Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
File:                     gvGLgDOdiuY39KAvM1u-x8jCa94.mft (raw, json)
Hash identifier:          kM9oBu8mwkJVlpGEbrlDS7KZ3+E4jb71zZqfxK5jLsM=
Subject key identifier:   50:82:5F:63:7F:9E:49:18:92:4B:FC:38:A4:87:E5:A4:C0:74:DF:0D
Authority key identifier: 82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE
Certificate issuer:       /CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
Certificate serial:       019D27DFF74FB2E7B6E8F65BCEDCA1CC825A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 02:01:22 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:22 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:22 +0000
Files and hashes:         1: HRhnJs0rqSh4-uSE3UR_PKkUZFI.roa (hash: LXksIEwMTfFfnm1hrgpaVNQMLwmyjyLCSI5cjH3cCWM=)
                          2: gvGLgDOdiuY39KAvM1u-x8jCa94.crl (hash: +sPYuqOjcaVGk8hlzx++VcoG2eugk8W2l4e/sQipMvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:f7:4f:b2:e7:b6:e8:f6:5b:ce:dc:a1:cc:82:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
        Validity
            Not Before: Mar 26 02:01:22 2026 GMT
            Not After : Mar 27 02:01:22 2026 GMT
        Subject: CN=50825f637f9e4918924bfc38a487e5a4c074df0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:aa:f9:20:50:4f:72:64:33:da:86:47:c8:45:
                    f9:dd:94:3f:a5:5c:f5:b4:08:6e:28:a3:14:80:16:
                    38:06:7a:82:ed:df:e9:b9:da:5e:13:49:53:dd:57:
                    5c:b2:b8:83:7e:51:58:c1:62:bf:d0:f4:99:b2:af:
                    d2:2c:24:77:75:7c:4f:70:49:9b:70:74:f2:46:b3:
                    02:bc:6c:08:af:8c:db:a9:2d:57:0e:b6:1a:82:2b:
                    b1:15:8f:c4:4d:0e:e6:b8:f1:12:9f:2a:ba:64:cc:
                    1b:24:24:66:d7:b0:1d:c9:01:40:62:1c:b8:61:e6:
                    c8:7e:e7:4b:a8:d6:3a:76:90:f7:0a:24:58:a1:b2:
                    e0:b5:9b:05:d0:c2:b4:44:21:71:ca:8d:7a:96:65:
                    5f:5d:e8:54:a7:15:c8:46:85:5b:1b:2c:b0:2e:56:
                    90:94:13:99:fb:f1:4e:2f:3e:9f:f5:3c:5a:76:8f:
                    33:d4:13:78:86:61:a6:c9:d5:00:c6:d9:f3:4f:03:
                    ef:ea:cd:63:13:32:a8:95:be:db:d4:91:56:69:07:
                    8c:b6:23:31:be:3e:20:84:3a:02:aa:a8:d7:1f:70:
                    bf:6f:2a:37:3c:6f:09:8a:1c:4a:2c:9a:29:ff:fb:
                    a0:ed:81:cf:b0:f1:87:8e:70:3b:52:25:74:7b:94:
                    53:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:82:5F:63:7F:9E:49:18:92:4B:FC:38:A4:87:E5:A4:C0:74:DF:0D
            X509v3 Authority Key Identifier:
                keyid:82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e8:c0:b6:a0:1c:49:b6:fe:46:9c:28:9a:2e:92:bc:11:3b:
         21:5a:27:bc:5c:28:b7:8b:ca:9e:fe:70:11:57:e3:45:17:fc:
         99:38:f7:a8:0c:0e:80:47:16:9a:73:ca:a1:be:a4:66:1d:28:
         96:60:b4:96:1b:63:b5:93:55:70:53:4e:d4:d5:19:96:14:b7:
         a0:68:f9:73:4d:9f:26:b2:16:8c:b6:6f:a9:0a:cb:42:16:a0:
         0b:22:35:a9:41:ed:14:f9:8b:c6:08:7c:b7:55:9e:e9:38:63:
         c0:11:3e:a5:e0:40:cd:75:7f:5f:e6:78:56:f7:bc:8a:35:16:
         07:3e:4e:cc:bb:d4:81:1d:05:de:80:84:a5:ae:7d:a3:32:e9:
         19:1b:ba:eb:8e:02:fa:50:59:87:93:c9:10:7a:30:69:39:42:
         fe:9a:b6:36:9e:04:c9:5a:e3:72:32:9b:9b:15:59:4f:dd:92:
         c9:31:bc:73:46:e9:d8:14:b7:b0:05:87:ff:25:17:fc:93:71:
         ab:bc:bc:08:61:e8:5b:34:a5:36:42:77:70:e2:03:81:d2:f6:
         f8:58:b9:02:96:41:94:8a:24:e9:e1:5a:59:26:42:d4:14:8c:
         25:87:53:9b:0e:65:28:78:d7:54:5f:3f:11:0d:96:49:09:78:
         92:6a:42:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n3/dPsue26PZbztyhzIJaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZjE4YjgwMzM5ZDhhZTYzN2Y0YTAyZjMzNWJiZWM3Yzhj
MjZiZGUwHhcNMjYwMzI2MDIwMTIyWhcNMjYwMzI3MDIwMTIyWjAzMTEwLwYDVQQD
Eyg1MDgyNWY2MzdmOWU0OTE4OTI0YmZjMzhhNDg3ZTVhNGMwNzRkZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6r5IFBPcmQz2oZHyEX53ZQ/pVz1
tAhuKKMUgBY4BnqC7d/pudpeE0lT3VdcsriDflFYwWK/0PSZsq/SLCR3dXxPcEmb
cHTyRrMCvGwIr4zbqS1XDrYagiuxFY/ETQ7muPESnyq6ZMwbJCRm17AdyQFAYhy4
YebIfudLqNY6dpD3CiRYobLgtZsF0MK0RCFxyo16lmVfXehUpxXIRoVbGyywLlaQ
lBOZ+/FOLz6f9Txado8z1BN4hmGmydUAxtnzTwPv6s1jEzKolb7b1JFWaQeMtiMx
vj4ghDoCqqjXH3C/byo3PG8JihxKLJop//ug7YHPsPGHjnA7UiV0e5RTWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCCX2N/nkkYkkv8OKSH5aTAdN8NMB8GA1UdIwQY
MBaAFILxi4AznYrmN/SgLzNbvsfIwmveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3ZHTGdET2RpdVkzOUtBdk0xdS14OGpDYTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82NWMyZDktODBkNC00NTlmLWFlNjEt
YjViZDQyOGYxOTBjLzEvZ3ZHTGdET2RpdVkzOUtBdk0xdS14OGpDYTk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS82NWMyZDktODBkNC00NTlmLWFlNjEtYjViZDQyOGYxOTBj
LzEvZ3ZHTGdET2RpdVkzOUtBdk0xdS14OGpDYTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOjAtqAc
Sbb+Rpwomi6SvBE7IVonvFwot4vKnv5wEVfjRRf8mTj3qAwOgEcWmnPKob6kZh0o
lmC0lhtjtZNVcFNO1NUZlhS3oGj5c02fJrIWjLZvqQrLQhagCyI1qUHtFPmLxgh8
t1We6ThjwBE+peBAzXV/X+Z4Vve8ijUWBz5OzLvUgR0F3oCEpa59ozLpGRu6644C
+lBZh5PJEHowaTlC/pq2Np4EyVrjcjKbmxVZT92SyTG8c0bp2BS3sAWH/yUX/JNx
q7y8CGHoWzSlNkJ3cOIDgdL2+Fi5ApZBlIok6eFaWSZC1BSMJYdTmw5lKHjXVF8/
EQ2WSQl4kmpCNA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:33 2026 by rpki-client