Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File:                     gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier:          +m/DLaO5dXuAMK/gL2Ic8O5XtpZZykyo2IshVRIh9LU=
Subject key identifier:   F6:C2:E9:D1:B4:22:19:C3:25:3E:7D:C2:23:82:1B:A7:48:7B:E2:FA
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer:       /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial:       019D284E62A27289BD5D7A69243434777784
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number:          191A
Signing time:             Thu 26 Mar 2026 04:01:58 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:58 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:58 +0000
Files and hashes:         1: IUI0XObzqlXmJSe9907ojhvvGKY.roa (hash: lh17xK7xmqGsZK8e6QUcQhpWBvUMvRGKUOxPhaUyu88=)
                          2: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: mtJo8w8Yiujgh9Da06WXSw8YfbL34MJZbfbWfjjS518=)
                          3: yxM7J-fncjH39qOsj_6YqBGJVWU.roa (hash: AjHV8rOTeMWNj3biUMbUNtv+kWtvN/aGZ8u6KDIN/SM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:62:a2:72:89:bd:5d:7a:69:24:34:34:77:77:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
        Validity
            Not Before: Mar 26 04:01:58 2026 GMT
            Not After : Mar 27 04:01:58 2026 GMT
        Subject: CN=f6c2e9d1b42219c3253e7dc223821ba7487be2fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2c:d1:4f:d2:c4:33:be:e8:b3:60:89:f0:49:
                    26:eb:5f:60:8e:cf:71:07:9f:0b:03:df:a0:89:dd:
                    f0:91:cc:1c:fe:5a:4e:ff:c7:0e:5f:0d:3a:ad:21:
                    44:bc:c8:ef:6d:59:2b:a9:bd:36:6e:57:bb:54:d8:
                    59:65:d3:cd:dc:32:d9:61:11:41:5a:49:74:f4:c4:
                    cd:d9:4b:87:33:b9:92:9f:30:75:10:6a:f5:2e:b7:
                    58:f6:d5:cc:8e:ba:50:f6:1f:c7:12:22:e2:9a:64:
                    51:41:47:52:a0:c2:ba:26:ac:26:72:ef:a7:37:d0:
                    56:52:e1:a5:11:82:8e:f7:d1:71:12:d8:63:8d:cf:
                    e9:91:d4:ea:6b:76:8d:69:23:78:14:d2:61:b0:a6:
                    51:86:17:f1:99:c3:99:cf:aa:d1:1a:61:51:88:38:
                    10:0d:b1:2e:cc:bb:c5:f6:8d:99:4c:a2:3f:72:c3:
                    71:03:52:6c:b4:b8:11:e7:17:6d:8d:a0:2e:00:44:
                    49:ff:bb:81:64:c8:60:f6:a9:96:7d:35:f5:6e:af:
                    0a:ec:b9:d3:0c:9d:c4:33:5d:e2:84:90:b3:7b:8e:
                    40:06:7b:80:22:67:00:24:91:de:4a:02:5e:98:93:
                    1f:0f:b4:74:b4:fa:a6:7d:79:6d:17:c9:28:eb:86:
                    57:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C2:E9:D1:B4:22:19:C3:25:3E:7D:C2:23:82:1B:A7:48:7B:E2:FA
            X509v3 Authority Key Identifier:
                keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a2:4e:d9:88:ff:fb:c7:a2:5c:8a:0b:32:8e:c2:30:62:aa:
         ae:10:82:05:87:cb:c6:97:7f:56:b5:b1:7e:30:67:ca:65:10:
         ce:88:12:96:ba:26:1b:a3:c2:72:76:20:66:0f:dd:70:ad:fd:
         9a:37:09:a8:17:c1:bd:4b:2d:83:2f:d8:ed:e7:fe:a4:7e:27:
         fb:f4:35:7b:2a:3a:17:54:fe:8e:c0:25:a3:29:16:dc:31:17:
         f3:b4:86:6b:8e:7c:07:2c:4f:2a:bc:08:8a:95:07:65:5c:89:
         0c:a8:0f:53:75:49:82:f3:b4:e6:cb:a4:52:7f:c7:f5:56:9b:
         38:d2:cb:89:47:2a:af:92:30:19:fe:d6:53:a3:60:45:80:73:
         c2:32:43:13:02:9f:5a:16:67:45:4e:51:55:e8:1a:14:fe:80:
         14:ae:53:28:5f:49:89:aa:55:39:b7:b0:2f:e6:c9:24:ec:79:
         66:db:e1:b6:22:61:fd:5f:e4:ba:7b:54:d5:35:43:56:46:01:
         61:7c:c8:5c:5f:fd:97:86:81:3b:3a:6b:62:5e:c8:f7:c4:28:
         bd:71:1e:af:d1:f7:dd:ab:a7:99:4d:21:bd:19:f2:2c:9e:ae:
         d8:03:5b:0f:8a:da:ef:70:4a:34:82:a2:08:8a:8a:59:c4:71:
         22:bc:56:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:40:58 2026 by rpki-client