Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
File:                     GpLjfcjPRWNLLNvPPxAFShxhFpc.mft (raw, json)
Hash identifier:          L3FyRjk9FMhcSNbON2uNUovFqljcKPKcLMMGveB/tOI=
Subject key identifier:   AB:27:9E:68:65:B6:D7:73:1C:FB:4A:F5:6A:14:B0:DF:A1:1E:11:44
Authority key identifier: 1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97
Certificate issuer:       /CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
Certificate serial:       019D2772E0F662CF0E85B4DC93C32BD45E26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
Manifest number:          1888
Signing time:             Thu 26 Mar 2026 00:02:13 +0000
Manifest this update:     Thu 26 Mar 2026 00:02:13 +0000
Manifest next update:     Fri 27 Mar 2026 00:02:13 +0000
Files and hashes:         1: GpLjfcjPRWNLLNvPPxAFShxhFpc.crl (hash: 9NdiValetxp7Hu3FpbJXiu1lYZ/sN32Ah+6WB/k0tQI=)
                          2: hI-jnnS3K55j-eknFjBJaxLRTu0.roa (hash: 3Vu6bhRvnbfCA2LT3WLEQlNZ5FlCb+6L2WSCvsxWkC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:e0:f6:62:cf:0e:85:b4:dc:93:c3:2b:d4:5e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
        Validity
            Not Before: Mar 26 00:02:13 2026 GMT
            Not After : Mar 27 00:02:13 2026 GMT
        Subject: CN=ab279e6865b6d7731cfb4af56a14b0dfa11e1144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fe:04:7d:56:b4:49:5c:a1:9e:f3:5e:92:19:
                    c6:d1:17:3b:d4:3d:14:72:71:ef:cb:bd:7f:fb:01:
                    9d:a3:6b:ec:8b:3a:4f:3f:7d:cb:4e:e2:33:0a:d2:
                    33:40:5a:e8:94:84:84:43:25:25:fb:02:18:b1:6c:
                    96:48:d8:f4:55:07:7a:f6:0c:1f:b2:ba:23:79:d3:
                    15:2a:b2:8d:dd:94:37:45:76:ef:26:54:df:f3:fc:
                    f2:26:23:f6:4d:21:a6:45:ff:45:8d:84:b6:90:40:
                    29:e4:0f:34:6f:ec:2e:c0:f1:dd:17:6c:7e:07:ce:
                    b7:78:0b:56:e1:ad:57:88:da:9c:e6:f2:da:3c:12:
                    83:ee:0c:b0:de:51:38:a8:de:6b:d5:ce:0e:f2:ec:
                    89:70:e1:b3:fb:d7:37:4e:98:26:63:fc:7f:eb:2b:
                    12:2a:f3:37:6f:5d:26:af:ed:64:db:0f:32:29:05:
                    13:c7:56:96:71:82:cf:27:08:a5:f3:e2:f7:cf:98:
                    6c:3b:f4:98:39:e3:cb:32:9d:1e:f7:f8:80:31:24:
                    57:c8:1e:09:0d:64:2d:2c:71:e8:9a:e2:8b:a1:c4:
                    c8:1d:75:cf:c9:63:a2:ed:40:60:30:41:a9:cb:d8:
                    a2:07:9e:7e:64:37:9e:f1:12:69:59:ef:76:ee:db:
                    fe:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:27:9E:68:65:B6:D7:73:1C:FB:4A:F5:6A:14:B0:DF:A1:1E:11:44
            X509v3 Authority Key Identifier:
                keyid:1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:dd:23:d1:e3:53:84:fd:62:db:f6:e5:5b:30:98:46:13:bd:
         30:af:37:1e:fe:d3:f1:73:8f:f8:0c:82:ca:8f:08:3e:c0:53:
         b6:5c:75:ec:14:fe:60:be:83:14:0e:91:9b:ab:43:64:9b:00:
         6a:a1:39:01:7c:2e:45:4c:58:a6:fe:d3:4e:47:4c:6f:48:47:
         71:ac:8b:b3:ca:85:62:27:91:97:29:1d:48:d9:c8:9a:bd:c4:
         0f:9f:68:85:54:30:43:12:e6:1c:7c:62:7a:76:64:a1:5d:f6:
         50:9c:88:89:88:ff:96:13:73:d0:9f:b5:7d:24:30:83:bd:92:
         98:aa:b9:26:4c:60:3f:7b:84:ed:58:7b:77:38:64:d2:19:c6:
         2d:72:16:ac:08:01:de:0d:c8:b5:40:8b:67:0b:91:f6:6a:fb:
         86:52:26:77:74:67:b7:95:71:a5:a1:88:b2:4c:ed:a7:e5:28:
         ea:00:3e:8a:63:a7:d6:57:bb:d1:9d:b0:ea:5d:61:df:dc:a9:
         9d:c4:57:34:73:ad:64:e7:e5:a9:12:2c:4d:3b:f9:98:ca:9c:
         9e:36:b4:ef:cd:e4:e9:fe:14:4f:79:a0:22:13:65:f2:16:cd:
         5d:b8:59:a7:05:02:23:49:dd:d2:3a:c9:c6:1c:4c:fc:1a:25:
         f4:b5:d5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:45:11 2026 by rpki-client