Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.mft
File:                     GtoiXLfylBbnU0aV-_shdi_uk8g.mft (raw, json)
Hash identifier:          cbsmRMLUtsKU6h4YmgAqw9jUGgSnX/tFVGq4/nfs30w=
Subject key identifier:   1E:43:2A:40:EE:EA:86:38:96:27:10:DA:C0:AB:C3:8F:18:78:2A:04
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Certificate issuer:       /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial:       019D262816DC8B3050E24BECC1C95BD7E4CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.mft
Manifest number:          17AC
Signing time:             Wed 25 Mar 2026 18:00:54 +0000
Manifest this update:     Wed 25 Mar 2026 18:00:54 +0000
Manifest next update:     Thu 26 Mar 2026 18:00:54 +0000
Files and hashes:         1: GtoiXLfylBbnU0aV-_shdi_uk8g.crl (hash: V5kjgwTZLKeqbBO4WPTf8KDOQu7/HArdScNEerlyBJE=)
                          2: UnXuq7L8efKEbPexQG4ZSvo7Cnk.roa (hash: x6ewFPlmukvgw78bPzGQkfC4tU52Nz/FT5801JiC85Y=)
                          3: aX9FuO6ss9Gegrc9uvQQIgXpzMU.roa (hash: upbr6wLXGhZhWbnjnMUjBblm+qb1qEvsMrI1BJaKwH0=)
                          4: kDJ2PzoRjH6iJPNi025PKxEhi-s.roa (hash: yvo8fHjNZoJVnVdc67T8AdIPGU/AJSCIpuySCr331/4=)
                          5: mmLkYBd1X21On3qZC8GaxgJHar4.roa (hash: xvy2y0CYo6ueulY7paZBVfwSQbLTMKM/QH0bmGGMS/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:16:dc:8b:30:50:e2:4b:ec:c1:c9:5b:d7:e4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
        Validity
            Not Before: Mar 25 18:00:54 2026 GMT
            Not After : Mar 26 18:00:54 2026 GMT
        Subject: CN=1e432a40eeea8638962710dac0abc38f18782a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ca:9e:d9:c4:25:99:c2:92:57:2a:34:28:84:
                    cc:f4:1c:a1:cc:4e:80:c4:64:cd:3d:b0:35:50:ad:
                    50:c1:6a:3e:40:74:c2:4a:13:ed:f5:4d:15:d4:a3:
                    e2:75:df:0e:5f:7a:0c:80:a5:00:f8:f7:be:b5:5c:
                    b8:7c:46:99:51:34:a1:64:5e:fa:d6:55:be:32:52:
                    1c:03:a5:a6:a1:f8:ed:0f:a5:aa:04:c5:15:de:6e:
                    de:29:1f:72:53:8f:ef:f1:61:80:e7:02:e0:2c:85:
                    ef:87:f0:9a:01:75:33:0b:65:1b:0f:4e:57:59:5c:
                    bc:b1:ae:d9:91:3f:ae:1f:a6:17:bb:57:75:05:5b:
                    05:85:61:10:e1:98:67:df:d0:96:cf:bb:0c:f6:8e:
                    61:32:ec:b6:0a:f3:9a:fe:69:6a:12:37:7d:91:6b:
                    a9:1a:14:86:b2:03:a2:8b:6e:5d:08:db:90:90:5e:
                    70:aa:40:ce:de:91:77:a4:e5:da:f0:06:81:ed:32:
                    c6:fa:06:ed:8c:7a:a0:e4:ad:d7:fd:6a:05:8b:3a:
                    12:15:7d:49:61:8f:27:42:aa:59:99:d9:f5:37:27:
                    9c:b8:7d:1e:52:c5:cb:24:93:d5:4e:4f:5d:23:2a:
                    08:93:34:3d:be:38:bb:5f:ef:f0:01:19:83:37:1b:
