Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
File:                     GWImUASBB5GK3xsizfCHyKg095w.mft (raw, json)
Hash identifier:          CUIgOd9PJ4pQAIWCkGi4eKWVd91w4ab2hoI9q0fY6tM=
Subject key identifier:   9B:65:AB:E1:A5:BB:3B:45:64:39:67:C7:05:EE:E7:4D:F4:AE:F5:16
Authority key identifier: 19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C
Certificate issuer:       /CN=19622650048107918adf1b22cdf087c8a834f79c
Certificate serial:       019D27DF8B86775B7D9D994CA235926AF36F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
Manifest number:          0C88
Signing time:             Thu 26 Mar 2026 02:00:54 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:54 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:54 +0000
Files and hashes:         1: 8QpoO-rxJHsqUjRex5_olbhYxQc.roa (hash: SX9oUFynqnM4YrEmctmRd+yYGKV06PoodiFRGZH6voc=)
                          2: GWImUASBB5GK3xsizfCHyKg095w.crl (hash: vZzyOtFM4YVyHxcPvxhmRue+6vO3np1Mvs7v5D+Q/Uo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:8b:86:77:5b:7d:9d:99:4c:a2:35:92:6a:f3:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19622650048107918adf1b22cdf087c8a834f79c
        Validity
            Not Before: Mar 26 02:00:54 2026 GMT
            Not After : Mar 27 02:00:54 2026 GMT
        Subject: CN=9b65abe1a5bb3b45643967c705eee74df4aef516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:93:2a:a8:ec:58:66:ab:c0:84:2d:fc:4e:65:
                    71:59:d6:5e:41:fb:a1:c6:0c:31:f3:3e:21:34:8c:
                    3f:65:64:1c:bb:b3:7b:c4:73:c1:53:cc:b7:16:de:
                    90:7d:14:fa:b4:d8:d0:04:b0:fd:55:dd:b3:42:2e:
                    19:df:f5:6e:3c:90:36:ce:9d:96:75:ab:b0:f6:60:
                    51:7e:6a:71:0f:17:a7:67:59:ce:e5:eb:48:9c:9e:
                    93:fa:ce:7c:91:d0:6a:45:7a:b0:b9:0f:8b:3c:34:
                    99:53:4d:4f:2d:9d:25:11:96:d4:37:43:de:4a:ca:
                    d5:e7:38:96:db:9a:a8:2e:fa:1e:71:09:f6:27:ce:
                    6e:48:08:b3:b5:c6:35:1e:f3:ba:de:8f:90:9d:69:
                    5f:c0:a8:81:e3:5a:0a:72:47:8a:db:16:dd:87:9b:
                    ca:bb:e6:ec:1d:97:e2:a9:5b:e6:4d:7d:3c:6f:8c:
                    19:7c:78:b0:39:18:69:44:f0:df:39:81:77:75:38:
                    e1:40:9f:8a:b0:53:ae:89:b2:70:82:6f:58:8b:b7:
                    e1:5b:4d:90:ee:90:c6:8f:83:23:8e:6c:9f:ed:b1:
                    90:3e:68:b5:d1:d5:5c:8f:c6:b2:43:e3:1d:86:fc:
                    69:b5:7d:95:44:4e:d9:e9:ab:f1:ac:55:f9:09:56:
                    af:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:65:AB:E1:A5:BB:3B:45:64:39:67:C7:05:EE:E7:4D:F4:AE:F5:16
            X509v3 Authority Key Identifier:
                keyid:19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:9e:35:64:8c:77:77:71:ba:1e:6a:fd:56:54:99:93:30:56:
         34:5f:8b:f3:a0:74:92:5c:1a:d0:11:46:0f:8e:2a:57:1f:fc:
         2e:f0:93:28:76:a4:ee:49:33:05:7c:f3:06:ed:8a:b9:07:97:
         06:d0:08:14:3e:f2:8a:c9:65:5f:4b:e0:30:b6:f4:a6:a4:a9:
         cb:22:8d:5f:08:51:24:60:4b:3f:3f:3f:dc:9c:1e:28:34:8b:
         d5:03:30:e3:75:7c:39:2d:f7:9e:77:60:8e:29:35:b6:f7:a1:
         c7:fa:2b:1c:b9:00:6d:ee:2e:b4:39:a7:06:b2:7e:2b:7f:7f:
         d0:8a:dc:39:67:62:b2:26:6a:10:08:52:f4:73:62:3c:ce:1f:
         13:dd:4d:68:89:b7:25:cb:e4:b9:f7:7d:61:29:60:39:a8:8c:
         48:4c:6e:73:6c:86:b0:d6:ce:af:d1:ef:7c:5c:9d:b2:b8:28:
         bd:e6:2e:fe:97:27:93:c2:bb:85:32:63:22:16:61:73:80:01:
         c3:4d:6e:7e:15:96:f8:3b:3c:5b:1f:17:35:b9:ce:7d:1d:7b:
         e6:c4:9e:19:e4:96:3d:69:ca:fc:e2:2c:4c:b9:89:b6:d9:9b:
         62:fc:92:c8:ac:9a:dd:22:c2:f1:f4:49:90:ab:2b:56:fc:22:
         96:65:45:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:47:07 2026 by rpki-client