Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
File:                     gV_CISVyYlbWo189oo91E90xwf4.mft (raw, json)
Hash identifier:          Sce9Yj8oUf3CmRk846//DjWPnZTHsrwhxh5SkR2URUY=
Subject key identifier:   37:70:E6:4A:47:D0:1C:01:06:30:0A:38:D8:45:54:4D:34:EF:52:EC
Authority key identifier: 81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE
Certificate issuer:       /CN=815fc22125726256d6a35f3da28f7513dd31c1fe
Certificate serial:       019D273AD7194BF7E67B421B711395275A17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
Manifest number:          1817
Signing time:             Wed 25 Mar 2026 23:01:00 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:00 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:00 +0000
Files and hashes:         1: gV_CISVyYlbWo189oo91E90xwf4.crl (hash: li22feqdZQoC02tO/cafIX5/ZKTv4HNAwNy+SghRB9g=)
                          2: lYK_65AKlFPw1-t6tjg4pQYtXHY.roa (hash: VCWprxMwmjsHW4IsRUv/igV1kqqp3MMJUQXFePAz+0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:d7:19:4b:f7:e6:7b:42:1b:71:13:95:27:5a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815fc22125726256d6a35f3da28f7513dd31c1fe
        Validity
            Not Before: Mar 25 23:01:00 2026 GMT
            Not After : Mar 26 23:01:00 2026 GMT
        Subject: CN=3770e64a47d01c0106300a38d845544d34ef52ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ce:77:03:31:f5:bb:88:6a:23:68:e6:1c:44:
                    4b:5e:d8:6d:ef:1f:04:f9:33:72:d2:37:90:e9:09:
                    e8:2a:75:e6:f1:2a:af:e9:49:5d:1a:75:97:0d:00:
                    64:24:13:38:40:94:6e:00:e4:46:9d:2a:82:30:0b:
                    33:f8:93:af:3c:49:70:04:c9:41:1b:7f:25:f4:d8:
                    66:6a:bc:58:9f:e1:54:9e:2f:8e:24:ee:da:9f:35:
                    b1:55:cc:6c:1a:42:a2:58:56:fb:31:48:d9:0a:19:
                    8e:29:9b:36:71:56:cc:e3:77:98:fa:35:b6:14:32:
                    c2:74:96:6d:68:6a:e8:31:1b:19:9f:ce:eb:eb:b3:
                    21:f5:bb:55:74:28:58:63:6a:a4:a2:37:64:6e:c9:
                    64:d3:34:b6:13:ed:32:77:41:f4:c2:f8:11:20:8f:
                    9a:77:48:e4:0a:32:93:a6:33:10:2e:ea:54:f8:44:
                    e3:f7:b0:5d:22:6c:a8:99:90:d8:83:ff:f7:da:c1:
                    44:17:5a:8d:84:a2:91:43:9f:0f:56:9a:8a:8a:36:
                    e9:2d:bf:7b:c5:67:5e:34:b6:44:ab:fb:3e:56:f3:
                    3f:06:96:b4:bf:0e:0d:54:c7:1a:cd:11:eb:05:26:
                    72:ce:d8:91:27:cc:01:d9:e1:a5:cf:5b:0b:92:7f:
                    43:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:70:E6:4A:47:D0:1C:01:06:30:0A:38:D8:45:54:4D:34:EF:52:EC
            X509v3 Authority Key Identifier:
