Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
File:                     gHcJ57DvuhJwJcg-XTGUxxukKMM.mft (raw, json)
Hash identifier:          81NwIdNAQ6JGs/hcFQHwqwsb56FyC1Pl03h9pmZFhPk=
Subject key identifier:   DB:A0:87:BF:BA:DB:1F:34:1F:8F:88:CF:06:78:DB:57:FF:5A:D4:A9
Authority key identifier: 80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3
Certificate issuer:       /CN=807709e7b0efba127025c83e5d3194c71ba428c3
Certificate serial:       019D27726A525D13F7B68884D97CCB601C78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
Manifest number:          188E
Signing time:             Thu 26 Mar 2026 00:01:42 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:42 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:42 +0000
Files and hashes:         1: 17V0jzStQoCb_AQ6tvGaBLavGoM.roa (hash: xin2ArbEF/v8y8IFPHvAh0sLnYeJkUxdnoEAhdH3Knc=)
                          2: P3hxeobOBa_A0xJ0xlGfKnSdNVU.roa (hash: mHchc2zREYZlnOuz8p+co3qUvhS0H4UpE0PWUACDroc=)
                          3: fn22VffPk13JEZ43P7QzWAHfKUI.roa (hash: jLIrzazW1c/8A69YDLVF5OeAhGmqg599WqHWOZ8LrQc=)
                          4: gHcJ57DvuhJwJcg-XTGUxxukKMM.crl (hash: jU2CewKfYWzmcDcj9tijiN6ZJvhLNaT32hX9KH1hYfc=)
                          5: lvjXs-MIPCkpvks5PHkIN5Ickrg.roa (hash: rbC/bc1gnAJSprju+NYQ5fdLrBRf1LuhW2461H5788Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:6a:52:5d:13:f7:b6:88:84:d9:7c:cb:60:1c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=807709e7b0efba127025c83e5d3194c71ba428c3
        Validity
            Not Before: Mar 26 00:01:42 2026 GMT
            Not After : Mar 27 00:01:42 2026 GMT
        Subject: CN=dba087bfbadb1f341f8f88cf0678db57ff5ad4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:91:32:76:f7:7d:39:7d:d6:af:0e:3b:2c:ca:
                    6f:ee:dc:14:c2:91:08:f7:0b:41:a0:25:93:8f:de:
                    42:00:99:ba:b9:7e:e2:7a:60:2a:87:48:05:57:ad:
                    cc:4d:1c:8a:86:0f:e1:98:e2:a0:f9:fb:3f:3b:3d:
                    fd:29:07:9e:e6:0f:b5:41:b5:95:e6:db:f6:7a:f1:
                    9e:fc:7d:70:3e:af:fe:32:2d:40:a1:a3:2d:d2:da:
                    11:50:b9:eb:d0:a6:1d:f1:b5:9c:bd:3a:74:7f:6f:
                    ed:ce:18:b5:56:d9:cd:1d:ae:4b:9e:96:ba:cc:ef:
                    15:d5:5e:a3:8c:af:94:0e:90:36:da:64:db:05:fb:
                    65:94:6a:f1:36:95:3c:e6:54:90:ad:88:4c:ad:e4:
                    a2:5c:a3:bb:b0:2a:45:7d:99:da:2d:8f:47:c9:51:
                    36:67:b1:91:48:98:57:fe:d6:a7:f6:4e:60:fd:dd:
                    a7:4f:14:8d:c6:e5:4f:cf:8c:c6:16:19:4e:d8:f9:
                    1b:2f:de:63:2e:9b:d6:51:f9:ed:87:c6:a1:ce:51:
                    38:7f:00:cb:eb:bf:0c:a3:ba:83:75:75:2b:e1:fd:
                    c5:a5:ac:10:5a:8f:b6:2e:b4:2f:dc:8c:45:fb:2d:
                    a3:9b:1b:d3:b6:dc:85:c5:39:67:f1:4c:a5:ec:78:
                    fb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A0:87:BF:BA:DB:1F:34:1F:8F:88:CF:06:78:DB:57:FF:5A:D4:A9
            X509v3 Authority Key Identifier:
                keyid:80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:35:22:ef:20:4c:93:64:af:89:d2:3e:72:78:97:c8:64:89:
         32:d7:75:c9:e3:1b:41:27:1c:e1:96:74:0f:71:10:85:5b:10:
         19:95:d0:19:a4:3e:ce:17:b1:b8:c3:39:33:85:f6:03:c3:4d:
         e4:5f:6d:70:e1:6d:ba:0d:70:a1:5b:03:39:23:4b:59:26:88:
         8c:6c:03:c0:d1:a8:30:d2:0c:db:97:43:7a:e9:da:84:3f:5f:
         bd:40:3e:f3:a0:be:c6:c6:ac:cf:d5:37:93:e9:de:ee:41:d9:
         45:42:ff:fd:63:cd:99:6a:16:31:6d:b7:4e:e6:cb:f5:1a:5d:
         f4:a4:2b:4c:af:81:ba:6b:64:a1:9c:d6:da:b7:7a:2e:82:7f:
         6c:fd:19:82:b4:ca:da:2f:a8:d9:0a:34:57:88:e7:8f:a9:46:
         b4:ca:02:6d:82:fc:23:5f:67:33:00:93:8f:83:b2:91:59:d0:
         54:a2:e1:84:18:ae:34:b0:39:2c:6e:25:bf:75:b6:78:3c:79:
         95:d9:5f:49:a8:fb:ce:86:ee:5a:4f:c8:ed:d0:fa:00:aa:18:
         75:8b:a1:09:ec:f1:33:d9:ca:19:4d:6b:a1:20:cc:79:1a:b1:
         d4:2a:69:b4:cf:b1:54:9f:5d:0d:9a:3d:df:a5:97:d6:59:84:
         01:4a:08:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:07 2026 by rpki-client