Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
File:                     gcGu10qtBrG4XFumd5wWH0pSs8Q.mft (raw, json)
Hash identifier:          m40EIFVMJHdgLVtJ8iUKNFR6xlxUVEwW1thEb1QF5yQ=
Subject key identifier:   6B:24:FA:C5:FF:9C:9E:4F:18:B4:3B:14:03:64:EE:30:A0:3C:41:4A
Authority key identifier: 81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4
Certificate issuer:       /CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
Certificate serial:       019D273AA75918218574F341E94636D741C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 23:00:48 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:48 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:48 +0000
Files and hashes:         1: gcGu10qtBrG4XFumd5wWH0pSs8Q.crl (hash: 6IuuHx0ykWP61qx/1kU4VMb/d+hw8akOgVBMXIVbSzw=)
                          2: pA1ePqI7SD5ojrPp_XCatoiq2zo.roa (hash: CAWXsP1JZ/KW0NUUE6ss0n5HsqgH1Gk+g+22Bws1Rqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:a7:59:18:21:85:74:f3:41:e9:46:36:d7:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
        Validity
            Not Before: Mar 25 23:00:48 2026 GMT
            Not After : Mar 26 23:00:48 2026 GMT
        Subject: CN=6b24fac5ff9c9e4f18b43b140364ee30a03c414a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c1:41:7a:1b:2e:4e:41:40:11:80:68:6e:d3:
                    87:04:df:8d:4c:56:3d:0e:40:f2:e9:a9:70:0b:c4:
                    fa:98:22:f6:21:67:5a:33:58:f8:e4:d5:0f:9b:2d:
                    22:78:de:22:f3:69:6a:cf:7d:d0:18:09:cc:7a:87:
                    a4:17:34:4a:1f:ae:03:8a:5e:b7:91:fc:cf:0b:c9:
                    87:57:54:9e:0f:20:63:f9:b5:a4:d4:d7:73:68:bc:
                    f0:0f:b8:44:3b:dc:e1:30:a2:be:85:7e:ad:cc:a4:
                    3d:99:9a:58:9e:69:2c:77:d6:99:c8:8a:1f:4b:ca:
                    4e:7c:cc:17:2c:7a:a2:a0:e7:d2:bd:8e:88:9a:a7:
                    69:ee:ce:51:b7:b9:44:fc:72:24:a7:41:ab:28:6a:
                    38:71:94:e0:03:5e:4c:62:8a:6a:80:62:83:22:6a:
                    ed:2d:f9:dc:57:a5:f4:0f:a8:7a:53:44:0f:66:aa:
                    62:cc:3e:17:f0:7a:c5:9d:79:64:cf:ea:d4:31:11:
                    c7:db:79:f0:e4:c3:a4:ac:55:1b:d5:8b:d6:6a:ec:
                    b5:ec:0a:20:fa:d2:25:77:3d:ba:7f:47:9a:a8:2c:
                    c8:7f:5d:1b:db:2e:ee:bf:60:c7:c0:87:78:bb:71:
                    67:e5:a4:9b:ba:23:cb:c8:10:b6:19:c5:07:c9:9b:
                    f5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:24:FA:C5:FF:9C:9E:4F:18:B4:3B:14:03:64:EE:30:A0:3C:41:4A
            X509v3 Authority Key Identifier:
                keyid:81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:21:94:22:71:32:ba:32:c6:48:21:c5:45:f1:c9:6d:4b:16:
         77:bc:da:ca:e8:8c:13:c1:11:b8:84:a6:74:1b:88:ed:3f:07:
         da:0d:ec:ce:83:4b:31:f0:55:75:47:0b:48:5d:a8:c6:42:7f:
         dc:70:71:b9:12:71:c5:f0:72:ee:3f:0c:67:e5:47:b7:3a:61:
         9e:be:12:ee:f0:c1:9c:d2:b9:14:e1:cd:8a:84:6d:d7:41:0e:
         89:f9:56:e7:c4:ae:55:3a:9c:c9:4f:c2:ca:c3:54:48:ef:44:
         0d:00:ef:b9:81:31:1f:13:3e:80:8b:10:dd:c2:4b:d3:3b:26:
         80:70:a0:a6:37:fc:93:e6:41:9b:e3:6b:e4:c3:d7:7b:25:e4:
         8a:bd:a7:14:09:3b:73:99:5c:e5:32:1c:6f:18:2a:6a:86:0d:
         ba:c6:16:53:b6:4b:c6:61:74:40:79:bd:ff:47:7b:9c:10:05:
         bc:af:4e:d3:49:dd:1e:6e:b2:8e:4b:51:07:08:f3:42:57:cc:
         e8:bf:d6:39:83:74:5d:0e:29:1d:cc:54:37:54:93:be:b5:eb:
         82:8f:40:4b:68:43:21:f2:5d:73:e0:e6:e1:a6:cb:af:da:68:
         b4:4a:4b:73:49:3e:a3:05:1e:a1:86:9a:49:59:4c:a0:0a:97:
         bd:de:cc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:40 2026 by rpki-client