Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
File:                     Gk-AAcMMrFRuP5IQO0sScy38v1I.mft (raw, json)
Hash identifier:          IoBpbKKctzYa5+WDySzlJKKGr7X34TyZJgXlPn/E+dQ=
Subject key identifier:   8A:C0:66:16:06:AA:A4:2B:02:9A:B1:B5:CE:1B:17:B4:3D:8E:4E:4C
Authority key identifier: 1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
Certificate issuer:       /CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Certificate serial:       019D265F9C2BC7FF1CC43E8D4E81CC759242
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 19:01:32 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:32 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:32 +0000
Files and hashes:         1: BCswXhh13-96UzaS6jsy6o1xQtA.roa (hash: ZcV3c026LJ5PD6nm+askgP2WeXj6YnsPaEau8hz76oA=)
                          2: Bl5slAIXRPgWtIinsLCmL3-jbzk.roa (hash: i6BHS+hInLwE4GPTdlCdthLjEksUt9oFXu6hrkt0YCc=)
                          3: Gk-AAcMMrFRuP5IQO0sScy38v1I.crl (hash: sS71c/fye9NSULrSU0MnrdUBn4or54U5SBBt9316JK4=)
                          4: MULF19ROPV0W_fTYRqeyOCt3Yeg.roa (hash: JLSm0NR2yp/7sLvwbHrccBHG0dmWFI9G+KuJqUy4oRE=)
                          5: osuY-cnY6vhLD6H1gcoPAxb709k.roa (hash: uqRcFkq6jjVYOzdkGQsiVwhb9Q+ozJsUHkALBpXOot0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:9c:2b:c7:ff:1c:c4:3e:8d:4e:81:cc:75:92:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
        Validity
            Not Before: Mar 25 19:01:32 2026 GMT
            Not After : Mar 26 19:01:32 2026 GMT
        Subject: CN=8ac0661606aaa42b029ab1b5ce1b17b43d8e4e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:75:9e:0a:ef:b4:ee:99:41:ad:cf:7e:e2:a2:
                    30:4a:c6:33:7a:c4:96:fc:ea:a6:93:29:67:83:2f:
                    5b:60:28:c7:64:87:4b:1d:1a:04:60:a2:a3:55:df:
                    ea:e8:5b:29:69:37:7a:6e:8a:c8:7f:05:b9:b3:99:
                    d6:71:71:66:2d:d4:a1:e4:c2:9a:2c:c2:8c:57:5d:
                    96:2c:4e:b3:91:2c:f2:8e:c7:07:27:08:f9:2d:5d:
                    12:e2:aa:99:80:56:f0:e6:ab:0e:a0:c8:a6:ca:7d:
                    35:d2:42:66:f0:49:42:06:6c:f6:a8:97:31:e4:68:
                    1a:59:7d:c2:89:4b:be:3f:f0:13:92:61:37:6d:34:
                    15:13:dc:b1:37:c9:fe:47:96:f1:6e:9e:ce:6e:b1:
                    df:4f:db:52:2c:d0:43:85:2d:33:6e:e7:9e:ef:f5:
                    d4:b2:db:e0:2e:dd:fd:78:c1:1d:67:1f:9a:f8:b2:
                    37:46:33:19:00:80:35:53:5b:2b:1d:7d:8f:84:e5:
                    5e:16:f0:cc:8b:e2:8b:b6:82:2a:36:f6:b1:4a:04:
                    4a:69:c9:bd:40:eb:8a:a1:34:cb:31:ab:0b:cd:50:
                    b9:f5:70:4f:c4:9a:07:ec:f5:b8:f2:c2:98:4a:f7:
                    03:be:1e:93:07:e3:4e:1e:37:5f:72:66:81:18:90:
                    2d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C0:66:16:06:AA:A4:2B:02:9A:B1:B5:CE:1B:17:B4:3D:8E:4E:4C
            X509v3 Authority Key Identifier:
                keyid:1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:71:2b:8f:9e:57:d8:53:e7:41:7b:65:a1:8f:a7:05:80:44:
         cd:7a:8f:51:63:8c:6b:ea:cb:cd:b8:f4:03:71:ff:25:10:6f:
         c3:13:ab:a7:a6:1f:fd:4a:5f:fc:81:fb:6e:22:05:bf:ed:68:
         9b:b9:84:39:6d:ab:78:18:3d:d4:be:cd:77:25:97:ec:3e:6c:
         d0:d3:d0:56:a3:a2:8d:70:37:f4:e0:a9:0c:b8:93:71:bd:d9:
         92:3f:d1:6e:b9:96:95:ca:5e:eb:6a:48:33:0b:37:74:f8:4e:
         8a:e8:95:eb:d5:6c:29:e5:3b:59:4b:8a:58:a9:69:5f:25:ff:
         43:ae:d3:6d:cf:c4:e5:32:05:b6:2e:a6:6b:79:3a:c7:96:ea:
         20:c3:77:98:17:c5:7b:b7:5f:55:9e:18:64:2a:f3:72:fc:61:
         e7:d7:48:40:86:eb:30:de:a4:36:cd:21:70:1f:fe:29:b6:06:
         b0:39:1e:58:16:a5:c6:fa:42:f7:dc:dc:42:23:39:4c:af:0f:
         c5:14:8e:74:6e:3a:e0:b5:1c:4a:66:c1:dc:1d:92:87:b6:2a:
         3b:2d:62:cb:61:59:32:15:28:17:ca:15:26:8a:e8:7e:99:ec:
         bf:7e:32:e7:a6:df:c9:bb:63:e5:c1:83:b4:3e:ca:7a:91:8c:
         f7:d3:46:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:02:12 2026 by rpki-client