Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
File:                     GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft (raw, json)
Hash identifier:          DVO+Cgludfe4OgaDhmJ+3BFe4P7Hz65aNZ8WQ1JkDag=
Subject key identifier:   77:52:2E:74:61:0A:17:AD:62:A7:8F:E4:B1:58:9F:0F:EB:6B:89:27
Authority key identifier: 19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF
Certificate issuer:       /CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf
Certificate serial:       019D296131056F86589D8D94D6A3D962E1C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
Manifest number:          0767
Signing time:             Thu 26 Mar 2026 09:02:08 +0000
Manifest this update:     Thu 26 Mar 2026 09:02:08 +0000
Manifest next update:     Fri 27 Mar 2026 09:02:08 +0000
Files and hashes:         1: 0S1p6i0Cw3qVWxZGiLbWP8XnpU0.roa (hash: 4FhowhSJ5qi8dCHQSc2oLoPhWB0tu8x+SmhucQmQc60=)
                          2: GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl (hash: XT5nYCLm8ffviwo50t4tcn4vCdXO9kSdEZAkOAx3tZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:31:05:6f:86:58:9d:8d:94:d6:a3:d9:62:e1:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf
        Validity
            Not Before: Mar 26 09:02:08 2026 GMT
            Not After : Mar 27 09:02:08 2026 GMT
        Subject: CN=77522e74610a17ad62a78fe4b1589f0feb6b8927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b9:f1:1f:ff:a0:28:13:24:37:d2:92:af:bf:
                    3e:59:74:22:b6:2a:ab:2e:22:92:d2:64:9b:85:0b:
                    c7:b3:62:e3:56:42:a5:72:91:59:6e:d4:76:4c:dd:
                    e4:43:55:75:0c:84:79:27:06:c3:b7:d9:c2:1a:1a:
                    36:95:80:11:8b:ee:96:29:d8:c4:47:7d:be:cb:58:
                    4a:c7:2f:98:3c:ba:d5:30:d5:98:df:6c:86:af:23:
                    91:d1:ce:55:69:8f:ab:df:14:f8:68:fc:ed:3d:1a:
                    93:b3:50:c8:59:0b:40:52:16:db:55:2b:b5:2b:cf:
                    46:fa:ea:bd:fe:4f:08:8a:9d:5b:c0:27:c3:9c:07:
                    7a:33:ad:77:3e:a2:ad:66:94:42:cb:80:4b:04:77:
                    85:0b:f4:79:9c:93:99:2f:1c:47:58:96:ef:dc:3c:
                    f1:70:b7:ae:79:d4:15:59:4e:08:f9:f1:d8:e3:76:
                    0b:47:19:1a:11:91:17:b0:dd:65:fe:4b:d0:d0:19:
                    a6:e8:a6:e2:71:af:80:12:6e:c3:0e:63:6d:e8:e6:
                    e7:1f:53:9a:5e:2e:7f:9b:c0:78:8e:39:55:32:b3:
                    1b:83:20:84:98:54:95:30:02:15:d7:7f:60:c8:9f:
                    be:c6:85:9c:a6:ac:0e:33:93:90:0d:ac:a4:60:88:
                    c2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:52:2E:74:61:0A:17:AD:62:A7:8F:E4:B1:58:9F:0F:EB:6B:89:27
            X509v3 Authority Key Identifier:
                keyid:19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:43:39:3c:ab:75:1a:7f:ea:77:81:a0:48:7e:c9:cd:15:b9:
         3b:e2:76:83:4a:73:ed:19:53:f8:41:bb:08:57:79:5f:0a:4d:
         34:19:51:c5:ce:19:84:21:df:ce:7a:56:0a:75:03:6c:a8:37:
         55:9c:df:04:6c:6f:a3:f5:82:43:8f:8d:04:06:c9:22:7d:b9:
         67:8c:60:ab:4c:8e:60:4c:f5:ac:39:a8:2e:0a:78:2c:4b:f2:
         d5:bb:c5:97:1d:4e:41:40:db:dd:6f:4b:50:9c:fd:c2:1b:66:
         37:75:ce:df:41:ec:4c:2b:39:a2:84:9f:61:50:ea:dd:f1:82:
         3d:c5:66:d1:1b:0e:4b:2d:07:43:14:95:d5:40:ac:b0:ec:57:
         cb:c0:c0:51:24:10:0a:88:b6:08:01:64:eb:02:ea:f3:d9:de:
         fc:95:97:26:5c:1e:e5:79:af:62:b8:52:f7:e2:62:29:e8:5d:
         84:5f:89:af:fe:28:62:c0:88:fa:9d:d5:9e:04:bb:c0:0d:60:
         fa:2c:88:79:4a:74:a2:3c:10:0c:24:42:14:68:d3:94:11:d2:
         fb:0f:0e:c3:e4:1a:ce:a2:91:c7:02:90:7c:68:2a:cf:5c:bc:
         c4:c2:18:c6:6d:db:dc:c4:8b:90:65:29:c1:ec:7f:d6:d4:1e:
         5e:37:8c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:25:28 2026 by rpki-client