Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
File:                     GUoR_la49HpaFBUDK3f_n7CC4D8.mft (raw, json)
Hash identifier:          CKYAqRKgOFx6WRyQs3R2jrUBvLXV/N3eooIXjBLGXTw=
Subject key identifier:   7F:DE:17:44:71:0A:E0:D8:21:C0:C8:95:5F:45:FE:E1:77:8D:C3:51
Authority key identifier: 19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F
Certificate issuer:       /CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f
Certificate serial:       019D2703FA4CCC9CDCF7C86B747597C41869
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
Manifest number:          1344
Signing time:             Wed 25 Mar 2026 22:01:05 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:05 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:05 +0000
Files and hashes:         1: GUoR_la49HpaFBUDK3f_n7CC4D8.crl (hash: eMNwv9zBc4d6Eiv5zdhMXXufev7TgP0cPLPvXpAW+8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:fa:4c:cc:9c:dc:f7:c8:6b:74:75:97:c4:18:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194a11fe56b8f47a5a1415032b77ff9fb082e03f
        Validity
            Not Before: Mar 25 22:01:05 2026 GMT
            Not After : Mar 26 22:01:05 2026 GMT
        Subject: CN=7fde1744710ae0d821c0c8955f45fee1778dc351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6b:db:fd:86:f0:b8:62:4f:f1:34:d3:9e:b3:
                    57:a3:0d:07:4a:2a:7e:77:08:cd:76:0d:ab:a1:5d:
                    c7:44:fc:c9:ef:d9:c3:45:85:17:9c:1e:77:53:9f:
                    67:46:c6:29:23:7d:1d:9e:51:22:c8:88:17:26:15:
                    9a:6b:df:2e:77:bd:d3:30:82:09:54:07:a2:87:48:
                    41:fa:f0:db:18:98:12:8d:a0:79:b4:35:79:bc:00:
                    b2:6d:76:f2:18:87:3c:3d:34:89:62:65:56:f4:97:
                    bf:db:19:33:e1:8d:b4:d0:94:e7:1c:6e:3e:45:d0:
                    99:c5:55:0e:b9:bb:de:c6:06:d7:0d:30:fc:4f:05:
                    e9:da:f0:17:b3:82:3e:78:4f:f5:7a:a4:82:8f:b8:
                    52:6d:7e:fa:74:31:90:b0:c6:84:80:5c:d2:34:c0:
                    5c:fa:d8:81:03:02:f7:43:3e:b9:5d:37:c6:90:c1:
                    92:56:24:fa:c4:78:7c:dc:3f:35:e9:d4:09:85:6f:
                    af:2f:fd:05:21:17:10:10:ec:0e:2b:25:56:c2:ef:
                    8b:ce:39:e7:80:fd:21:77:90:13:f8:2f:08:36:82:
                    45:c3:28:d6:4e:68:fc:85:f6:80:59:a9:93:1f:89:
                    67:fa:3a:40:18:f1:3d:fd:74:4d:28:7a:41:92:da:
                    d3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DE:17:44:71:0A:E0:D8:21:C0:C8:95:5F:45:FE:E1:77:8D:C3:51
            X509v3 Authority Key Identifier:
                keyid:19:4A:11:FE:56:B8:F4:7A:5A:14:15:03:2B:77:FF:9F:B0:82:E0:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUoR_la49HpaFBUDK3f_n7CC4D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/aaaec0-0fba-4efc-98b6-c6a16de442bf/1/GUoR_la49HpaFBUDK3f_n7CC4D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:9e:89:c4:ef:1a:3b:b0:e0:7f:65:8c:07:45:c2:76:a9:0b:
         e5:a6:6f:ab:a9:a7:58:5f:42:eb:26:28:d7:55:3c:e9:c7:c6:
         37:e7:cb:a8:99:08:11:00:b2:d2:1d:08:ba:e2:b9:9c:68:c6:
         d8:e1:50:d0:e2:b4:bc:43:9a:1c:b3:99:cd:5a:b9:fc:63:78:
         db:4c:1c:7c:6c:c6:eb:c5:c6:7f:10:f3:e2:c4:28:86:1e:08:
         16:33:d2:db:c9:cf:08:fe:9d:52:45:d1:0f:8f:2c:ea:38:a9:
         01:f9:c7:dc:86:3e:84:13:46:e7:a0:b0:60:c8:27:cc:e8:9f:
         0b:f6:d8:80:ac:f5:f5:c9:9c:52:a7:f9:77:da:c7:fb:ad:50:
         f4:56:03:e1:97:5e:98:d7:23:ce:3a:81:a4:1e:79:dd:53:c8:
         0c:50:46:1e:e6:86:72:e0:29:16:46:2c:51:9c:68:93:27:ec:
         ef:64:ba:ae:24:6c:46:61:5a:f4:cc:61:20:3f:f1:fb:20:ac:
         b9:85:93:62:56:bb:19:e3:83:58:67:07:08:08:cf:34:89:3d:
         37:8f:ba:65:cb:fe:71:39:37:07:92:3e:d1:93:1c:eb:a4:84:
         43:1c:58:01:90:c1:e4:54:34:f9:d3:c3:9d:8a:aa:39:83:3a:
         3d:83:db:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:35:11 2026 by rpki-client