Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
File:                     GB5NYIFS_CRK__ui3HK4UbGbJSc.mft (raw, json)
Hash identifier:          VyPZh2LHNnZLgM0z9HNtRsAd2MLyDgtDQyBzu6YrBw0=
Subject key identifier:   49:92:DE:44:30:E7:83:BE:6B:83:88:84:4C:57:8D:9F:7D:06:1B:1A
Authority key identifier: 18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27
Certificate issuer:       /CN=181e4d608152fc244afffba2dc72b851b19b2527
Certificate serial:       019D2BBBC36CEC1EECC99A3B950197980391
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 20:00:18 +0000
Manifest this update:     Thu 26 Mar 2026 20:00:18 +0000
Manifest next update:     Fri 27 Mar 2026 20:00:18 +0000
Files and hashes:         1: GB5NYIFS_CRK__ui3HK4UbGbJSc.crl (hash: nxDpriJV1J5xtVviu12e7Mq2b0oOQTwQuNkg1CmJXiE=)
                          2: PYWzmSYOo9ATNgcN3fRPebwQl3Q.roa (hash: 3u1bgAPgKfqAWtSr7rEwYv5yaXX4xTFybsPUpcBsSug=)
                          3: SBfXG2HCIyRLSR8L8Bb1OYjrk-4.roa (hash: iLlK4LPvVZZcpk8oXFX0Dv4WoTJ656cEevpkzzhvsnQ=)
                          4: t1Oq1k2ngy6Y47_6p9fhHoB3Y30.roa (hash: 2yB1RVbVshYDwGp3FbOHVNpPPI0M4XBWfcWStep9+5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:bb:c3:6c:ec:1e:ec:c9:9a:3b:95:01:97:98:03:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=181e4d608152fc244afffba2dc72b851b19b2527
        Validity
            Not Before: Mar 26 20:00:18 2026 GMT
            Not After : Mar 27 20:00:18 2026 GMT
        Subject: CN=4992de4430e783be6b8388844c578d9f7d061b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:24:b4:9d:79:1c:56:af:73:55:e2:5a:c9:d4:
                    ac:5a:d3:84:ac:5e:71:1c:f8:50:b5:5b:85:20:23:
                    54:31:82:31:02:ad:f4:5a:be:95:28:78:05:a7:2c:
                    90:fe:0c:a7:9c:f4:74:38:4e:c9:47:ac:e4:c6:8b:
                    3f:d0:99:dd:ad:f1:e9:c1:59:ab:7e:a9:7a:f9:42:
                    63:25:c9:2b:2d:32:c1:56:75:a7:3f:7c:86:13:56:
                    0d:fe:d8:eb:76:18:48:b8:3e:4c:e6:e0:83:7f:db:
                    15:c6:d3:c0:e6:19:6e:b7:ec:4d:86:c6:c0:20:0a:
                    df:34:8d:f5:a2:fd:b3:3e:cd:ef:a7:5a:cd:e0:77:
                    72:b7:c8:d1:4c:c5:86:18:c0:61:dd:13:ab:eb:1f:
                    f4:85:04:77:5f:d4:c1:da:54:8d:2c:1b:72:7c:da:
                    a7:b7:4f:6f:1f:38:b4:77:97:06:e4:d8:5d:c9:25:
                    d3:af:79:fa:9b:b8:c2:a6:db:da:dd:6c:12:b4:5d:
                    33:fe:2a:9f:83:49:3a:5f:ca:41:62:b6:99:01:68:
                    91:57:b0:49:0a:55:16:ef:9f:89:d4:50:9f:86:0a:
                    3e:04:74:dc:7c:12:55:e1:15:21:0c:9b:4d:a9:c3:
                    23:3b:0c:b2:31:5e:2f:1c:ba:01:c3:ce:ad:d1:a6:
                    cc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:92:DE:44:30:E7:83:BE:6B:83:88:84:4C:57:8D:9F:7D:06:1B:1A
