Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
File:                     GVD3RTAkOmSxG7IywDjVdOf8TSA.mft (raw, json)
Hash identifier:          dCnXMGu9u/KXzdfGAryseqvA0bO+lhQG0ULB73aW5+8=
Subject key identifier:   B1:FF:EF:27:EC:C3:FA:68:53:03:AF:B4:BE:B8:33:6B:BA:24:F4:61
Authority key identifier: 19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20
Certificate issuer:       /CN=1950f74530243a64b11bb232c038d574e7fc4d20
Certificate serial:       019D27726CE5A2F48E5BF3455AA528A34137
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
Manifest number:          0B6D
Signing time:             Thu 26 Mar 2026 00:01:43 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:43 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:43 +0000
Files and hashes:         1: GVD3RTAkOmSxG7IywDjVdOf8TSA.crl (hash: 1GMwS7cjRy1W3D8ahWR1jXBNumvrdJv4uupll71hPBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:6c:e5:a2:f4:8e:5b:f3:45:5a:a5:28:a3:41:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1950f74530243a64b11bb232c038d574e7fc4d20
        Validity
            Not Before: Mar 26 00:01:43 2026 GMT
            Not After : Mar 27 00:01:43 2026 GMT
        Subject: CN=b1ffef27ecc3fa685303afb4beb8336bba24f461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ff:ae:b3:fd:1d:f1:c6:a8:bf:dd:ae:ad:55:
                    a3:1f:64:90:9e:d8:0b:49:43:ef:fd:a0:fd:d9:e6:
                    d4:7e:b9:d8:32:6e:42:09:ed:7f:8f:3f:93:e2:b1:
                    04:53:03:7f:cd:55:09:85:4d:31:3b:61:c2:04:8a:
                    f0:c1:be:78:f5:92:1a:bc:22:88:fe:f5:5c:ae:24:
                    3f:68:5c:e6:ff:8d:90:85:bf:53:cb:6f:53:6c:fd:
                    6d:9d:19:75:a7:26:1c:25:e2:b0:9e:a7:74:53:65:
                    3b:e0:8b:6a:88:28:a4:a1:58:fc:84:e8:9f:bf:2e:
                    90:b1:81:90:8a:ff:5e:0c:f0:23:a2:d6:ee:c9:f9:
                    a6:13:af:ce:17:25:4c:34:c1:69:98:3b:46:0c:af:
                    7e:54:12:9a:92:a8:a8:bd:83:e1:c3:c5:f6:0c:2f:
                    19:ba:bb:7e:0a:ea:9c:10:d5:00:40:36:19:42:ee:
                    b2:10:57:d0:57:80:1d:0d:97:c9:38:ba:e7:79:ea:
                    a3:a1:02:34:c9:53:fe:09:44:f4:c1:23:62:c3:c2:
                    cf:a6:d4:94:4c:62:0a:fb:10:29:8a:a8:ea:86:37:
                    8f:5d:21:46:19:94:49:0f:84:57:a5:fd:ec:cb:78:
                    cf:db:3a:fe:b5:25:7a:e2:68:7d:15:9e:41:4c:0e:
                    1d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FF:EF:27:EC:C3:FA:68:53:03:AF:B4:BE:B8:33:6B:BA:24:F4:61
            X509v3 Authority Key Identifier:
                keyid:19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:df:19:57:43:28:90:8e:3f:2d:9c:f3:aa:19:ad:3e:71:ee:
         cc:5e:af:ba:26:40:8a:09:4e:9b:c2:d1:fa:05:9c:6d:74:82:
         f8:5d:a2:f4:cb:96:de:03:b7:be:c8:6a:eb:b7:87:88:c5:10:
         ff:68:69:38:92:70:78:30:bb:db:07:7a:2e:d0:0c:54:36:20:
         3d:ec:b6:53:fe:70:a8:83:07:6b:7a:90:91:8c:c8:33:e0:b5:
         c3:c3:5d:ea:81:a8:f0:8f:8c:e3:95:00:dc:c5:5d:63:b1:4c:
         6e:fb:f0:99:eb:74:2e:74:cf:ea:7a:5b:51:76:13:c1:46:28:
         5a:da:a4:b3:bc:fd:e8:8d:41:17:e3:89:c2:f9:4b:a5:b5:77:
         e3:a5:7d:e8:2c:f2:21:ef:15:b7:67:2c:5d:4a:3e:c8:1c:bc:
         ba:8b:51:8b:7e:20:24:0e:c0:86:b9:0b:d4:e1:ea:5f:1a:a1:
         e4:36:e0:70:c1:9b:70:2e:66:ca:e0:78:bd:5b:36:15:18:33:
         67:92:ac:6c:d7:39:f6:19:09:54:fe:bf:53:35:c5:2a:9d:38:
         93:58:3f:55:28:5f:6e:b9:67:ad:de:0d:1e:44:1b:c7:33:f1:
         be:47:37:ee:5a:38:e7:aa:46:a5:71:92:34:56:34:e8:d6:65:
         48:33:d4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:24:02 2026 by rpki-client