Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.mft
File:                     gqQWGsq_ZtQl7YeMXalqfVyz_-Q.mft (raw, json)
Hash identifier:          N21ogyuA8weXMGHivIKP3MFHqoRLDh3pZJrkVwluKZs=
Subject key identifier:   BB:30:EF:79:A6:57:62:33:C6:E5:30:99:A4:60:FD:1D:26:BB:52:77
Authority key identifier: 82:A4:16:1A:CA:BF:66:D4:25:ED:87:8C:5D:A9:6A:7D:5C:B3:FF:E4
Certificate issuer:       /CN=82a4161acabf66d425ed878c5da96a7d5cb3ffe4
Certificate serial:       019D270460900C6D70D7450390A7A820247D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.mft
Manifest number:          1885
Signing time:             Wed 25 Mar 2026 22:01:31 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:31 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:31 +0000
Files and hashes:         1: g9I_yWxBlJxb8jdFSzLNO8T9hlc.roa (hash: TRyTQ0llIsE/ca7TvYvmRm2iVcdywoCtmcZZaLoUu1E=)
                          2: gqQWGsq_ZtQl7YeMXalqfVyz_-Q.crl (hash: GVorCedfa3Gnms2/vfGnmQmaA6KSFxSgibe031QkvSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:60:90:0c:6d:70:d7:45:03:90:a7:a8:20:24:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a4161acabf66d425ed878c5da96a7d5cb3ffe4
        Validity
            Not Before: Mar 25 22:01:31 2026 GMT
            Not After : Mar 26 22:01:31 2026 GMT
        Subject: CN=bb30ef79a6576233c6e53099a460fd1d26bb5277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8c:d8:21:b7:a8:8b:c0:f4:0a:88:9c:98:b9:
                    ea:17:89:a3:01:d9:30:4b:88:ae:1b:1d:2f:72:6f:
                    8a:99:04:80:ff:80:20:d5:2f:57:a8:5b:40:f3:58:
                    55:74:95:ff:3a:30:0e:22:5f:a5:f2:39:f1:63:48:
                    46:ed:82:e2:d7:94:4a:73:8d:e2:11:c9:b5:36:6a:
                    4a:51:cf:18:24:4a:03:38:5d:4c:89:be:f0:ec:8f:
                    f7:2f:a6:05:ad:0b:45:f3:24:c5:26:94:17:91:58:
                    cb:ec:a5:03:37:8f:d9:60:6d:e3:cf:36:fa:a1:3e:
                    3e:a5:d2:5e:18:63:2b:c4:40:54:47:65:8a:36:f0:
                    3a:ee:1a:0b:be:5b:1d:b9:39:7b:cd:6c:c4:99:a6:
                    4e:d9:4a:20:c0:73:dc:9a:7c:2e:5b:57:52:8a:5c:
                    e5:f1:0c:4e:2d:e0:06:29:93:6a:17:c8:54:9d:ad:
                    c4:63:9a:df:5b:d0:7d:ca:e1:6e:4d:52:12:75:11:
                    10:c7:57:46:b6:6c:90:d5:f0:f9:45:70:f9:2c:63:
                    7d:93:72:d3:77:1c:2f:d5:59:67:5f:c4:08:d0:6f:
                    bf:70:77:11:d6:5b:6b:04:5a:4d:11:2c:5a:ce:0d:
                    f1:72:fe:df:f2:75:90:8a:f1:47:c0:bc:e3:34:5e:
                    dc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:30:EF:79:A6:57:62:33:C6:E5:30:99:A4:60:FD:1D:26:BB:52:77
            X509v3 Authority Key Identifier:
