Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
File:                     GNgB3p_opmgHWIF4I642ugZcYQ0.mft (raw, json)
Hash identifier:          CJI9BNrmkte5Z95gmG8onBCIGRVzc02l3XkF9gHFGAg=
Subject key identifier:   33:84:67:15:B8:CA:E2:40:7D:3E:BD:A4:79:0E:AC:75:93:BD:7E:6D
Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
Certificate issuer:       /CN=18d801de9fe8a6680758817823ae36ba065c610d
Certificate serial:       019D2884832AECFD27E888C77C3A4BA3F653
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 05:01:06 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:06 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:06 +0000
Files and hashes:         1: 7lAzklFt5hv21weZsd8RUSnd9Ig.roa (hash: +VKWZFr+6W37JzEA9GSsY/1+wtiBPUM4ZOAfeR7K+UM=)
                          2: GNgB3p_opmgHWIF4I642ugZcYQ0.crl (hash: PRT2Dx3KAJ2Hub02//Ejk4FU62FYp22AK21DRyDPiVY=)
                          3: GaSCMV4XmzAxLCAeAkrFJsSYL68.roa (hash: 8armHfXsLYxT8u8vHUQJGjHAEIP47gs/JgtUgM3M2bw=)
                          4: JdvrcoE9zh9DtjU5-xbVFH-VvDA.roa (hash: 3jAnXeJ9BBJ28SdlPUy/mU91gOnFLPiC/VnWiJcQ3Ig=)
                          5: c3aSu8i9jdfT3MZzyY5MkVH86Ys.roa (hash: Rr6OkRDr/ak6ymVFHMUijIRhq9Kp5PxtMbQP8vM+1GU=)
                          6: m-SQr7hnhmE960j3hH0IgSeLpa0.roa (hash: NGsZYn3E8/y+KwalpvGEjudnpYUMa2+kf6D4NeIdWbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:83:2a:ec:fd:27:e8:88:c7:7c:3a:4b:a3:f6:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d
        Validity
            Not Before: Mar 26 05:01:06 2026 GMT
            Not After : Mar 27 05:01:06 2026 GMT
        Subject: CN=33846715b8cae2407d3ebda4790eac7593bd7e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:50:51:2b:9a:aa:c6:1c:84:98:ad:3d:03:e0:
                    16:b1:82:52:48:20:61:ea:f4:2a:dd:b0:fe:29:b1:
                    15:bb:b1:c6:89:6f:5e:48:fa:d1:5e:2b:7b:55:de:
                    10:ff:70:f4:c8:89:3d:2f:74:d2:d1:27:27:3d:2b:
                    b6:6b:dd:96:58:40:16:54:af:85:03:ac:7c:95:6d:
                    c9:bb:1d:48:9d:69:02:05:98:26:e3:a0:7c:69:93:
                    b4:49:84:00:13:65:aa:4c:00:72:30:f7:c5:2e:41:
                    bf:1b:26:52:05:27:08:01:f9:7d:56:69:4e:12:1f:
                    a7:44:f7:28:8b:2c:5c:3d:29:67:be:3d:b6:b1:61:
                    c5:42:25:27:69:02:0d:59:5b:cb:07:a0:95:ee:f4:
                    16:ad:97:a7:9f:f9:aa:be:91:b4:b0:40:f7:c6:a5:
                    40:be:f7:1e:7d:49:d5:b8:d0:a1:2a:4b:aa:b9:96:
                    44:c2:87:df:66:71:c6:23:96:17:cc:13:44:1a:7c:
                    13:a8:a9:81:38:b9:59:25:18:ce:31:5f:f3:89:f7:
                    db:46:0d:e6:af:5e:3f:49:5e:29:29:58:13:ca:17:
                    fa:68:2f:b0:e9:7b:d5:a8:42:89:6d:5f:65:4c:61:
                    66:fb:12:d4:ae:7b:4b:aa:3e:e7:f7:92:64:5f:18:
                    82:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:84:67:15:B8:CA:E2:40:7D:3E:BD:A4:79:0E:AC:75:93:BD:7E:6D
            X509v3 Authority Key Identifier:
                keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:5f:16:ec:d3:ee:bf:97:29:b5:cb:09:70:3f:e4:50:f0:7d:
         02:a7:f9:79:28:4d:29:fe:6d:00:73:16:45:13:5d:4d:e0:a8:
         0c:0a:01:ec:64:c8:bf:7c:d0:18:2f:df:b5:55:7c:50:73:e2:
         b9:6e:a7:a5:5a:bd:fc:38:e6:9d:d9:d1:12:21:40:3f:97:e6:
         98:32:b5:c7:bd:cb:c5:c0:58:32:b3:8d:95:c4:b6:68:d8:62:
         ae:0e:74:a7:6e:bd:78:f1:80:df:27:33:f9:ed:59:0c:57:1b:
         05:54:b1:2d:2a:b7:02:ae:80:bb:af:d6:ac:ed:43:04:31:ef:
         c5:a0:1b:bd:9f:4c:c0:d9:42:82:fe:21:a7:13:76:48:e1:d9:
         56:c6:17:a0:ca:68:1c:a0:23:97:e3:ef:b2:45:03:b9:19:e1:
         2d:0c:72:12:83:90:75:77:af:96:7a:03:ec:2d:22:c4:a8:86:
         fb:cc:15:69:5f:42:06:f1:8d:84:23:e8:b7:57:a4:a5:6b:82:
         72:19:76:7e:2c:c6:5f:11:ae:2e:12:43:54:43:01:2f:1f:61:
         d7:2b:bd:b7:3a:a4:18:47:e9:48:37:0f:e8:93:f7:20:29:d6:
         ea:a1:7d:6a:9d:af:02:1a:f5:fc:ca:02:59:ad:1a:fe:71:7d:
         46:a4:02:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:33:14 2026 by rpki-client