Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
File:                     GMpt4aSKToxbivHq6bXoC_z5LEU.mft (raw, json)
Hash identifier:          jIolYlj08Eto2m8gUj+awtex1vxttYsTTolrbZmm00A=
Subject key identifier:   2C:2B:8E:E9:77:62:A4:B9:BD:16:AB:C2:E1:C3:8F:0C:FD:1F:66:DC
Authority key identifier: 18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
Certificate issuer:       /CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Certificate serial:       019D265F025D1216CB3CC03220EF8271CB36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
Manifest number:          077A
Signing time:             Wed 25 Mar 2026 19:00:53 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:53 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:53 +0000
Files and hashes:         1: GMpt4aSKToxbivHq6bXoC_z5LEU.crl (hash: hfjBI4utL2WRwdEIZQ4MFI4/6y2QQxlYyLslJeytAEY=)
                          2: nZoO22NOlzzLttq20LfxDoJMdQg.roa (hash: s7xmgKi+9ZabhreTnecVdCUPnnVuLBbgQA+8atVMyO4=)
                          3: o0mi1ecW1qDQy0JOYUzQEq3UCno.roa (hash: hV2jBoTpFaaL+UTs/7eomqtU5upO4Ya9tPbfPL2XyYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:02:5d:12:16:cb:3c:c0:32:20:ef:82:71:cb:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
        Validity
            Not Before: Mar 25 19:00:53 2026 GMT
            Not After : Mar 26 19:00:53 2026 GMT
        Subject: CN=2c2b8ee97762a4b9bd16abc2e1c38f0cfd1f66dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0c:77:c6:0b:ee:10:a9:55:ae:d4:2f:2a:4a:
                    f9:20:75:90:0e:b4:6b:6e:54:68:9a:62:22:7a:16:
                    a7:18:fd:44:90:74:e9:68:8b:f9:40:6c:44:cf:b9:
                    2f:30:0f:38:16:93:e1:b3:18:cd:13:42:73:7b:3f:
                    7c:94:73:d0:8d:92:68:8f:17:99:27:c6:80:1e:a9:
                    3c:26:a1:69:23:ec:43:e9:d7:fa:f8:e8:cb:65:6f:
                    18:6e:45:c6:a8:c0:6c:3e:1c:48:8f:1a:06:2d:9a:
                    ea:09:41:3b:fa:74:d9:7b:32:e5:59:3e:34:08:a5:
                    e9:a5:5d:a7:a8:1f:c5:90:b8:bf:c5:1e:6d:1a:8d:
                    96:60:4f:e6:27:b9:4f:c3:99:94:27:0e:4b:fb:19:
                    20:e2:c8:2d:82:e1:80:b2:5e:1d:de:43:32:2f:e8:
                    9d:12:a9:3c:8f:1c:55:d5:f5:2a:13:25:66:59:cb:
                    11:42:ae:cd:ee:c1:ad:42:86:42:9a:51:bd:4c:01:
                    a8:b1:a5:9a:1c:6e:95:4f:62:c4:e3:25:47:39:1f:
                    98:f8:cf:d5:ef:61:0a:02:35:ec:0e:f3:40:1d:c8:
                    ed:0b:cc:ab:a5:d9:a8:29:fc:36:bb:87:48:3f:85:
                    38:cf:f4:6d:33:30:26:47:ed:ba:88:06:3a:54:55:
                    61:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2B:8E:E9:77:62:A4:B9:BD:16:AB:C2:E1:C3:8F:0C:FD:1F:66:DC
            X509v3 Authority Key Identifier:
                keyid:18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f4:6a:98:76:60:14:4a:0a:63:88:9b:6b:19:1e:7b:bd:cf:
         e0:a2:4d:ff:1b:42:d7:ae:65:84:a9:8c:e8:4c:fd:8e:28:2f:
         37:79:bd:67:c4:40:27:e1:9d:13:00:90:1c:ec:6c:e9:01:5a:
         b8:d8:c3:fc:28:01:d8:e5:16:c8:f3:9c:d7:ee:67:83:ce:43:
         a4:68:6e:36:06:a8:04:f6:f7:57:ee:87:1d:50:4e:f8:b1:a3:
         fc:e6:1d:3e:0e:ab:6f:0d:de:62:6b:47:03:41:cb:d0:1b:5d:
         3d:17:f0:3c:b7:3f:3b:96:62:a9:b7:c4:99:94:d5:a8:ec:6a:
         b7:0d:05:a8:ff:28:2d:67:2f:45:28:3c:15:f8:29:32:11:5e:
         5b:1f:7c:c5:7f:bf:0d:ac:85:68:af:16:e7:44:e4:9b:e8:f1:
         43:52:da:4a:19:a4:e3:b4:2a:d2:e9:14:97:a7:98:e8:57:80:
         44:c7:8d:c8:f3:58:0e:fb:b1:b6:f9:f3:92:10:e5:76:d2:e4:
         8e:a1:21:07:2a:4c:06:b7:28:93:22:58:5d:81:07:c2:3c:fd:
         97:ed:4c:76:03:8f:3a:00:db:76:cb:5e:4d:ca:be:72:be:04:
         72:fc:a4:ca:73:6a:77:c6:9c:a4:f4:44:7f:7d:d3:6c:13:74:
         6e:08:57:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:45 2026 by rpki-client