                keyid:82:A4:16:1A:CA:BF:66:D4:25:ED:87:8C:5D:A9:6A:7D:5C:B3:FF:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5209b6-d64c-4360-8c2b-6f70d53cbef6/1/gqQWGsq_ZtQl7YeMXalqfVyz_-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d2:49:ef:16:1b:00:95:7d:dc:f6:ac:38:96:54:b7:4a:7b:
         7c:3c:4d:6a:b5:5e:70:36:b4:9b:e1:2b:ee:0e:dd:81:cb:96:
         3d:3a:a1:0b:f1:a3:ed:32:47:3c:9e:07:eb:b0:1e:c0:51:8d:
         9e:b6:6a:f3:ab:07:b1:7e:6a:ea:49:5a:1d:e0:5a:bc:d6:9d:
         e9:23:10:ea:b0:f9:80:22:80:b9:bf:ac:68:ad:2f:6e:7d:10:
         b9:ad:f4:1d:08:99:13:e9:6b:1c:d9:e8:2c:90:e4:4f:8d:24:
         6b:69:1b:55:73:77:79:09:ec:09:20:38:77:45:22:e0:2b:77:
         00:2a:e6:67:09:7f:ae:1b:2e:a8:c6:74:03:5a:b6:84:ae:fd:
         a3:11:31:ec:78:a1:94:92:c1:b8:b5:67:eb:1b:ca:df:a1:8e:
         b4:cd:f3:ec:a3:d3:ef:34:82:b5:a2:e3:c2:d6:ed:df:64:19:
         79:a0:d2:dd:f5:25:8d:15:7a:38:23:a0:04:48:86:e7:dd:c4:
         65:52:01:11:50:14:59:5b:4b:2d:9a:2d:29:44:de:73:3d:c5:
         ae:0c:7b:4e:08:d5:33:f7:c5:1c:a5:ee:a9:80:0d:c5:75:1f:
         b6:53:27:13:c6:81:03:03:3a:4e:de:0f:95:99:f9:14:78:41:
         84:72:0e:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBGCQDG1w10UDkKeoICR9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYTQxNjFhY2FiZjY2ZDQyNWVkODc4YzVkYTk2YTdkNWNi
M2ZmZTQwHhcNMjYwMzI1MjIwMTMxWhcNMjYwMzI2MjIwMTMxWjAzMTEwLwYDVQQD
EyhiYjMwZWY3OWE2NTc2MjMzYzZlNTMwOTlhNDYwZmQxZDI2YmI1Mjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYzYIbeoi8D0CoicmLnqF4mjAdkw
S4iuGx0vcm+KmQSA/4Ag1S9XqFtA81hVdJX/OjAOIl+l8jnxY0hG7YLi15RKc43i
Ecm1NmpKUc8YJEoDOF1Mib7w7I/3L6YFrQtF8yTFJpQXkVjL7KUDN4/ZYG3jzzb6
oT4+pdJeGGMrxEBUR2WKNvA67hoLvlsduTl7zWzEmaZO2UogwHPcmnwuW1dSilzl
8QxOLeAGKZNqF8hUna3EY5rfW9B9yuFuTVISdREQx1dGtmyQ1fD5RXD5LGN9k3LT
dxwv1VlnX8QI0G+/cHcR1ltrBFpNESxazg3xcv7f8nWQivFHwLzjNF7cCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsw73mmV2IzxuUwmaRg/R0mu1J3MB8GA1UdIwQY
MBaAFIKkFhrKv2bUJe2HjF2pan1cs//kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3FRV0dzcV9adFFsN1llTVhhbHFmVnl6Xy1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MjA5YjYtZDY0Yy00MzYwLThjMmIt
NmY3MGQ1M2NiZWY2LzEvZ3FRV0dzcV9adFFsN1llTVhhbHFmVnl6Xy1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81MjA5YjYtZDY0Yy00MzYwLThjMmItNmY3MGQ1M2NiZWY2
LzEvZ3FRV0dzcV9adFFsN1llTVhhbHFmVnl6Xy1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedJJ7xYb
AJV93PasOJZUt0p7fDxNarVecDa0m+Er7g7dgcuWPTqhC/Gj7TJHPJ4H67AewFGN
nrZq86sHsX5q6klaHeBavNad6SMQ6rD5gCKAub+saK0vbn0Qua30HQiZE+lrHNno
LJDkT40ka2kbVXN3eQnsCSA4d0Ui4Ct3ACrmZwl/rhsuqMZ0A1q2hK79oxEx7Hih
lJLBuLVn6xvK36GOtM3z7KPT7zSCtaLjwtbt32QZeaDS3fUljRV6OCOgBEiG593E
ZVIBEVAUWVtLLZotKUTecz3Frgx7TgjVM/fFHKXuqYANxXUftlMnE8aBAwM6Tt4P
lZn5FHhBhHIONQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:49:10 2026 by rpki-client