Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
File:                     GvujiocH_SMcOIfkpSvc3tqyAyM.mft (raw, json)
Hash identifier:          MNNx7IO3NPLtFHxCzeO/FjrpSltpJHZI2LatQdzo6M8=
Subject key identifier:   A5:3D:84:B9:5C:C2:01:53:8E:86:FB:FA:68:4C:DE:17:5E:7F:E4:3C
Authority key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
Certificate issuer:       /CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Certificate serial:       019D28BB739BC6DAF7798334744F2E56AF2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
Manifest number:          09E7
Signing time:             Thu 26 Mar 2026 06:01:06 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:06 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:06 +0000
Files and hashes:         1: 0eyjF4LKH08gSHwI8t81kvl7qf4.roa (hash: OAQ9yLlIfIoZMZDTNkGDPEhOI6wA3fmO9jqPZiRRR1M=)
                          2: GvujiocH_SMcOIfkpSvc3tqyAyM.crl (hash: jjEU/AbzykCIxtR2knkDJSAmNA30tKmqzxm2VN4gLv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:73:9b:c6:da:f7:79:83:34:74:4f:2e:56:af:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1afba38a8707fd231c3887e4a52bdcdedab20323
        Validity
            Not Before: Mar 26 06:01:06 2026 GMT
            Not After : Mar 27 06:01:06 2026 GMT
        Subject: CN=a53d84b95cc201538e86fbfa684cde175e7fe43c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f0:ff:b6:e8:ef:61:7d:f2:66:f8:57:1b:19:
                    1c:08:d7:c1:9f:74:68:34:bb:ea:17:02:a5:4a:47:
                    a0:6e:e9:d3:e3:6d:7f:18:8c:95:92:e8:ee:b5:8f:
                    a2:ef:48:09:94:c6:be:8f:21:2e:43:42:04:7e:0f:
                    fb:d9:32:bd:c8:13:d8:7c:3d:ee:c2:a8:b0:37:48:
                    f8:08:18:45:be:26:6c:7a:90:38:80:93:47:1f:e7:
                    ee:22:cf:dd:b5:09:9a:55:96:54:4f:91:27:60:8e:
                    40:75:87:41:51:0d:7d:3e:65:e3:25:65:4f:d3:ee:
                    e2:42:3b:ec:1c:92:0a:30:b6:6a:70:f2:6a:5b:da:
                    4f:3f:21:05:0b:a2:77:c8:31:cf:72:f5:5f:bd:32:
                    d3:31:8c:69:6c:52:18:15:b0:92:75:a7:8b:c2:41:
                    82:14:93:0e:17:46:a2:b9:ed:c4:17:45:83:60:44:
                    e1:ce:63:4a:34:6c:83:4f:ea:ce:b5:a1:32:01:dc:
                    bc:f1:4f:08:e6:ea:fc:fe:18:f1:09:ff:7b:15:d6:
                    16:db:38:6d:23:f4:f5:20:81:e4:e4:b4:ba:93:eb:
                    1c:60:64:9f:ae:33:10:c7:c5:09:fb:23:e8:4f:35:
                    f5:13:29:f5:98:5e:11:9f:ad:48:19:96:ae:83:5c:
                    7b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3D:84:B9:5C:C2:01:53:8E:86:FB:FA:68:4C:DE:17:5E:7F:E4:3C
            X509v3 Authority Key Identifier:
                keyid:1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:ed:9d:e2:f6:86:ae:10:6e:fd:86:2b:f1:9e:70:e6:b3:fd:
         a1:fc:f4:90:ae:49:50:58:18:55:2e:00:de:72:4c:29:95:9f:
         ee:20:df:1d:69:60:2a:7e:a5:fa:fb:c5:0d:b7:84:c3:43:2b:
         dc:bc:f4:f1:10:99:a4:a2:6d:aa:3f:2d:8d:30:42:a9:17:4f:
         a7:0f:5c:2f:4f:8d:b7:3f:c4:9f:c4:0c:8d:ce:bb:7c:e9:07:
         75:55:a5:b7:44:d3:02:53:3d:cf:8d:ed:49:6f:09:2e:a2:f0:
         3b:85:a0:05:36:8e:00:3a:d5:58:ba:7f:1e:c6:c9:35:0d:cf:
         db:20:44:e8:2c:4e:49:2d:a5:3b:9f:bb:6e:7d:27:56:c4:d3:
         4e:f3:48:9d:bd:0b:1b:16:9d:ef:09:2f:ba:81:4c:3c:b7:ad:
         45:e5:6c:f7:6f:aa:4b:dd:85:4a:53:68:d5:90:59:6c:7f:2f:
         3e:27:06:0a:ef:c7:f2:42:80:92:79:b6:29:44:41:03:31:1c:
         0c:14:9a:b1:74:b3:6c:42:33:0f:7e:7c:a2:e7:59:ed:65:ab:
         b1:af:fd:6f:de:2f:30:51:ab:88:cd:20:7f:f9:19:98:f5:27:
         4a:6d:18:60:34:a2:d1:42:80:74:54:5c:af:50:b6:a6:37:f8:
         9a:6e:c5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:05:19 2026 by rpki-client