Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
File:                     GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft (raw, json)
Hash identifier:          j+S4ec/b5ylEXpIhLcxNRqNj1SVU/1S2ZSCnE/OfhNw=
Subject key identifier:   54:7B:C4:E7:B4:F1:F4:9D:B9:60:01:EA:2F:01:40:88:A0:99:C5:99
Authority key identifier: 19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB
Certificate issuer:       /CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
Certificate serial:       019D296166CDF21DE04E4CE58FB2D3BC349D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
Manifest number:          1785
Signing time:             Thu 26 Mar 2026 09:02:22 +0000
Manifest this update:     Thu 26 Mar 2026 09:02:22 +0000
Manifest next update:     Fri 27 Mar 2026 09:02:22 +0000
Files and hashes:         1: GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl (hash: ZRUtlYRdAWhjtZShvSLxqc52KQLF0r13oZOxSYyC8nA=)
                          2: K0GZfO50qL-CkzTgvj6rdikY-es.roa (hash: 4i1E6RRA2bP05oORMGF0rgiNltnM9ErpRc53Lr5MThI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:66:cd:f2:1d:e0:4e:4c:e5:8f:b2:d3:bc:34:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
        Validity
            Not Before: Mar 26 09:02:22 2026 GMT
            Not After : Mar 27 09:02:22 2026 GMT
        Subject: CN=547bc4e7b4f1f49db96001ea2f014088a099c599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:39:65:4a:12:19:75:f8:40:24:fa:d7:ab:23:
                    ba:99:dd:ee:4d:c7:06:57:74:f0:5d:a2:12:6e:5c:
                    4f:c3:fc:53:47:23:5b:41:9e:34:da:61:84:38:74:
                    d6:1d:4f:89:8c:01:4a:4d:80:7d:2e:39:65:18:bd:
                    82:d3:42:8f:3e:a9:d6:73:da:c5:3d:de:38:aa:d4:
                    19:5b:d5:8d:c3:4b:79:f7:08:5d:b1:1b:50:5a:b1:
                    70:03:27:59:bf:61:2e:fc:64:5b:c7:40:36:69:43:
                    05:6f:9c:c7:f1:af:f8:52:36:6c:8d:4b:42:04:d4:
                    fb:6d:ed:41:00:32:ea:58:74:50:14:85:3c:9e:1b:
                    3b:fc:cb:31:a9:10:4a:73:2d:38:a9:4d:4e:51:a4:
                    e8:34:7a:cb:62:25:96:9e:d4:e6:36:90:eb:18:fd:
                    9b:83:d5:a3:af:79:7b:05:75:a7:c4:41:b8:47:a4:
                    81:e2:33:71:19:d7:ce:ea:b9:b3:7c:4c:14:29:47:
                    27:f6:ca:82:b1:3b:6c:ff:47:df:77:29:b2:f8:52:
                    27:59:84:dd:0e:4e:1a:48:56:0b:5f:5d:17:8c:ec:
                    e7:31:6c:1f:be:85:74:b0:dc:60:d1:9f:98:2f:b8:
                    92:29:99:4b:22:4e:06:57:c7:58:0c:0f:04:69:bd:
                    ba:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7B:C4:E7:B4:F1:F4:9D:B9:60:01:EA:2F:01:40:88:A0:99:C5:99
            X509v3 Authority Key Identifier:
                keyid:19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:47:f5:1d:d6:a5:1c:17:2e:2a:51:43:9a:33:15:94:12:83:
         6b:bb:1e:aa:de:60:4a:e6:66:b0:cc:e7:0d:c8:54:f9:ee:d1:
         f2:15:82:ad:ad:b6:a8:8a:f6:56:57:6b:9c:f8:7d:19:8e:57:
         2f:97:53:2c:1a:1e:e2:03:41:8b:2c:b1:8f:3b:8f:fc:07:ed:
         70:c0:0a:50:fc:83:c5:a0:51:0e:f9:36:86:19:22:da:70:25:
         e0:d0:a3:70:af:70:a7:f5:74:bf:8c:6d:7b:b9:04:bf:90:c7:
         86:30:58:54:e6:b8:81:a7:87:9e:44:c9:6f:98:1b:49:0e:4b:
         27:c4:64:ea:c7:d9:5a:da:d0:d6:15:f9:14:13:89:54:fe:22:
         cf:51:6e:24:85:1f:9a:84:97:6b:2f:b4:fc:c7:7e:03:81:6f:
         66:7f:53:dc:14:4a:ee:f6:38:10:80:98:77:5f:7a:02:08:44:
         98:16:89:e4:bd:1b:d1:ca:4b:a4:82:6b:88:26:4d:40:28:7e:
         1e:29:83:50:bc:59:50:dd:2c:80:4c:e0:98:69:05:1b:cd:77:
         a6:ce:fc:e3:ac:36:72:3a:74:ff:1c:15:50:83:d5:8c:73:43:
         9c:3a:52:5e:ea:97:e0:1e:1e:4a:19:fd:00:31:22:69:00:8b:
         11:0f:c1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:10 2026 by rpki-client