Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
File:                     GCJBwqTNGwi_W6VBLUkcScjrh40.mft (raw, json)
Hash identifier:          ts9q1RzD2CJN5TB8p7sk09OsxivAb/P37fu1vF5FaEk=
Subject key identifier:   FA:4D:6D:02:56:97:53:8F:4B:95:71:9E:6A:46:D6:63:77:B3:97:6E
Authority key identifier: 18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D
Certificate issuer:       /CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
Certificate serial:       019D273AE24BCB4BB0F7DADEFBC3E581C884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
Manifest number:          056C
Signing time:             Wed 25 Mar 2026 23:01:03 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:03 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:03 +0000
Files and hashes:         1: GCJBwqTNGwi_W6VBLUkcScjrh40.crl (hash: gwphNeg5ouHz8ycUhs1s3zbwmKunr6PXEMKMhZH4KsE=)
                          2: PeoNHXokHMDq2XG5umTEZp1JMkI.roa (hash: knYWEfrEJBE1/OQa/3XQPBybR/ExGW5sYDHbUzsYQWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:e2:4b:cb:4b:b0:f7:da:de:fb:c3:e5:81:c8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
        Validity
            Not Before: Mar 25 23:01:03 2026 GMT
            Not After : Mar 26 23:01:03 2026 GMT
        Subject: CN=fa4d6d025697538f4b95719e6a46d66377b3976e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e1:96:81:04:17:cd:a8:27:a7:a6:ad:b9:f1:
                    27:bc:52:33:ff:2e:96:2d:06:a1:8f:64:92:07:56:
                    f9:c6:ad:ac:81:b4:0c:fa:b7:65:de:33:25:5c:e2:
                    a8:6b:37:56:7d:ab:ce:a3:0a:92:9f:56:28:42:ef:
                    2f:19:d0:14:b0:a9:8f:b9:00:dd:54:dd:ed:5e:29:
                    93:43:d9:73:7b:da:79:f7:33:f0:32:b0:12:b4:e2:
                    e1:f5:df:9e:26:50:17:df:5e:7b:88:84:87:a0:32:
                    39:44:7f:44:ac:fa:14:1d:e2:e1:85:90:08:cf:52:
                    80:cb:a7:c7:6a:f6:ae:bf:51:47:ce:b4:6e:a5:69:
                    55:1d:39:21:43:18:d0:98:44:58:ad:61:a0:19:68:
                    ff:50:8f:bc:9d:f9:fb:56:20:62:2b:02:a2:d3:8b:
                    fe:7a:6d:36:31:43:a5:03:aa:6c:af:fd:bd:b0:31:
                    5d:5a:fc:bf:18:04:4e:78:48:98:0b:d8:78:94:95:
                    7f:ec:fd:14:c0:57:1a:f7:c9:62:8a:b5:6e:43:40:
                    b2:31:7b:61:cf:4f:70:35:1b:2b:da:fe:68:01:7f:
                    8f:f3:28:a1:62:e6:6d:40:8b:10:41:69:a4:66:d8:
                    7e:2f:07:97:30:dc:45:1c:c0:d1:24:86:48:08:8d:
                    4f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4D:6D:02:56:97:53:8F:4B:95:71:9E:6A:46:D6:63:77:B3:97:6E
            X509v3 Authority Key Identifier:
                keyid:18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:7b:33:01:0d:c0:61:76:27:f8:08:0e:b0:9c:5e:31:6b:f0:
         0b:00:46:cf:c1:f8:a1:73:46:34:25:f6:f4:0e:bd:90:9b:db:
         37:2f:29:67:ca:c7:dd:69:5e:49:88:13:60:f7:33:88:12:75:
         9f:1f:bd:23:ab:d1:b5:f9:22:9d:d1:e2:45:8b:1e:3d:81:26:
         7d:dd:ff:a7:e7:f2:d5:8f:ee:7c:8a:f4:4a:91:3e:40:ae:e3:
         b5:29:60:6c:85:d8:73:41:0b:d2:97:a1:ae:8c:5f:1b:82:75:
         be:b7:f2:8a:34:8f:97:c3:16:66:32:fe:34:d5:32:c1:c2:61:
         28:61:12:55:51:1f:cb:b4:07:b2:47:e1:66:8a:28:f2:a9:c2:
         33:6d:71:19:98:11:a1:b0:7f:a0:7c:79:4c:a8:d8:fa:11:56:
         1c:dd:32:b8:10:f0:f4:6b:f3:3c:b7:95:84:aa:86:55:ff:6f:
         d3:34:02:e1:cf:6f:b1:da:ad:3c:be:90:d3:9a:81:d4:af:00:
         91:1f:94:00:e7:04:c5:13:2b:11:ea:bd:59:0b:f6:17:29:0d:
         a8:bd:db:1c:30:d7:cd:7c:95:4e:63:87:2a:f6:ab:d4:f1:34:
         c9:2b:c2:8b:71:14:f5:55:c4:bc:9e:55:fa:07:00:ea:81:13:
         48:e2:dc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:20 2026 by rpki-client