Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
File:                     GTdDRntNpBxilek1EVMwlYa6I5k.mft (raw, json)
Hash identifier:          jBvyRcYTOJJbyBSmwlJVFhosLernAtWfnThX2b3X/30=
Subject key identifier:   90:EC:04:BF:F0:A2:C8:F2:D5:86:E6:19:B6:D1:51:EB:C5:4D:86:F6
Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
Certificate issuer:       /CN=193743467b4da41c6295e9351153309586ba2399
Certificate serial:       019D27DF5BB5A129D7A2BB9CBAE5EC2137BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
Manifest number:          1509
Signing time:             Thu 26 Mar 2026 02:00:42 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:42 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:42 +0000
Files and hashes:         1: ESOn4YVwMvjEwp43_BIg6dF4bME.roa (hash: R9TTpag0gjQGiKGRJHhKu7HUgpmc2rwTNbk37Twi9mw=)
                          2: GTdDRntNpBxilek1EVMwlYa6I5k.crl (hash: AlZEu/bGCc+AVnO2kf9xsZEu8NsV781miBVsXaaUZio=)
                          3: a1Wzzm6d-RLRzAcChfLkzjD6yj4.roa (hash: u2suJZ9dSTEdpIWAwFWYGCWey0B3AvIkAHlBujdVtCc=)
                          4: bonvg5XaBQcMsNMwCdMc5lDAhv0.roa (hash: ZSoRPjPH88M9xek3/eVzci4XvPHF1Itjvf+UZyNuK0s=)
                          5: h-e8ELzqBHgqs0gO88cD6j4kiUw.roa (hash: IFfM4s3xZcomvpllzauBa/HUt3f3fExXfJyGi7VQ3a0=)
                          6: tgxCEeVuZ-EDQmEz7GRXe-l5ETE.roa (hash: LUh2uL8YOcgSTcCxK3/07PSsvLuQW83QgTZqddE2hIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:5b:b5:a1:29:d7:a2:bb:9c:ba:e5:ec:21:37:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193743467b4da41c6295e9351153309586ba2399
        Validity
            Not Before: Mar 26 02:00:42 2026 GMT
            Not After : Mar 27 02:00:42 2026 GMT
        Subject: CN=90ec04bff0a2c8f2d586e619b6d151ebc54d86f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a2:47:ab:48:66:cd:98:88:89:1b:1f:3a:6f:
                    c5:81:10:27:73:50:da:3f:5c:a8:92:99:53:86:2a:
                    48:b8:2f:77:a0:99:92:b8:95:e2:e0:7e:e1:3e:25:
                    f9:4d:3a:fa:13:26:1a:8b:3f:93:6c:e2:c1:5b:bb:
                    9d:0f:1b:a6:1d:39:79:9c:25:b5:83:d2:6c:cb:9a:
                    0c:26:dc:d7:11:0d:c0:f3:04:ca:4d:98:e0:e1:87:
                    fb:a7:06:f9:65:25:9b:99:56:2b:d0:c5:a1:80:ea:
                    aa:40:c8:32:38:53:ba:b5:32:18:71:09:f5:1d:a9:
                    ad:d3:7a:05:04:f5:c7:fe:22:e0:80:d7:82:e1:ca:
                    0d:2d:f6:75:ed:9e:87:fa:11:92:74:bb:66:59:2e:
                    f4:b3:2a:e8:7f:c1:3c:33:9d:ad:c7:4c:f5:a3:11:
                    fe:5e:c7:54:02:97:a0:06:e4:78:67:58:db:cc:90:
                    11:d3:b1:b9:ae:0e:98:7b:30:68:c2:4b:c8:75:21:
                    74:cd:71:0c:33:4f:00:23:54:c5:43:92:55:a6:21:
                    33:b1:53:93:42:33:a1:26:c4:30:a0:ad:50:7e:1b:
                    1b:34:3a:b2:5f:85:73:c2:f7:59:b7:16:a8:a5:70:
                    41:5c:9a:c4:86:fb:07:2d:9b:73:c8:c7:2b:56:92:
                    36:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:EC:04:BF:F0:A2:C8:F2:D5:86:E6:19:B6:D1:51:EB:C5:4D:86:F6
            X509v3 Authority Key Identifier:
                keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f1:ae:0f:16:e4:96:7e:be:e1:7b:70:67:62:54:cd:26:2f:
         74:b3:93:73:c8:0d:5f:dd:19:d6:f0:dc:08:e3:45:07:bb:e3:
         61:a8:06:5c:a9:90:f5:61:08:15:43:30:38:87:d0:b4:cb:d9:
         de:2b:22:80:3f:1e:61:a1:0a:20:68:04:2f:d2:1a:d8:09:f2:
         d2:2d:dd:37:4a:d3:9d:0a:e3:08:87:f9:65:09:96:76:1e:87:
         1b:a4:ab:14:f4:02:a3:e7:e4:aa:40:8c:d4:ef:d4:ea:ab:04:
         c9:49:9a:39:da:3c:ec:5b:9d:2c:f5:c9:68:b6:a1:71:a3:fd:
         7f:84:a5:19:b1:5e:01:bb:eb:bb:23:2b:c1:64:07:67:1b:fb:
         a1:8e:f3:29:aa:34:bb:7a:0a:05:e3:1e:98:5a:df:b5:cc:b9:
         01:ed:38:86:54:ca:38:b9:ef:f5:f0:57:5c:88:e3:5d:ec:3a:
         4e:85:b5:91:73:d4:d5:e1:13:5d:97:c4:60:95:c5:c4:f7:02:
         f1:60:ee:ef:b4:40:b0:ba:ef:9a:b8:70:26:70:d1:28:a0:a2:
         d8:b9:ee:00:73:5f:02:81:08:77:c4:03:33:99:db:b9:e7:4d:
         b2:b9:02:66:12:64:1a:b4:9a:8f:6a:6f:70:dc:a1:ab:ab:ba:
         af:64:00:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:29 2026 by rpki-client