Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
File:                     G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft (raw, json)
Hash identifier:          FmkWE5GHbCS7F9/t5YOY/FCWm1wlmHpvbtVVEtYCkuE=
Subject key identifier:   0E:94:F7:6B:90:D4:83:3B:C4:B7:14:F8:ED:BC:84:0A:E6:24:C6:5D
Authority key identifier: 1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A
Certificate issuer:       /CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a
Certificate serial:       019D273AF662E2C391D2021BF7F571F7F96B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
Manifest number:          033C
Signing time:             Wed 25 Mar 2026 23:01:08 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:08 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:08 +0000
Files and hashes:         1: G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl (hash: xXLLvHeadLvhVLqLbizh4eqP/NDLrOOwZHqu60Q7Qho=)
                          2: gKtJxrK81I9Dyc2P943nU7n_NFg.roa (hash: FbX29T2UzXYU9Jzwc1cwk5IktOA+UziqBTJuxuNpfOg=)
                          3: mNtB-xH-QhdKLqJsjGj6xp9WKiw.roa (hash: hEJab2DxVlPrR69lL6u2AYQEme1levJMaPuY085myQg=)
                          4: rgz-y7ThQzU-4VqCfX9Ota3d-p0.roa (hash: piFE9GnT4z5N6g/l0DAbRB4nCDUBJdWgytzAmBqGihU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:f6:62:e2:c3:91:d2:02:1b:f7:f5:71:f7:f9:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a
        Validity
            Not Before: Mar 25 23:01:08 2026 GMT
            Not After : Mar 26 23:01:08 2026 GMT
        Subject: CN=0e94f76b90d4833bc4b714f8edbc840ae624c65d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c6:9b:08:11:26:49:ff:3a:21:2f:75:5a:66:
                    e9:71:4f:c8:d9:54:f4:3b:59:9a:7e:41:71:f9:93:
                    60:a3:20:2e:d1:6d:bd:c7:28:30:e0:8d:90:85:d6:
                    a5:74:52:d3:98:d5:c2:8c:3c:c0:0b:ed:81:86:d3:
                    a6:3d:e4:ed:10:16:df:02:e0:3a:11:ea:94:59:58:
                    94:86:31:97:6d:bf:55:27:61:6e:be:88:5e:da:b6:
                    15:06:ac:af:b6:df:c8:2e:8a:22:d3:7f:f8:60:b5:
                    f3:79:6b:18:00:14:31:69:01:ab:87:d3:a9:63:db:
                    4f:c5:10:60:ea:1c:21:08:6e:5d:37:d0:58:0a:55:
                    41:00:65:5f:32:6d:e1:c6:d3:9a:ce:4e:16:57:9a:
                    ec:ac:ff:c3:ca:c8:ec:48:04:af:c4:25:5d:ae:f8:
                    89:b4:58:16:4e:bd:3f:18:25:20:41:7b:3e:46:c4:
                    11:e7:c5:02:30:ae:63:c9:c1:34:02:de:3d:6f:5f:
                    c6:d3:2a:03:73:ec:d2:7f:a7:15:67:ab:73:7c:53:
                    da:c5:60:b8:0e:c2:68:82:79:b8:9b:99:d9:3b:5d:
                    25:8a:b3:4e:60:42:7e:a4:2d:87:6a:89:2e:6a:8b:
                    43:9a:a5:3a:28:83:2f:d5:22:3f:5e:8a:5a:72:11:
                    54:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:94:F7:6B:90:D4:83:3B:C4:B7:14:F8:ED:BC:84:0A:E6:24:C6:5D
            X509v3 Authority Key Identifier:
                keyid:1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:30:55:14:fe:8e:28:33:cd:41:83:69:f0:ae:f5:38:f9:57:
         f0:f4:f2:52:f0:a8:93:6e:3e:bf:6e:b5:fc:35:ef:34:9e:dc:
         b6:e5:f7:0a:e6:4b:43:6c:b2:9a:22:78:5c:6f:a8:44:36:2a:
         b9:a0:7e:ef:70:e2:4b:b8:ca:6a:97:e5:1d:17:b9:22:33:de:
         9a:58:58:41:5a:0e:b9:3c:08:e6:d3:9e:a8:86:86:fc:75:3b:
         1b:3d:d1:30:18:3d:c4:a9:c9:c2:aa:94:e3:d3:7f:a5:de:05:
         5c:cf:2f:89:0d:67:8e:ce:ff:0c:4b:db:7a:b5:c1:e8:f1:ae:
         49:8d:6f:7c:16:08:f1:7b:2d:6c:06:ac:fa:13:f3:32:10:c9:
         fa:d0:10:9e:22:68:af:1b:cb:3c:a9:ad:9b:5c:29:24:62:83:
         df:e6:4d:b4:bb:d7:2d:3b:3f:7a:3c:a9:b5:2a:49:85:bc:dd:
         fb:64:fb:c1:7d:9f:51:fb:66:c5:58:14:27:44:c1:28:5a:fa:
         10:81:c2:6b:e3:27:cd:f4:08:43:ae:1b:61:e1:a7:2a:21:92:
         a4:b9:55:a5:4c:7f:a9:8f:97:5e:b2:78:cb:28:4a:38:70:af:
         08:8d:92:97:1f:79:50:2e:69:3c:e4:3c:26:95:0e:c6:7c:6d:
         fd:d9:d6:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOvZi4sOR0gIb9/Vx9/lrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZWEzZTk5YmJiMGRkYTc4MDg0MjE5YTYxMzQ5MmU1ZTZk
OWI0NWEwHhcNMjYwMzI1MjMwMTA4WhcNMjYwMzI2MjMwMTA4WjAzMTEwLwYDVQQD
EygwZTk0Zjc2YjkwZDQ4MzNiYzRiNzE0ZjhlZGJjODQwYWU2MjRjNjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsabCBEmSf86IS91WmbpcU/I2VT0
O1mafkFx+ZNgoyAu0W29xygw4I2QhdaldFLTmNXCjDzAC+2BhtOmPeTtEBbfAuA6
EeqUWViUhjGXbb9VJ2Fuvohe2rYVBqyvtt/ILooi03/4YLXzeWsYABQxaQGrh9Op
Y9tPxRBg6hwhCG5dN9BYClVBAGVfMm3hxtOazk4WV5rsrP/DysjsSASvxCVdrviJ
tFgWTr0/GCUgQXs+RsQR58UCMK5jycE0At49b1/G0yoDc+zSf6cVZ6tzfFPaxWC4
DsJognm4m5nZO10lirNOYEJ+pC2HaokuaotDmqU6KIMv1SI/XopachFUEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6U92uQ1IM7xLcU+O28hArmJMZdMB8GA1UdIwQY
MBaAFBvqPpm7sN2ngIQhmmE0kuXm2bRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xOTcyYTItM2I2Zi00MzE2LWFiN2Ut
YTBiY2M5MTJkNzM1LzEvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8xOTcyYTItM2I2Zi00MzE2LWFiN2UtYTBiY2M5MTJkNzM1
LzEvRy1vLW1idXczYWVBaENHYVlUU1M1ZWJadEZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDBVFP6O
KDPNQYNp8K71OPlX8PTyUvCok24+v261/DXvNJ7ctuX3CuZLQ2yymiJ4XG+oRDYq
uaB+73DiS7jKapflHRe5IjPemlhYQVoOuTwI5tOeqIaG/HU7Gz3RMBg9xKnJwqqU
49N/pd4FXM8viQ1njs7/DEvberXB6PGuSY1vfBYI8XstbAas+hPzMhDJ+tAQniJo
rxvLPKmtm1wpJGKD3+ZNtLvXLTs/ejyptSpJhbzd+2T7wX2fUftmxVgUJ0TBKFr6
EIHCa+MnzfQIQ64bYeGnKiGSpLlVpUx/qY+XXrJ4yyhKOHCvCI2Slx95UC5pPOQ8
JpUOxnxt/dnWuQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:16 2026 by rpki-client