Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
File:                     GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft (raw, json)
Hash identifier:          8B8WqljjbdJRiuMLDtN7Z1y6SXT6Ago18Xn1ZsxNzzQ=
Subject key identifier:   50:48:77:13:69:7B:96:91:F2:44:E8:9D:59:4C:26:9C:3D:E0:CC:85
Authority key identifier: 1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
Certificate issuer:       /CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Certificate serial:       019D28BB4EC37C22247B4E6C510F26EEE32A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 06:00:57 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:57 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:57 +0000
Files and hashes:         1: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl (hash: SE7GpAKleLV9VSY8Kx2VEfa7bbnAltZ5vAjJzJBUR6U=)
                          2: NYfYWYZMa_439o1QRYF0WdRM5MM.roa (hash: 8UO+Z6kVQhD/teXdacx0W8x4zMZ5SdEkPaLtrfrmHy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:4e:c3:7c:22:24:7b:4e:6c:51:0f:26:ee:e3:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
        Validity
            Not Before: Mar 26 06:00:57 2026 GMT
            Not After : Mar 27 06:00:57 2026 GMT
        Subject: CN=50487713697b9691f244e89d594c269c3de0cc85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:67:77:9b:be:1c:4a:f6:18:5f:9b:c1:fe:d2:
                    8f:40:93:b4:3b:8c:a6:02:cb:70:f7:08:55:fa:a6:
                    6d:7c:f3:93:6f:80:a9:13:7d:6e:81:40:4c:d1:e0:
                    e0:69:8d:3b:32:fe:82:a9:16:d6:b8:ea:21:a7:c9:
                    e3:99:60:15:29:2e:45:b6:84:60:27:6d:ea:11:82:
                    c6:08:d3:03:15:9a:5d:7d:4b:45:b3:18:7f:90:f6:
                    46:c8:a0:3e:08:69:60:86:1c:2c:f5:a6:fa:14:67:
                    d3:31:34:e2:ba:5a:d1:99:7a:76:55:a1:d8:58:b6:
                    d5:3b:53:70:f1:15:82:7d:c6:ce:28:f6:5f:9f:23:
                    18:e9:9e:c4:94:3b:30:fb:fa:6e:a3:30:3c:c9:64:
                    5e:d9:41:41:a0:b8:e1:47:43:54:3e:5d:0c:ce:59:
                    dd:52:df:2c:37:d5:b3:ac:04:15:e4:22:0d:8d:90:
                    07:e8:46:6f:38:30:f0:31:74:16:fd:4f:16:f0:84:
                    31:1e:46:8d:12:85:25:95:d4:68:16:16:c1:f9:65:
                    1d:f2:3d:5a:79:2b:ff:32:35:98:32:08:4e:4e:5b:
                    97:eb:ba:96:f5:4b:a3:62:a9:8e:b6:9a:a3:0f:32:
                    41:7f:14:76:0b:57:b1:9f:94:3a:3d:fd:a2:a3:62:
                    c6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:48:77:13:69:7B:96:91:F2:44:E8:9D:59:4C:26:9C:3D:E0:CC:85
            X509v3 Authority Key Identifier:
                keyid:1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:50:7e:87:19:7c:8a:9d:95:22:51:d2:4b:b0:62:1d:a2:33:
         2e:20:72:e1:92:3b:f8:49:51:ba:c6:e0:0e:c4:67:71:cc:74:
         36:5d:1e:a8:b8:2a:24:f9:f2:aa:7e:13:ae:74:29:72:3f:79:
         79:c9:0e:f9:01:29:fa:c0:cd:14:50:27:02:3b:55:f5:6f:d2:
         8b:e7:af:39:a0:b9:e8:57:00:df:0b:30:30:c7:f0:e2:aa:bb:
         60:60:4d:76:8c:cd:1d:0e:6e:c6:56:5c:21:96:70:76:4c:2e:
         f1:a7:4f:3d:e8:d5:6b:ac:f9:cb:31:05:48:ae:d5:87:13:45:
         3c:03:0d:35:ed:af:87:d9:eb:bb:42:2e:ae:f8:17:74:61:3a:
         52:5d:b5:40:8e:3a:9d:98:80:42:85:19:1c:8b:6f:5e:27:69:
         ef:9b:df:51:46:55:84:59:a9:47:ca:8e:3c:63:5e:aa:97:6e:
         2d:68:7e:39:9b:d2:50:ae:83:34:75:fa:81:75:54:7e:77:6a:
         f8:29:cd:ee:23:e4:8c:61:3d:0f:f2:f8:8b:22:a1:42:54:f4:
         14:c4:85:42:a5:aa:1a:d3:27:62:da:61:df:6f:d2:84:59:86:
         1a:f3:40:42:29:0e:c7:d2:5d:2f:af:6e:de:9b:04:ee:73:9a:
         e5:74:da:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou07DfCIke05sUQ8m7uMqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMzFlNzNlNmQzZmM3NDVmMTI3YTdlZDk5MGFhNDEyMTQ5
MDVlNjEwHhcNMjYwMzI2MDYwMDU3WhcNMjYwMzI3MDYwMDU3WjAzMTEwLwYDVQQD
Eyg1MDQ4NzcxMzY5N2I5NjkxZjI0NGU4OWQ1OTRjMjY5YzNkZTBjYzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGd3m74cSvYYX5vB/tKPQJO0O4ym
Astw9whV+qZtfPOTb4CpE31ugUBM0eDgaY07Mv6CqRbWuOohp8njmWAVKS5FtoRg
J23qEYLGCNMDFZpdfUtFsxh/kPZGyKA+CGlghhws9ab6FGfTMTTiulrRmXp2VaHY
WLbVO1Nw8RWCfcbOKPZfnyMY6Z7ElDsw+/puozA8yWRe2UFBoLjhR0NUPl0Mzlnd
Ut8sN9WzrAQV5CINjZAH6EZvODDwMXQW/U8W8IQxHkaNEoUlldRoFhbB+WUd8j1a
eSv/MjWYMghOTluX67qW9UujYqmOtpqjDzJBfxR2C1exn5Q6Pf2io2LGpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBIdxNpe5aR8kTonVlMJpw94MyFMB8GA1UdIwQY
MBaAFBsx5z5tP8dF8Sen7ZkKpBIUkF5hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3pIblBtMF94MFh4SjZmdG1RcWtFaFNRWG1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMWZkZDYtNzMwZS00YWYwLThhNTYt
NDYwMjczZjE2ZGRkLzEvR3pIblBtMF94MFh4SjZmdG1RcWtFaFNRWG1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hMWZkZDYtNzMwZS00YWYwLThhNTYtNDYwMjczZjE2ZGRk
LzEvR3pIblBtMF94MFh4SjZmdG1RcWtFaFNRWG1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuFB+hxl8
ip2VIlHSS7BiHaIzLiBy4ZI7+ElRusbgDsRnccx0Nl0eqLgqJPnyqn4TrnQpcj95
eckO+QEp+sDNFFAnAjtV9W/Si+evOaC56FcA3wswMMfw4qq7YGBNdozNHQ5uxlZc
IZZwdkwu8adPPejVa6z5yzEFSK7VhxNFPAMNNe2vh9nru0IurvgXdGE6Ul21QI46
nZiAQoUZHItvXidp75vfUUZVhFmpR8qOPGNeqpduLWh+OZvSUK6DNHX6gXVUfndq
+CnN7iPkjGE9D/L4iyKhQlT0FMSFQqWqGtMnYtph32/ShFmGGvNAQikOx9JdL69u
3psE7nOa5XTahQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:39:02 2026 by rpki-client