Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
File:                     _gp5GaPtexO12rOchuBKepcjFHM.mft (raw, json)
Hash identifier:          p1eAagxDPBEnfYQWlYzpICJ4+drqKrO47FX2F9LG7hY=
Subject key identifier:   C6:EC:FB:B0:B7:EE:F8:B8:9D:96:86:2D:AE:D0:21:F6:BE:B8:35:EB
Authority key identifier: FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
Certificate issuer:       /CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Certificate serial:       019D25F11D0308005D3E147B19854B9F6FC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
Manifest number:          15D3
Signing time:             Wed 25 Mar 2026 17:00:51 +0000
Manifest this update:     Wed 25 Mar 2026 17:00:51 +0000
Manifest next update:     Thu 26 Mar 2026 17:00:51 +0000
Files and hashes:         1: _b-rE_2TVoYhUbNxE3eqPIAbO4s.roa (hash: /pEVtx61pqjHCNe27pdlrCZMoRpMRCiAqlKVxrQNLe0=)
                          2: _gp5GaPtexO12rOchuBKepcjFHM.crl (hash: IlkiuSsFjup0DYL8WkVYUuLGVhMxQyge3kxOLeGWuGc=)
                          3: bbj-gHI_NSxgfeUm9R2oZee2H7A.roa (hash: hYp+ief1ADpooPFUk5v8X2N0IMdf0TC4s8sF6EqLPy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:1d:03:08:00:5d:3e:14:7b:19:85:4b:9f:6f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
        Validity
            Not Before: Mar 25 17:00:51 2026 GMT
            Not After : Mar 26 17:00:51 2026 GMT
        Subject: CN=c6ecfbb0b7eef8b89d96862daed021f6beb835eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c8:a0:f8:b8:70:6c:ec:bb:7f:0e:11:02:e0:
                    b3:63:e1:44:2d:12:20:61:9d:c7:08:01:0b:32:e9:
                    5d:bc:6c:fa:23:b0:32:cf:98:c7:34:04:be:da:3b:
                    e5:ec:0a:38:c6:18:0e:79:4b:ab:c7:7f:57:9a:6b:
                    56:a7:2c:22:56:1d:8c:ea:1a:1d:6a:36:2f:61:61:
                    ff:8a:f1:c7:af:8b:09:65:4c:ab:eb:ee:02:9c:c9:
                    54:37:6f:28:79:c2:98:11:25:99:b3:6c:45:5c:f5:
                    d0:4f:5f:f3:d1:fa:52:eb:ae:31:5d:13:b0:94:ab:
                    bd:cd:51:f6:6f:3d:a3:80:a9:2e:b9:88:67:53:72:
                    ed:6e:31:30:27:4c:9f:e8:3b:b5:17:e5:f5:0c:8e:
                    1a:4c:62:d4:a1:e4:a7:b1:57:70:a2:dc:53:85:0f:
                    ae:f2:2e:f5:2e:d7:95:04:e0:66:13:64:66:d4:37:
                    61:70:97:c7:e0:84:56:d7:60:98:62:d0:3b:8e:17:
                    dc:33:17:b3:e9:f2:ab:f6:e5:0c:9e:8f:0d:84:86:
                    1e:4f:dd:e3:d7:df:35:b3:b8:bc:6a:e6:33:e0:52:
                    97:ed:30:9e:22:7a:f9:19:88:63:16:d5:7f:0a:ee:
                    94:0f:59:a8:69:47:9c:83:13:22:46:9c:09:05:af:
                    a4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EC:FB:B0:B7:EE:F8:B8:9D:96:86:2D:AE:D0:21:F6:BE:B8:35:EB
