Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
File:                     gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft (raw, json)
Hash identifier:          9ipRI8Qb2P90j2Xzs89InEmCayGINLPu7pV+8HojE7U=
Subject key identifier:   3C:EC:6A:DD:28:1B:5D:E3:4F:F2:4E:F3:3B:8C:26:26:B4:FD:6C:77
Authority key identifier: 82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7
Certificate issuer:       /CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
Certificate serial:       019D29612557ECB3DBFAA916DCD4974ED47C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 09:02:05 +0000
Manifest this update:     Thu 26 Mar 2026 09:02:05 +0000
Manifest next update:     Fri 27 Mar 2026 09:02:05 +0000
Files and hashes:         1: gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl (hash: 0+SDU313YOFl45sXFp2O+KB2S0q2MRrf4mFrgw4TD70=)
                          2: sl_qn_gMelOUS3XMJODn5T8W54w.roa (hash: MlmmeycjTjJos3jc0JF/rEVajpy499lBCd4bHXbugOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:25:57:ec:b3:db:fa:a9:16:dc:d4:97:4e:d4:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
        Validity
            Not Before: Mar 26 09:02:05 2026 GMT
            Not After : Mar 27 09:02:05 2026 GMT
        Subject: CN=3cec6add281b5de34ff24ef33b8c2626b4fd6c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:59:f7:4c:04:34:06:aa:35:15:34:43:de:10:
                    5d:d7:15:9e:38:dc:21:08:95:ee:c2:82:dc:37:b3:
                    65:25:a9:2f:75:92:54:4b:3f:4e:eb:18:d4:c4:7a:
                    0b:f7:d7:6a:dc:02:95:34:c1:42:ec:fb:55:69:99:
                    72:a0:c8:32:de:cd:0e:7e:ff:6b:ae:b6:96:d4:9d:
                    5a:4e:83:71:60:2c:f3:39:89:5f:a9:ec:b4:86:d7:
                    d8:d6:e0:6a:04:ec:76:a0:6e:1d:6c:af:d4:b8:63:
                    8e:d5:4e:0c:0e:be:7c:79:9f:68:38:24:14:cc:80:
                    c8:08:77:df:6b:9d:32:02:43:5c:00:48:3c:f9:44:
                    90:2d:e3:1f:8b:8c:59:e3:db:d2:7f:c1:ca:13:b2:
                    ea:44:fc:7c:54:97:28:a8:f9:7d:c0:65:0e:3f:36:
                    25:f7:2a:d5:84:49:5e:31:ff:21:36:6d:29:71:9b:
                    b5:a5:2a:57:69:70:be:ba:e6:91:f0:54:fa:dd:5e:
                    25:f6:0c:c6:cd:43:c6:01:dc:87:25:24:22:9d:44:
                    2a:ed:b9:25:d1:bf:77:79:77:ad:67:57:26:f6:ee:
                    55:f2:c3:07:49:74:44:30:40:a4:44:49:0c:aa:c4:
                    fa:c1:35:77:2f:d2:5c:2e:41:25:70:d4:7a:e2:0f:
                    1a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EC:6A:DD:28:1B:5D:E3:4F:F2:4E:F3:3B:8C:26:26:B4:FD:6C:77
            X509v3 Authority Key Identifier:
                keyid:82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:00:dc:ac:f1:fc:e5:9a:22:13:81:66:df:b2:14:f8:0d:d9:
         40:e4:92:13:6d:c9:69:bf:22:43:c9:36:5b:a2:3e:1c:5d:5a:
         5c:61:97:97:e6:c3:1c:59:99:2d:60:66:57:f6:41:40:5d:8d:
         ef:c5:3a:07:8a:e1:77:36:12:7a:90:05:be:07:88:a7:36:00:
         ad:ae:75:fe:74:08:19:61:04:33:fd:6e:92:20:05:4a:06:59:
         b5:14:fa:80:1e:e6:11:ec:9a:2d:4a:5c:7d:a6:26:f5:06:8f:
         61:1c:26:d2:b4:f7:4d:1e:df:0d:49:f8:ec:34:1b:ca:b8:29:
         fc:f3:5b:84:66:07:77:68:7d:8d:5c:3a:76:2c:20:76:54:eb:
         21:fd:63:9a:55:7d:e6:59:e3:28:b8:c8:72:0e:2a:40:8c:77:
         a0:6a:e2:68:cb:e5:42:9b:a4:6f:11:46:a0:96:71:c1:3a:79:
         86:d6:c2:00:9a:b8:c3:5d:eb:c4:9e:7c:6f:df:d9:48:52:07:
         38:29:94:de:fd:af:ef:7a:07:60:ed:5b:36:82:8f:3f:3c:61:
         4f:0d:81:42:e6:12:29:06:cf:d0:c5:74:47:29:57:c2:83:39:
         77:1a:2f:cc:1b:09:1b:d4:ae:b8:c0:13:db:d5:96:4e:aa:30:
         f9:a4:f5:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYSVX7LPb+qkW3NSXTtR8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNzllYWQ4MzVhOGZjZmFlMGQ5ZWUyODM5Y2QxNjg4MWJh
MTFkZDcwHhcNMjYwMzI2MDkwMjA1WhcNMjYwMzI3MDkwMjA1WjAzMTEwLwYDVQQD
EygzY2VjNmFkZDI4MWI1ZGUzNGZmMjRlZjMzYjhjMjYyNmI0ZmQ2Yzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1n3TAQ0Bqo1FTRD3hBd1xWeONwh
CJXuwoLcN7NlJakvdZJUSz9O6xjUxHoL99dq3AKVNMFC7PtVaZlyoMgy3s0Ofv9r
rraW1J1aToNxYCzzOYlfqey0htfY1uBqBOx2oG4dbK/UuGOO1U4MDr58eZ9oOCQU
zIDICHffa50yAkNcAEg8+USQLeMfi4xZ49vSf8HKE7LqRPx8VJcoqPl9wGUOPzYl
9yrVhEleMf8hNm0pcZu1pSpXaXC+uuaR8FT63V4l9gzGzUPGAdyHJSQinUQq7bkl
0b93eXetZ1cm9u5V8sMHSXREMECkREkMqsT6wTV3L9JcLkElcNR64g8apQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzsat0oG13jT/JO8zuMJia0/Wx3MB8GA1UdIwQY
MBaAFIJ56tg1qPz64NnuKDnNFogboR3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kYWFhZTQtZWQyNC00NDczLTllYzUt
ZWUyOWM5MTM2ZThiLzEvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9kYWFhZTQtZWQyNC00NDczLTllYzUtZWUyOWM5MTM2ZThi
LzEvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAngDcrPH8
5ZoiE4Fm37IU+A3ZQOSSE23Jab8iQ8k2W6I+HF1aXGGXl+bDHFmZLWBmV/ZBQF2N
78U6B4rhdzYSepAFvgeIpzYAra51/nQIGWEEM/1ukiAFSgZZtRT6gB7mEeyaLUpc
faYm9QaPYRwm0rT3TR7fDUn47DQbyrgp/PNbhGYHd2h9jVw6diwgdlTrIf1jmlV9
5lnjKLjIcg4qQIx3oGriaMvlQpukbxFGoJZxwTp5htbCAJq4w13rxJ58b9/ZSFIH
OCmU3v2v73oHYO1bNoKPPzxhTw2BQuYSKQbP0MV0RylXwoM5dxovzBsJG9SuuMAT
29WWTqow+aT1WQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:00 2026 by rpki-client