            X509v3 Authority Key Identifier:
                keyid:18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:4a:43:14:4e:80:41:80:79:3f:cc:72:df:1a:6d:35:d5:f9:
         c4:9e:0d:39:d9:97:63:9d:9f:4b:91:4d:c4:5f:39:19:79:2a:
         e1:69:01:98:ba:47:58:87:df:ac:9e:ad:f7:88:28:10:48:ad:
         b2:02:9f:a0:0a:28:9e:27:e6:17:bf:c6:da:08:32:56:0e:15:
         94:29:c1:23:cd:7b:91:e4:c9:48:4d:9d:c3:8a:65:5d:cc:18:
         19:ef:08:87:0c:31:33:c0:79:3e:09:88:ce:02:cf:02:aa:ee:
         1f:62:5f:a1:cd:5e:ca:44:02:5b:b4:7d:e8:d7:4b:8d:06:4d:
         a3:d2:ac:ab:e6:0a:c8:98:39:b2:1c:ed:7c:16:61:bb:33:06:
         89:fb:92:50:2d:c7:5e:86:81:60:03:aa:25:7f:9a:95:f1:6f:
         17:63:d1:81:aa:f6:91:0d:6e:3c:e2:4b:62:b8:68:df:97:f1:
         10:fa:6e:74:07:9a:06:5e:6c:09:84:df:01:bc:60:8b:f7:17:
         09:25:14:7e:08:32:13:4f:07:bc:80:f1:12:b3:44:83:f0:a4:
         a4:36:e1:fa:76:40:4f:a5:5e:c5:1a:4f:e0:d1:3e:d0:0b:a8:
         fd:44:46:fb:c3:cb:d2:a7:3d:18:ba:25:6b:c6:8a:19:0f:77:
         65:a1:6c:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ru8Ns7B7syZo7lQGXmAORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MWU0ZDYwODE1MmZjMjQ0YWZmZmJhMmRjNzJiODUxYjE5
YjI1MjcwHhcNMjYwMzI2MjAwMDE4WhcNMjYwMzI3MjAwMDE4WjAzMTEwLwYDVQQD
Eyg0OTkyZGU0NDMwZTc4M2JlNmI4Mzg4ODQ0YzU3OGQ5ZjdkMDYxYjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yS0nXkcVq9zVeJaydSsWtOErF5x
HPhQtVuFICNUMYIxAq30Wr6VKHgFpyyQ/gynnPR0OE7JR6zkxos/0JndrfHpwVmr
fql6+UJjJckrLTLBVnWnP3yGE1YN/tjrdhhIuD5M5uCDf9sVxtPA5hlut+xNhsbA
IArfNI31ov2zPs3vp1rN4Hdyt8jRTMWGGMBh3ROr6x/0hQR3X9TB2lSNLBtyfNqn
t09vHzi0d5cG5NhdySXTr3n6m7jCptva3WwStF0z/iqfg0k6X8pBYraZAWiRV7BJ
ClUW75+J1FCfhgo+BHTcfBJV4RUhDJtNqcMjOwyyMV4vHLoBw86t0abMSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmS3kQw54O+a4OIhExXjZ99BhsaMB8GA1UdIwQY
MBaAFBgeTWCBUvwkSv/7otxyuFGxmyUnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0I1TllJRlNfQ1JLX191aTNISzRVYkdiSlNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85MjE3ZjktODEzZC00N2FmLWFkNjIt
MzIyMDhkNTQ0YTg0LzEvR0I1TllJRlNfQ1JLX191aTNISzRVYkdiSlNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85MjE3ZjktODEzZC00N2FmLWFkNjItMzIyMDhkNTQ0YTg0
LzEvR0I1TllJRlNfQ1JLX191aTNISzRVYkdiSlNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnUpDFE6A
QYB5P8xy3xptNdX5xJ4NOdmXY52fS5FNxF85GXkq4WkBmLpHWIffrJ6t94goEEit
sgKfoAoonifmF7/G2ggyVg4VlCnBI817keTJSE2dw4plXcwYGe8IhwwxM8B5PgmI
zgLPAqruH2Jfoc1eykQCW7R96NdLjQZNo9Ksq+YKyJg5shztfBZhuzMGifuSUC3H
XoaBYAOqJX+alfFvF2PRgar2kQ1uPOJLYrho35fxEPpudAeaBl5sCYTfAbxgi/cX
CSUUfggyE08HvIDxErNEg/CkpDbh+nZAT6VexRpP4NE+0Auo/URG+8PL0qc9GLol
a8aKGQ93ZaFs2w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:52:05 2026 by rpki-client