            X509v3 Authority Key Identifier:
                keyid:FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:33:d5:e8:8c:6c:17:cf:01:68:23:90:a5:53:e8:de:09:a0:
         9f:05:a4:2e:e4:7e:19:83:94:79:d6:2b:0c:44:fd:a2:7b:b9:
         a1:a9:44:77:77:4d:de:85:2f:f2:dd:56:9e:48:ff:63:a9:70:
         2d:77:e1:e7:b4:25:74:52:c9:d3:37:d6:24:c7:19:f8:6d:33:
         76:dc:f6:8b:16:f2:87:11:a4:69:d2:91:fa:1a:0c:77:15:55:
         96:b8:f5:8b:da:c2:d1:95:9b:eb:70:b1:63:c2:97:87:3f:cc:
         2c:7a:ec:97:ac:0a:cd:42:d0:69:fc:a0:2f:80:bb:24:71:4a:
         d9:c9:b7:df:64:db:8b:c6:5e:b3:e1:1f:de:5a:65:3f:5f:fc:
         f7:b5:80:e8:6c:54:7e:5d:64:20:b9:48:17:13:8e:db:2c:81:
         40:bb:e8:3e:7a:d2:ef:bb:a9:7f:2b:67:54:d6:d5:1f:ba:ee:
         ec:86:cd:b9:d9:2a:67:61:9c:08:7e:a5:0b:1a:20:b8:92:55:
         84:16:c1:10:68:cb:c1:7b:89:89:6f:56:5a:0b:84:6e:80:b0:
         a4:f5:32:ec:1f:f3:7a:f4:39:3f:58:02:ce:41:41:e7:ad:88:
         96:8c:6f:99:53:f2:ed:f6:81:cf:d7:b5:e5:f8:d2:8e:98:ef:
         48:5c:b5:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8R0DCABdPhR7GYVLn2/DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMGE3OTE5YTNlZDdiMTNiNWRhYjM5Yzg2ZTA0YTdhOTcy
MzE0NzMwHhcNMjYwMzI1MTcwMDUxWhcNMjYwMzI2MTcwMDUxWjAzMTEwLwYDVQQD
EyhjNmVjZmJiMGI3ZWVmOGI4OWQ5Njg2MmRhZWQwMjFmNmJlYjgzNWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsig+LhwbOy7fw4RAuCzY+FELRIg
YZ3HCAELMuldvGz6I7Ayz5jHNAS+2jvl7Ao4xhgOeUurx39XmmtWpywiVh2M6hod
ajYvYWH/ivHHr4sJZUyr6+4CnMlUN28oecKYESWZs2xFXPXQT1/z0fpS664xXROw
lKu9zVH2bz2jgKkuuYhnU3LtbjEwJ0yf6Du1F+X1DI4aTGLUoeSnsVdwotxThQ+u
8i71LteVBOBmE2Rm1DdhcJfH4IRW12CYYtA7jhfcMxez6fKr9uUMno8NhIYeT93j
1981s7i8auYz4FKX7TCeInr5GYhjFtV/Cu6UD1moaUecgxMiRpwJBa+kCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbs+7C37vi4nZaGLa7QIfa+uDXrMB8GA1UdIwQY
MBaAFP4KeRmj7XsTtdqznIbgSnqXIxRzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2dwNUdhUHRleE8xMnJPY2h1QktlcGNqRkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS80ODUwNmEtMzNkYy00NTc0LTgwZjMt
YmRlMjRhMmE5ZmY1LzEvX2dwNUdhUHRleE8xMnJPY2h1QktlcGNqRkhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS80ODUwNmEtMzNkYy00NTc0LTgwZjMtYmRlMjRhMmE5ZmY1
LzEvX2dwNUdhUHRleE8xMnJPY2h1QktlcGNqRkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDPV6Ixs
F88BaCOQpVPo3gmgnwWkLuR+GYOUedYrDET9onu5oalEd3dN3oUv8t1Wnkj/Y6lw
LXfh57QldFLJ0zfWJMcZ+G0zdtz2ixbyhxGkadKR+hoMdxVVlrj1i9rC0ZWb63Cx
Y8KXhz/MLHrsl6wKzULQafygL4C7JHFK2cm332Tbi8Zes+Ef3lplP1/897WA6GxU
fl1kILlIFxOO2yyBQLvoPnrS77upfytnVNbVH7ru7IbNudkqZ2GcCH6lCxoguJJV
hBbBEGjLwXuJiW9WWguEboCwpPUy7B/zevQ5P1gCzkFB562IloxvmVPy7faBz9e1
5fjSjpjvSFy1fA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:50:48 2026 by rpki-client