Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
File:                     GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft (raw, json)
Hash identifier:          OY4AqpJ8j8Mb/dL2/fHZ6F9GvIWsMS1SkMYtt3en/tM=
Subject key identifier:   48:A9:E7:1F:23:A3:2F:60:D5:4B:5C:4B:91:28:92:93:F3:C4:0D:12
Authority key identifier: 19:E5:79:FD:74:60:9D:26:8C:CB:CF:B8:2F:53:A5:A4:D0:61:35:B0
Certificate issuer:       /CN=19e579fd74609d268ccbcfb82f53a5a4d06135b0
Certificate serial:       019D27DFC55BA21D4594DFF4CF02AC410372
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
Manifest number:          064D
Signing time:             Thu 26 Mar 2026 02:01:09 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:09 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:09 +0000
Files and hashes:         1: GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl (hash: jOpV2sKJ5/AG1I23v/A79IjOuLdkMuP4asB2zWJiEWU=)
                          2: RNg5Iw6hK9lFknD64uFpzzZFifw.roa (hash: MPWSSdeEZMH3BcEWDJHSPzUc1H1Qu6OWSelB4NXhiuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:c5:5b:a2:1d:45:94:df:f4:cf:02:ac:41:03:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19e579fd74609d268ccbcfb82f53a5a4d06135b0
        Validity
            Not Before: Mar 26 02:01:09 2026 GMT
            Not After : Mar 27 02:01:09 2026 GMT
        Subject: CN=48a9e71f23a32f60d54b5c4b91289293f3c40d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:37:bd:2c:e7:a3:2a:8b:e5:e3:6a:df:8c:5d:
                    8b:61:54:05:ea:bd:6d:fa:19:b5:1e:9a:0a:28:e3:
                    07:27:78:e1:c3:97:82:c3:7e:88:27:50:ad:80:99:
                    dc:06:3c:fa:be:23:4f:4b:b1:29:16:80:1c:aa:05:
                    ea:ca:26:6a:cf:12:68:28:29:14:6f:5f:d9:ca:da:
                    33:d3:cc:7e:0e:7c:3a:cc:fb:af:4a:44:5e:b3:3d:
                    d4:58:99:f2:e1:ae:b0:b5:da:8d:a9:6d:a4:65:99:
                    87:7d:52:3e:4c:0f:83:27:49:25:4f:e1:0d:47:be:
                    f4:cf:64:7a:40:39:54:0c:fc:e7:f6:00:b3:80:06:
                    2a:5d:e7:bc:14:7c:bc:73:04:e6:11:2a:1c:b5:9e:
                    cb:1b:06:ab:28:d0:7b:42:61:f8:ca:7e:a3:d3:4d:
                    ab:40:25:e8:d9:d7:9f:ad:ad:3a:c7:88:5d:e7:4e:
                    8e:bd:4b:60:60:b0:fa:7b:6b:79:4f:06:64:aa:4a:
                    8b:66:69:51:ba:b6:55:06:97:12:fc:bf:16:d1:16:
                    de:1f:00:a3:fb:4c:34:7b:84:d5:fa:ca:82:48:81:
                    a2:4c:88:d6:d5:74:94:cd:72:df:60:72:6a:cf:21:
                    90:fb:28:28:5d:a1:df:2b:3d:c2:47:df:ac:8b:2f:
                    28:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A9:E7:1F:23:A3:2F:60:D5:4B:5C:4B:91:28:92:93:F3:C4:0D:12
            X509v3 Authority Key Identifier:
                keyid:19:E5:79:FD:74:60:9D:26:8C:CB:CF:B8:2F:53:A5:A4:D0:61:35:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeV5_XRgnSaMy8-4L1OlpNBhNbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/4dc4de-8e8d-47fb-9d5c-74845414e071/1/GeV5_XRgnSaMy8-4L1OlpNBhNbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d7:58:1a:54:3e:1f:40:7b:20:ee:ef:d9:57:5a:54:d1:2f:
         b7:50:27:d6:f0:6f:bf:3b:59:0a:da:f0:a8:c6:81:fe:a3:9a:
         fc:09:fc:97:2c:4a:a7:63:64:05:b1:ce:cb:dc:11:c0:3f:af:
         d4:0e:c5:c1:0f:8b:5e:ee:e9:75:76:37:ca:35:3b:4d:7b:fa:
         0a:9e:80:01:f1:00:a0:05:4a:6b:d1:c7:b3:18:a4:d8:05:c0:
         0c:e1:53:30:bb:4e:4a:21:cb:13:7e:d5:60:07:68:2f:1d:f4:
         ed:e6:8c:2a:cb:f3:45:1b:d6:eb:4b:43:60:94:d2:58:0e:ee:
         c4:6e:13:a5:1a:9c:81:f5:09:ab:3d:59:3e:10:1a:e0:53:79:
         52:0a:85:6b:85:38:60:21:c4:63:fb:ab:a3:27:ab:09:15:37:
         ed:05:87:fe:b4:7e:77:04:d3:d3:69:68:0e:2b:f1:c6:e0:66:
         ef:95:2e:b6:e1:2e:ec:1c:52:17:5c:42:46:a5:45:78:97:c5:
         19:36:1f:6f:94:59:37:b9:71:76:fd:ba:19:52:99:8c:22:f3:
         51:fb:dc:f0:1b:24:77:cd:e5:e2:2f:0a:86:c4:5a:b6:ca:50:
         69:bf:7a:03:67:7a:fc:36:db:f4:57:38:e8:ac:7e:b9:6c:b2:
         6c:9c:88:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:59 2026 by rpki-client