Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
File:                     GsvdANJ7iovvyGbK83jxkCdoR2k.mft (raw, json)
Hash identifier:          qkzxowc2xMh+AsMEEGOkS6kDRl+k8MuTqC52qlCWNx0=
Subject key identifier:   DE:DF:2D:BC:AD:60:62:94:EC:FD:19:12:86:D9:79:5B:5C:F5:69:9C
Authority key identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
Certificate issuer:       /CN=1acbdd00d27b8a8befc866caf378f19027684769
Certificate serial:       019D28BB908A14C20CBE1DB0A4485FCC7505
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
Manifest number:          0B97
Signing time:             Thu 26 Mar 2026 06:01:14 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:14 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:14 +0000
Files and hashes:         1: 1v1j_9V79CfDRyy5ITVwKULcKzs.roa (hash: IW+E0tn+3P5yQ6WEdmWbMLqIHQmOymBM/uiaqJuBrqM=)
                          2: 8aFsvbvvtoXgKKeiSZDIorn0lcs.roa (hash: wv6uTigREH5R3i/ivV6vqDKvGBKTQpySFX+WLF4afYM=)
                          3: GsvdANJ7iovvyGbK83jxkCdoR2k.crl (hash: +DjdVdLxBV5JwttnNaZ4Tde11de7x64jCoHPz+z27jU=)
                          4: hnLqnAEN_PSEnf5JXcTb3OnKqoo.roa (hash: lSYPnPlDdlQoA0R4XN+dhc2P4+6Eu5g/f7zEImc1gKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:90:8a:14:c2:0c:be:1d:b0:a4:48:5f:cc:75:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1acbdd00d27b8a8befc866caf378f19027684769
        Validity
            Not Before: Mar 26 06:01:14 2026 GMT
            Not After : Mar 27 06:01:14 2026 GMT
        Subject: CN=dedf2dbcad606294ecfd191286d9795b5cf5699c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:08:28:e6:ed:b0:b1:d6:6d:60:b4:e8:0c:52:
                    98:4f:f2:d3:34:72:94:e0:8c:3c:a1:d4:c1:53:ff:
                    c3:9b:dd:d8:79:a5:0a:9f:c2:aa:9b:c6:77:6d:7b:
                    e6:fe:db:34:3d:7a:0d:37:99:ae:88:9b:28:e1:4e:
                    93:ac:d1:8c:94:5c:f6:08:33:f9:99:26:d9:3c:16:
                    83:50:91:17:d8:42:72:01:1d:84:a1:65:76:b8:20:
                    82:18:6e:30:13:79:dd:6a:23:8c:39:66:68:45:2e:
                    10:a8:01:14:f4:c7:b6:9e:80:e2:ab:dd:5a:41:8d:
                    a2:cf:11:03:2a:ec:5e:a2:c4:b7:6b:86:be:18:61:
                    f3:de:40:a9:e3:cc:37:7f:6c:15:79:c2:6a:f2:cb:
                    69:e7:d8:47:21:1e:7f:04:d4:de:8a:ea:86:52:86:
                    79:eb:92:93:14:15:2f:f7:45:20:ba:e8:d8:43:1a:
                    10:ae:59:e5:d7:0e:fd:f5:cc:97:50:b0:02:f0:c3:
                    4d:e2:96:f0:0b:7e:6c:48:88:9e:17:ab:90:36:c9:
                    b5:82:82:a4:39:0a:71:51:e9:dd:1f:5d:56:c9:4c:
                    42:37:b6:a1:f6:a4:d8:c3:33:92:a4:c5:7e:a6:40:
                    61:19:a0:86:e6:a9:a5:33:fd:4a:fb:2d:ea:41:6f:
