Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
File:                     gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft (raw, json)
Hash identifier:          FQ3qv6N9tz2d+Sf1xsDX/BbQ8emcYEOReYaVcwLgmi8=
Subject key identifier:   46:36:79:E7:68:C1:A0:7B:74:A4:7B:31:2E:78:86:CF:15:94:21:3C
Authority key identifier: 81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
Certificate issuer:       /CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Certificate serial:       019D2AE14E83CC10E4AF56D8BD72307DC9B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
Manifest number:          188D
Signing time:             Thu 26 Mar 2026 16:01:41 +0000
Manifest this update:     Thu 26 Mar 2026 16:01:41 +0000
Manifest next update:     Fri 27 Mar 2026 16:01:41 +0000
Files and hashes:         1: 8R-xDyOZCqzkZOmjhye0P0XKn1Y.roa (hash: F1vlUDsZyHn4eYl8OdR67IG0vKLcKMBkSRba2+ifgaA=)
                          2: B4QA_S9k7SlVpR7MdWiiWUcIC-I.roa (hash: OOJx9FQsYUEok6ZK1kN2i3wjiOZNjN0fy2SYUeHp9n4=)
                          3: OdpcRvq6Ntt7BatU6hcDO7lKhJU.roa (hash: 2TK7J7AsVuo5uY1fW4gJFOzrWvfYvp6BV3XxeqBPocQ=)
                          4: gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl (hash: CuIc/1LqqdsgQTaERsqHg5aI5IVzT+R6eV5dK+PyPX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:e1:4e:83:cc:10:e4:af:56:d8:bd:72:30:7d:c9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
        Validity
            Not Before: Mar 26 16:01:41 2026 GMT
            Not After : Mar 27 16:01:41 2026 GMT
        Subject: CN=463679e768c1a07b74a47b312e7886cf1594213c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e2:65:6e:e4:41:49:45:a6:02:bf:74:45:41:
                    96:be:4c:b9:0a:c4:6a:a7:1b:0f:8b:85:f8:b2:90:
                    da:3f:cd:98:23:25:cc:4b:c2:2f:95:4c:d2:2b:13:
                    0d:4f:c8:11:76:db:40:a2:24:7d:21:2a:6a:e0:c9:
                    dc:d8:d2:51:b7:76:61:5f:a5:fe:cc:b3:0b:0b:3c:
                    20:88:26:05:91:02:0c:4b:de:a0:ea:3b:f2:c5:9c:
                    93:01:30:21:5f:59:e6:50:ce:d9:ba:59:0f:79:49:
                    0c:22:cc:e0:b1:33:90:ea:c1:b1:bd:3f:2c:15:5f:
                    57:86:dc:2e:42:07:29:6f:23:37:12:a9:5d:a0:fd:
                    9c:e9:d9:88:71:47:9b:b4:b3:b3:d8:49:64:29:24:
                    82:58:7a:7c:82:f1:46:94:13:01:74:77:47:66:9f:
                    cf:e9:4e:7a:d1:11:75:8b:67:f2:94:8f:a4:a1:0e:
                    ee:f0:1b:56:76:b8:15:57:c1:b2:fc:57:a8:99:46:
                    74:59:f0:15:5d:0e:61:91:e9:f3:59:d6:97:fe:72:
                    57:77:db:79:57:4c:b9:db:35:be:60:bd:42:ff:4d:
                    7a:c2:7d:f9:ba:14:e5:d3:2c:ac:bd:75:7b:68:a1:
                    e5:ff:60:12:17:27:d6:7d:58:10:1b:9f:9c:60:ce:
                    7b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:36:79:E7:68:C1:A0:7B:74:A4:7B:31:2E:78:86:CF:15:94:21:3C
            X509v3 Authority Key Identifier:
                keyid:81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d9:74:69:91:83:50:3e:2b:3e:7d:c2:f3:74:e1:02:87:af:
         5f:0c:a2:97:4f:d0:a5:fd:81:e2:6b:cf:4c:2d:44:ed:90:1f:
         c2:94:4b:47:b0:4c:84:01:14:22:1d:55:5c:a2:2b:0d:6a:ad:
         bc:18:80:e9:92:74:52:07:96:3c:3a:13:75:ab:5f:ab:c8:ed:
         78:9a:1a:c6:f6:29:8d:2e:cf:7f:ac:e5:e4:43:4d:56:18:b3:
         c0:07:62:c5:18:59:a1:a5:8e:d2:36:9f:e4:d3:b3:ef:37:19:
         66:be:99:41:2d:c0:d5:f9:d4:83:84:82:d7:98:90:70:45:2c:
         07:7e:65:9f:97:b7:bd:fc:dd:44:8c:b0:35:36:26:b0:6b:d2:
         7e:5b:60:c8:de:71:86:f3:29:b2:3b:87:d2:5a:90:91:97:00:
         9b:16:60:47:db:2c:3c:a5:8c:e8:d8:de:90:1a:8b:85:25:34:
         d9:7f:e9:3d:18:8f:eb:ef:e1:a4:af:2e:88:27:d0:e1:ac:a8:
         ca:9e:15:9e:e1:1d:3a:f9:cc:11:07:b3:57:65:95:87:3d:80:
         7c:87:32:62:74:e1:75:66:24:25:9a:fd:aa:f8:de:97:7e:18:
         da:90:da:13:a7:13:b8:00:c8:02:8e:ee:04:12:3e:3c:e9:78:
         7d:c0:78:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:17:06 2026 by rpki-client