                    f9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:43:2A:40:EE:EA:86:38:96:27:10:DA:C0:AB:C3:8F:18:78:2A:04
            X509v3 Authority Key Identifier:
                keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:91:65:47:08:89:0e:bc:42:c7:70:b1:8b:d4:22:0c:3e:8f:
         b9:e5:28:5a:61:a2:8d:53:cd:4d:28:66:6d:fa:a4:37:72:b1:
         3e:92:e0:c2:84:5d:92:bd:ba:37:bd:82:6f:a3:89:45:62:12:
         db:97:9b:f8:42:d0:fa:45:e6:59:5c:f3:59:d6:2e:d0:98:fd:
         fb:1d:eb:57:08:e7:d9:4b:1b:f3:3f:3e:cf:f2:e3:73:44:3d:
         9c:45:58:3f:ec:86:b5:4f:c7:85:3d:57:a5:18:6a:53:21:85:
         26:dd:c3:7c:43:d5:ba:33:51:cb:71:19:e8:35:e4:32:86:3b:
         d5:6e:4e:28:00:6e:73:c7:93:16:1f:99:eb:9e:cb:3c:f7:91:
         39:55:3c:6c:0b:0a:7a:9e:a4:f3:97:80:d0:41:98:08:fd:c5:
         c5:ff:6a:90:ad:23:b7:38:f6:e6:fa:b6:b7:eb:d8:0b:e8:c2:
         6e:69:5b:3b:fb:c4:1b:99:00:bd:a4:e3:20:2d:c1:08:43:35:
         75:9f:68:0f:d7:3a:97:76:1d:15:7f:bc:38:c7:ab:df:7c:9f:
         44:98:6d:e0:f3:63:3a:44:98:00:01:13:2a:44:21:ae:3f:ea:
         15:72:c4:c9:25:75:be:f1:38:e8:8e:0c:02:1e:63:06:60:dc:
         04:cf:d5:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKBbcizBQ4kvswclb1+TNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZGEyMjVjYjdmMjk0MTZlNzUzNDY5NWZiZmIyMTc2MmZl
ZTkzYzgwHhcNMjYwMzI1MTgwMDU0WhcNMjYwMzI2MTgwMDU0WjAzMTEwLwYDVQQD
EygxZTQzMmE0MGVlZWE4NjM4OTYyNzEwZGFjMGFiYzM4ZjE4NzgyYTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08qe2cQlmcKSVyo0KITM9ByhzE6A
xGTNPbA1UK1QwWo+QHTCShPt9U0V1KPidd8OX3oMgKUA+Pe+tVy4fEaZUTShZF76
1lW+MlIcA6WmofjtD6WqBMUV3m7eKR9yU4/v8WGA5wLgLIXvh/CaAXUzC2UbD05X
WVy8sa7ZkT+uH6YXu1d1BVsFhWEQ4Zhn39CWz7sM9o5hMuy2CvOa/mlqEjd9kWup
GhSGsgOii25dCNuQkF5wqkDO3pF3pOXa8AaB7TLG+gbtjHqg5K3X/WoFizoSFX1J
YY8nQqpZmdn1NyecuH0eUsXLJJPVTk9dIyoIkzQ9vji7X+/wARmDNxv5RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5DKkDu6oY4licQ2sCrw48YeCoEMB8GA1UdIwQY
MBaAFBraIly38pQW51NGlfv7IXYv7pPIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3RvaVhMZnlsQmJuVTBhVi1fc2hkaV91azhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lOWQ5Y2MtMjY2OC00MmZjLTgzMTUt
NzUyNWQ0ZDQwOGI1LzEvR3RvaVhMZnlsQmJuVTBhVi1fc2hkaV91azhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lOWQ5Y2MtMjY2OC00MmZjLTgzMTUtNzUyNWQ0ZDQwOGI1
LzEvR3RvaVhMZnlsQmJuVTBhVi1fc2hkaV91azhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJFlRwiJ
DrxCx3Cxi9QiDD6PueUoWmGijVPNTShmbfqkN3KxPpLgwoRdkr26N72Cb6OJRWIS
25eb+ELQ+kXmWVzzWdYu0Jj9+x3rVwjn2Usb8z8+z/Ljc0Q9nEVYP+yGtU/HhT1X
pRhqUyGFJt3DfEPVujNRy3EZ6DXkMoY71W5OKABuc8eTFh+Z657LPPeROVU8bAsK
ep6k85eA0EGYCP3Fxf9qkK0jtzj25vq2t+vYC+jCbmlbO/vEG5kAvaTjIC3BCEM1
dZ9oD9c6l3YdFX+8OMer33yfRJht4PNjOkSYAAETKkQhrj/qFXLEySV1vvE46I4M
Ah5jBmDcBM/V/Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:18 2026 by rpki-client