                    e8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DF:2D:BC:AD:60:62:94:EC:FD:19:12:86:D9:79:5B:5C:F5:69:9C
            X509v3 Authority Key Identifier:
                keyid:1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:2d:6c:58:a8:36:20:58:35:0a:c2:3c:1c:a6:d3:12:58:d8:
         e0:27:81:c9:fd:02:15:cd:2c:37:46:34:a6:b1:82:8b:44:0e:
         df:18:bb:be:cc:3d:3a:04:44:bc:29:84:27:e1:98:68:ff:bc:
         39:c4:64:00:5a:f4:80:24:82:26:cb:45:a1:3f:6e:d9:21:47:
         d1:fb:23:a3:9f:82:a2:82:f5:4f:ae:7b:09:22:79:41:79:23:
         62:65:fd:f3:c7:ef:b1:d9:d3:7c:23:bc:13:ed:8a:dc:5b:3b:
         d7:25:9b:86:25:79:ae:8d:d2:2b:c3:b6:73:b3:76:17:74:d6:
         1b:ca:03:aa:b1:5d:d4:8a:2c:6e:51:fa:a7:72:77:10:8a:db:
         aa:b2:57:75:b1:4c:6c:6e:49:cf:55:1f:4d:d9:65:8e:dd:b4:
         8a:91:d6:0a:0c:2d:e7:48:6d:a6:db:2d:a9:45:c0:6b:78:bf:
         c8:06:85:2e:ac:dc:16:0c:2c:f2:a3:40:8c:ac:05:f1:e7:4d:
         ff:a3:77:ab:7a:86:67:af:f2:fa:a8:bd:9d:ea:51:3e:fa:84:
         de:a9:6a:b9:49:07:c9:bd:2c:b1:4d:e2:87:f1:c9:c6:0e:0b:
         99:a7:77:10:3a:04:70:ea:e3:31:30:d1:3d:93:91:a3:8b:ac:
         a6:31:c6:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou5CKFMIMvh2wpEhfzHUFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2JkZDAwZDI3YjhhOGJlZmM4NjZjYWYzNzhmMTkwMjc2
ODQ3NjkwHhcNMjYwMzI2MDYwMTE0WhcNMjYwMzI3MDYwMTE0WjAzMTEwLwYDVQQD
EyhkZWRmMmRiY2FkNjA2Mjk0ZWNmZDE5MTI4NmQ5Nzk1YjVjZjU2OTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQgo5u2wsdZtYLToDFKYT/LTNHKU
4Iw8odTBU//Dm93YeaUKn8Kqm8Z3bXvm/ts0PXoNN5muiJso4U6TrNGMlFz2CDP5
mSbZPBaDUJEX2EJyAR2EoWV2uCCCGG4wE3ndaiOMOWZoRS4QqAEU9Me2noDiq91a
QY2izxEDKuxeosS3a4a+GGHz3kCp48w3f2wVecJq8stp59hHIR5/BNTeiuqGUoZ5
65KTFBUv90UguujYQxoQrlnl1w799cyXULAC8MNN4pbwC35sSIieF6uQNsm1goKk
OQpxUendH11WyUxCN7ah9qTYwzOSpMV+pkBhGaCG5qmlM/1K+y3qQW/oRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7fLbytYGKU7P0ZEobZeVtc9WmcMB8GA1UdIwQY
MBaAFBrL3QDSe4qL78hmyvN48ZAnaEdpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kYjQyMDUtZDU3Yy00Y2EyLTg4OTQt
OWY5NTM2YmIyYzM3LzEvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9kYjQyMDUtZDU3Yy00Y2EyLTg4OTQtOWY5NTM2YmIyYzM3
LzEvR3N2ZEFOSjdpb3Z2eUdiSzgzanhrQ2RvUjJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFC1sWKg2
IFg1CsI8HKbTEljY4CeByf0CFc0sN0Y0prGCi0QO3xi7vsw9OgREvCmEJ+GYaP+8
OcRkAFr0gCSCJstFoT9u2SFH0fsjo5+CooL1T657CSJ5QXkjYmX988fvsdnTfCO8
E+2K3Fs71yWbhiV5ro3SK8O2c7N2F3TWG8oDqrFd1IosblH6p3J3EIrbqrJXdbFM
bG5Jz1UfTdlljt20ipHWCgwt50htptstqUXAa3i/yAaFLqzcFgws8qNAjKwF8edN
/6N3q3qGZ6/y+qi9nepRPvqE3qlquUkHyb0ssU3ih/HJxg4Lmad3EDoEcOrjMTDR
PZORo4uspjHG8Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:15 2026 by rpki-client