Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
File:                     GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft (raw, json)
Hash identifier:          INl0/vFdM69xZRRLS5HB+vo7tZdYN9wn1gt6inIB0gg=
Subject key identifier:   32:6F:A0:FF:E7:C9:41:C6:D8:CF:52:5F:BF:35:3F:C3:CE:D1:80:98
Authority key identifier: 18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
Certificate issuer:       /CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Certificate serial:       019D2D73A57A07BF32D12D656DABA68819B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
Manifest number:          1890
Signing time:             Fri 27 Mar 2026 04:00:46 +0000
Manifest this update:     Fri 27 Mar 2026 04:00:46 +0000
Manifest next update:     Sat 28 Mar 2026 04:00:46 +0000
Files and hashes:         1: 4yhn0zab6G9Xm_NjzDhDVFNViNU.roa (hash: A7LqIa0Mp3Sp/NDA4NIu51kIjL901Apj0xVFgoij29k=)
                          2: 7VsPFkhM_OrYhPPIYt8jc85Ys8Y.roa (hash: x7mGZCpmu0SwOVi3OquDRZc+flnwWQDFf3B9ZxRJHaY=)
                          3: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl (hash: H12yyfkv0XuPFZ/ffQd9O+SZQnYcIaaR0AW4cQDdnQE=)
                          4: r7rIkd3JpKTtd7ti5sQWVfcfHRc.roa (hash: BZ2IDfhsgXSEeuZ1ehS1OEbZfErOlb6+IBt9JMlf/C4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2d:73:a5:7a:07:bf:32:d1:2d:65:6d:ab:a6:88:19:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
        Validity
            Not Before: Mar 27 04:00:46 2026 GMT
            Not After : Mar 28 04:00:46 2026 GMT
        Subject: CN=326fa0ffe7c941c6d8cf525fbf353fc3ced18098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5d:53:b6:c3:56:5b:17:8c:f0:fd:e5:31:c0:
                    06:59:58:94:22:d9:d3:c5:1b:4f:df:8f:6f:a2:0e:
                    ce:8d:43:ec:34:ba:2e:43:5f:09:8d:95:82:19:bb:
                    a0:1c:f3:66:9f:39:80:43:75:02:e8:d6:10:a9:e9:
                    46:27:5f:e2:cd:23:e0:88:40:e5:65:90:ea:97:bb:
                    94:92:a5:78:5f:89:01:3f:0b:a4:ca:d4:1d:d6:ed:
                    c1:4a:03:ae:14:1f:8a:2a:85:61:c5:9b:81:b6:45:
                    0e:88:23:ab:99:2f:db:8f:5a:14:6d:20:d8:c8:d6:
                    8c:f3:63:53:80:dc:a4:5a:bc:3d:e9:77:a6:62:6b:
                    3b:32:b0:ab:5b:87:0a:82:f8:d4:76:49:d0:2e:30:
                    25:c4:1d:4e:ac:7b:00:00:af:bd:3f:c8:6a:d8:61:
                    04:02:06:e1:22:00:68:9c:bb:1b:38:9d:1c:ef:e2:
                    62:a3:8b:a3:94:79:ab:76:a3:f3:b3:5c:9a:77:12:
                    d4:d4:e8:dd:e7:8a:cb:de:e1:4b:67:e9:65:11:d2:
                    04:f3:75:73:c5:92:cd:ea:71:f7:af:c3:63:9d:9d:
                    e5:1f:10:96:8f:26:52:9d:fe:61:b8:1b:c6:e4:aa:
                    ee:b0:ed:d0:df:bb:99:14:75:11:f9:c2:f3:d8:fb:
                    d8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6F:A0:FF:E7:C9:41:C6:D8:CF:52:5F:BF:35:3F:C3:CE:D1:80:98
            X509v3 Authority Key Identifier:
                keyid:18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a8:d3:0f:42:e2:05:3d:5f:d5:62:6d:2a:bf:ab:36:7e:c6:
         9d:dc:bc:b2:87:40:5b:1d:4b:ed:59:f6:bb:84:40:15:71:3e:
         4a:2d:e4:ea:eb:43:1b:e2:bf:3d:19:50:d6:51:30:75:ac:44:
         29:01:68:08:84:b3:b0:b5:1f:b5:21:f1:06:d4:5c:21:ca:f9:
         50:88:22:29:ca:cc:98:39:e2:ff:95:c4:9f:34:fc:ae:ff:7f:
         2d:23:58:98:5a:d3:b8:0d:5e:1a:5b:2f:83:cc:0b:83:32:3b:
         f8:eb:ac:54:cf:6a:19:66:47:7d:73:ab:4e:4b:f0:30:3d:39:
         da:72:34:9c:04:ff:34:b9:69:e8:e0:c1:2d:3b:ff:af:fd:fa:
         7f:d1:75:30:18:f1:aa:24:da:bb:58:d5:40:08:d3:95:6a:4c:
         ce:ed:90:21:99:a0:41:5f:22:36:0d:8f:87:8b:5f:29:d3:6d:
         e8:8c:b1:90:f0:0b:bc:44:e2:d2:12:c2:84:66:04:5a:b9:7e:
         b0:37:3a:cc:3c:b7:4b:9c:43:0f:6b:ea:a0:bd:31:6f:6f:01:
         dc:51:d5:82:58:2e:1b:3e:e7:47:86:40:9f:9d:40:4e:1c:6a:
         85:94:f7:a1:0b:68:74:07:c6:d2:f4:59:f0:c3:66:ba:55:df:
         84:1d:83:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:10:43 2026 by rpki-client