                keyid:81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c0:5b:3a:9b:59:f9:c8:ff:65:9f:f8:11:49:12:fb:4e:e2:
         97:ce:0f:f9:88:ec:d7:96:fc:a8:d1:bd:ba:e0:38:ab:79:c8:
         5f:b3:6d:92:39:05:a9:fd:41:77:0b:d4:13:16:2a:8a:72:e8:
         75:1e:8d:93:a8:4f:87:df:46:75:8c:40:05:d6:ba:ec:2a:da:
         8b:b8:11:1d:fa:f4:5a:29:7c:b8:d7:8e:e6:2f:fd:de:0c:14:
         67:1d:be:ae:7e:19:b3:15:15:b6:60:4b:ae:e0:46:31:61:63:
         0b:a6:f2:9a:db:50:cf:82:56:9e:ab:2c:df:de:a7:fb:b7:57:
         44:db:20:7a:f4:51:c0:40:59:1e:47:f7:90:93:b5:26:14:55:
         3d:38:a2:d9:b0:21:bd:c1:52:8c:8f:f8:44:db:b2:49:f4:c5:
         3b:23:b2:2a:76:0a:66:77:2c:61:03:4d:31:3b:a9:a4:f1:3c:
         22:02:d6:a2:f3:19:2f:0d:43:7d:a0:a3:ed:e5:f2:11:a8:34:
         f8:47:6d:f3:9e:99:25:87:be:d3:24:50:da:48:0a:3d:3b:24:
         a9:28:e4:ca:81:35:b2:73:bf:71:82:e7:39:86:a3:7a:e5:de:
         cc:1c:8c:1f:e3:42:5e:a5:75:1c:36:ef:fd:04:18:ea:8b:2f:
         36:3e:42:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOtcZS/fme0IbcROVJ1oXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNWZjMjIxMjU3MjYyNTZkNmEzNWYzZGEyOGY3NTEzZGQz
MWMxZmUwHhcNMjYwMzI1MjMwMTAwWhcNMjYwMzI2MjMwMTAwWjAzMTEwLwYDVQQD
EygzNzcwZTY0YTQ3ZDAxYzAxMDYzMDBhMzhkODQ1NTQ0ZDM0ZWY1MmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw853AzH1u4hqI2jmHERLXtht7x8E
+TNy0jeQ6QnoKnXm8Sqv6UldGnWXDQBkJBM4QJRuAORGnSqCMAsz+JOvPElwBMlB
G38l9NhmarxYn+FUni+OJO7anzWxVcxsGkKiWFb7MUjZChmOKZs2cVbM43eY+jW2
FDLCdJZtaGroMRsZn87r67Mh9btVdChYY2qkojdkbslk0zS2E+0yd0H0wvgRII+a
d0jkCjKTpjMQLupU+ETj97BdImyomZDYg//32sFEF1qNhKKRQ58PVpqKijbpLb97
xWdeNLZEq/s+VvM/Bpa0vw4NVMcazRHrBSZyztiRJ8wB2eGlz1sLkn9DBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdw5kpH0BwBBjAKONhFVE0071LsMB8GA1UdIwQY
MBaAFIFfwiElcmJW1qNfPaKPdRPdMcH+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1ZfQ0lTVnlZbGJXbzE4OW9vOTFFOTB4d2Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9iM2M4YTYtZTMyZS00NzAwLWI1ZWQt
NmE5OTRlNWVjNDcyLzEvZ1ZfQ0lTVnlZbGJXbzE4OW9vOTFFOTB4d2Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9iM2M4YTYtZTMyZS00NzAwLWI1ZWQtNmE5OTRlNWVjNDcy
LzEvZ1ZfQ0lTVnlZbGJXbzE4OW9vOTFFOTB4d2Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsBbOptZ
+cj/ZZ/4EUkS+07il84P+Yjs15b8qNG9uuA4q3nIX7NtkjkFqf1BdwvUExYqinLo
dR6Nk6hPh99GdYxABda67Crai7gRHfr0Wil8uNeO5i/93gwUZx2+rn4ZsxUVtmBL
ruBGMWFjC6bymttQz4JWnqss396n+7dXRNsgevRRwEBZHkf3kJO1JhRVPTii2bAh
vcFSjI/4RNuySfTFOyOyKnYKZncsYQNNMTuppPE8IgLWovMZLw1DfaCj7eXyEag0
+Edt856ZJYe+0yRQ2kgKPTskqSjkyoE1snO/cYLnOYajeuXezByMH+NCXqV1HDbv
/QQY6osvNj5CGA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:38 2026 by rpki-client