Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
File:                     GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft (raw, json)
Hash identifier:          4LihKW1aXuzd1358mEcIaoLbgfz7iOPIKkbHuaCBlYI=
Subject key identifier:   EA:FB:26:90:89:4E:23:BF:BA:BA:B8:34:1B:E9:31:69:DC:F4:5F:76
Authority key identifier: 19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91
Certificate issuer:       /CN=194e32a82e98f22d939ff9984455813be2ba6a91
Certificate serial:       019D27DFC276DD0BF04EC691700B06FEE46B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
Manifest number:          03A5
Signing time:             Thu 26 Mar 2026 02:01:08 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:08 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:08 +0000
Files and hashes:         1: BZBAahTREA8Q_3coOvyfGf9sdjY.roa (hash: jde/2VQaoII8kUESbj5JRDjPMDFmOdYKULZBf+Xi1JA=)
                          2: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl (hash: 3TRypDoOiwfDhA+fjjeKRuyJbRtnRaoKTJHqZaRDfVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:c2:76:dd:0b:f0:4e:c6:91:70:0b:06:fe:e4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194e32a82e98f22d939ff9984455813be2ba6a91
        Validity
            Not Before: Mar 26 02:01:08 2026 GMT
            Not After : Mar 27 02:01:08 2026 GMT
        Subject: CN=eafb2690894e23bfbabab8341be93169dcf45f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:34:ca:01:af:86:92:0b:ad:2f:14:c5:f0:82:
                    ec:b4:2f:7f:b0:3a:3f:d0:f1:a1:1b:4e:cc:f1:2c:
                    63:ba:35:5f:b8:92:9d:f7:19:5d:f0:d0:9e:da:1c:
                    bc:c5:10:2e:62:15:e7:bf:97:41:25:d6:c7:52:aa:
                    1a:3f:f1:13:5d:67:9d:65:13:22:5f:f2:3a:1f:21:
                    a8:97:da:57:54:1d:b9:5f:4d:f0:99:b1:ff:28:18:
                    cf:49:bb:df:61:51:3f:ee:71:a2:56:1e:05:2c:9e:
                    a7:d2:61:5b:ac:86:0b:6c:68:28:1c:48:5c:23:d9:
                    38:0a:92:1e:71:95:f0:83:0b:f8:21:08:e6:ff:13:
                    14:e6:e1:3b:0f:7e:fc:80:47:d7:b0:2d:ee:f9:be:
                    ac:85:66:64:f2:34:8d:d9:16:6e:72:3c:89:45:9d:
                    ad:b9:75:26:fb:48:de:91:22:33:39:6e:71:06:df:
                    74:43:14:e5:0c:17:57:b1:bb:f3:2c:c6:73:9f:ef:
                    b0:ba:b8:c4:88:00:29:a4:41:cc:1b:3f:8c:69:c5:
                    1e:44:c1:f3:94:39:5f:63:5b:9d:ea:70:7b:05:29:
                    6c:41:ca:12:c0:40:02:f4:b7:e2:95:91:4a:44:e7:
                    33:00:9a:83:42:43:40:c2:0d:1b:7c:32:54:16:d0:
                    58:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FB:26:90:89:4E:23:BF:BA:BA:B8:34:1B:E9:31:69:DC:F4:5F:76
            X509v3 Authority Key Identifier:
                keyid:19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:31:f6:8c:9c:66:96:a1:73:62:e6:98:3f:04:fa:b8:ec:ae:
         66:06:34:6e:f6:fc:81:4b:b6:df:df:17:93:19:cc:7f:bd:29:
         c9:1b:15:83:9a:2f:af:19:20:62:ad:18:0e:a2:f2:ce:de:e0:
         46:06:36:87:8f:56:fc:42:98:b0:e6:ba:06:a3:9e:3a:5b:88:
         27:9d:b6:31:b9:72:7a:6c:c3:a6:9d:4f:25:cb:d3:ba:8d:83:
         2f:9e:67:f1:15:23:10:02:43:3a:5a:62:ae:e7:da:47:a7:ab:
         ec:92:44:b7:00:3f:d5:c2:9c:de:b8:50:1a:ad:77:36:f5:83:
         42:17:74:cd:24:c7:ce:33:b4:9c:6a:b1:b1:7a:14:70:21:e1:
         e6:57:6a:62:9e:fe:24:b0:f9:47:b8:29:e6:a2:bc:81:69:43:
         4f:de:8b:b9:6b:fd:53:12:0b:c0:c1:92:2a:d8:e7:a7:73:c4:
         18:ed:73:a5:f8:98:64:6a:6f:22:51:58:b0:58:ac:f2:f9:5d:
         c1:de:cb:a0:c6:da:02:54:b2:cd:63:27:34:ac:99:7b:28:3d:
         b8:a2:0f:53:26:bd:4e:32:33:55:15:a5:39:af:c3:2c:1d:71:
         17:43:d2:f1:52:d4:9a:bf:f1:a1:90:d8:ba:ca:f4:e5:1d:7a:
         fd:0e:17:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:02:51 2026 by rpki-client