Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
File:                     GOTxZiOGegux8zeFDqyr_4fEfhA.mft (raw, json)
Hash identifier:          kj64btiSDgSJcasdz5GqDSgmntbKtyavLO1Zhd7p8P0=
Subject key identifier:   75:80:22:9B:92:FB:77:D3:E6:2A:D3:62:CE:C4:40:4F:69:C8:14:6D
Authority key identifier: 18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10
Certificate issuer:       /CN=18e4f16623867a0bb1f337850eacabff87c47e10
Certificate serial:       019D265F905A0987B86EC1FA719DCEEBFB8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
Manifest number:          1883
Signing time:             Wed 25 Mar 2026 19:01:30 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:30 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:30 +0000
Files and hashes:         1: GOTxZiOGegux8zeFDqyr_4fEfhA.crl (hash: N2hRUf4n7f5ToJA0EjofXZPHjfFgcD6arlss8JkATnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:90:5a:09:87:b8:6e:c1:fa:71:9d:ce:eb:fb:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e4f16623867a0bb1f337850eacabff87c47e10
        Validity
            Not Before: Mar 25 19:01:30 2026 GMT
            Not After : Mar 26 19:01:30 2026 GMT
        Subject: CN=7580229b92fb77d3e62ad362cec4404f69c8146d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b0:4c:03:a7:16:fb:e9:f2:93:86:31:dc:de:
                    94:c7:b2:ad:48:e7:76:1a:03:a0:25:d2:23:5e:a9:
                    c8:ba:34:0e:d8:a2:8b:26:56:3d:98:e3:76:a4:46:
                    53:98:58:6e:aa:e7:fe:29:40:60:c5:9d:31:aa:7d:
                    1f:41:9b:01:e5:77:4d:72:5d:12:1b:e1:fc:96:d0:
                    1b:b2:29:7a:93:0c:72:6c:11:ad:cb:62:54:f7:e2:
                    ae:95:05:f5:85:85:8b:0c:dd:a3:19:bc:c4:b8:db:
                    ae:c0:7f:1c:36:b8:fd:85:ae:ca:25:d7:6a:28:71:
                    8a:3c:a3:13:48:e6:5a:6c:b9:86:c5:85:86:9a:4d:
                    6a:98:49:29:d5:67:0a:09:d6:cd:56:91:cb:79:f0:
                    f9:7f:e2:2a:66:5a:01:d6:a1:8a:c0:94:14:a6:a5:
                    11:c1:b9:7e:da:26:89:d9:cf:74:90:1e:fb:f4:38:
                    8f:e2:ab:f7:4f:c6:64:26:15:38:06:b1:e4:16:4c:
                    5e:c6:98:b0:27:84:b6:64:69:c5:14:4f:bd:7f:95:
                    c3:e0:44:55:5f:f3:bb:f0:01:20:5d:71:ff:a0:a4:
                    79:21:60:7e:52:76:16:e1:88:7a:9e:27:0e:ba:c9:
                    ac:af:f6:8c:c1:a1:8d:c6:fd:8d:de:f4:16:9d:4e:
                    1b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:80:22:9B:92:FB:77:D3:E6:2A:D3:62:CE:C4:40:4F:69:C8:14:6D
            X509v3 Authority Key Identifier:
                keyid:18:E4:F1:66:23:86:7A:0B:B1:F3:37:85:0E:AC:AB:FF:87:C4:7E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOTxZiOGegux8zeFDqyr_4fEfhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c5f0fe-20e0-41ab-b32b-bdf51a9bdf7a/1/GOTxZiOGegux8zeFDqyr_4fEfhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f4:c0:98:b9:d0:7c:e2:77:e7:7c:33:de:b8:ea:57:df:3d:
         49:11:47:d2:61:68:4b:f1:af:bb:99:8a:7e:11:83:ea:8d:6f:
         ac:c3:80:f4:7d:b4:d8:3d:57:77:d8:c2:1a:29:64:d5:a7:8e:
         2d:47:5e:4e:85:0d:4a:50:97:d6:cb:ab:e5:45:22:75:a7:05:
         0a:a6:d0:39:ed:8a:72:3e:6d:e2:cf:48:0f:3a:10:5f:f3:07:
         c9:6b:7e:d9:44:bb:e0:d2:58:ea:7a:ff:c0:0c:30:21:88:19:
         97:eb:24:bd:74:bb:11:c1:9c:93:b0:60:35:6d:57:35:5d:6f:
         5e:7d:93:df:66:08:40:19:38:9d:18:67:67:c6:40:ec:7b:5b:
         fc:c5:98:ef:f6:ea:40:d8:60:2f:1f:b9:e1:20:b1:82:b4:44:
         28:80:48:5a:66:82:3c:6e:f6:2f:05:35:e1:38:21:8e:a9:fa:
         4e:65:ec:37:02:b2:b0:4e:11:dc:cb:39:d4:44:c5:c2:4a:6d:
         65:51:ca:0c:e0:88:13:d5:ec:cf:e2:99:fa:76:b1:3f:10:89:
         a9:ec:48:dd:0f:46:6e:e3:74:76:b9:b8:af:3b:73:b7:d1:f6:
         80:44:8b:77:55:fb:a5:6a:92:51:be:ed:0f:4d:41:8e:01:e9:
         b0:0e:bb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:17 2026 by rpki-client