A
            X509v3 Authority Key Identifier:
                keyid:1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:cf:b5:37:78:a5:dd:01:7e:1b:de:9a:59:0d:21:e1:e7:ff:
         e3:22:47:6b:15:bc:7a:66:85:3e:a0:93:6f:52:83:8a:5c:cc:
         42:a4:03:fd:bc:c6:2e:49:cf:66:55:12:c3:7e:7f:06:ff:03:
         da:8f:ab:c0:f1:2a:bb:7c:c7:63:f7:36:51:88:85:8b:a2:9a:
         05:b2:00:5f:f5:37:d7:9a:ed:8a:19:20:18:a7:af:5e:72:c9:
         ae:79:79:65:25:bd:65:bf:2c:08:a3:5f:fa:5c:29:07:e6:68:
         38:73:e2:33:7d:d4:87:eb:08:6e:22:cb:26:48:80:3e:07:77:
         d6:f8:68:0f:b5:a4:71:3f:b1:58:10:d7:db:20:78:3d:f1:5d:
         39:52:91:20:0a:f4:b0:3b:4a:54:72:dc:06:e6:52:d8:9b:31:
         6c:78:41:69:29:33:13:07:10:42:47:76:ee:45:ed:99:a2:ce:
         af:e7:14:32:f7:ea:b0:53:d0:7c:ef:b3:eb:12:ab:48:85:2e:
         16:e4:74:18:ef:c4:87:8a:4b:3e:6d:1e:42:e7:d1:3a:e7:0e:
         e9:68:52:c4:4a:60:c7:73:b8:96:73:c8:61:30:e1:ff:f8:04:
         a6:c4:a0:3b:30:e8:e3:11:b1:bc:18:e5:56:8c:cf:cc:9a:ad:
         23:a7:a9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:04:10 2026 by rpki-client