Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
File:                     G7gLSjMnxYOuzbA87z9k8zvVmwg.mft (raw, json)
Hash identifier:          QsrbmvRjiI81nphmqd8pj1Iyn7aubxHmOzqtGmBbSmU=
Subject key identifier:   2C:86:4E:BE:EC:68:A3:99:BD:9A:40:90:F4:60:AC:BF:A1:65:59:DB
Authority key identifier: 1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08
Certificate issuer:       /CN=1bb80b4a3327c583aecdb03cef3f64f33bd59b08
Certificate serial:       019D2AE13E52B603DC767A63857A8654D5CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
Manifest number:          0DAC
Signing time:             Thu 26 Mar 2026 16:01:37 +0000
Manifest this update:     Thu 26 Mar 2026 16:01:37 +0000
Manifest next update:     Fri 27 Mar 2026 16:01:37 +0000
Files and hashes:         1: G7gLSjMnxYOuzbA87z9k8zvVmwg.crl (hash: dLPCwsOfMQGz8DyWt+4eghxgqNxQFNFDV6SU0O30Do8=)
                          2: J8v5WR26nlZvCzaCkln0Kxdqo5o.roa (hash: fUoSmipFXo0HTVz8kKFD5jepWNvHoRV0MBDIccRdzZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:e1:3e:52:b6:03:dc:76:7a:63:85:7a:86:54:d5:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bb80b4a3327c583aecdb03cef3f64f33bd59b08
        Validity
            Not Before: Mar 26 16:01:37 2026 GMT
            Not After : Mar 27 16:01:37 2026 GMT
        Subject: CN=2c864ebeec68a399bd9a4090f460acbfa16559db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:65:1d:c2:d1:c3:ec:50:84:f1:c2:15:c7:2b:
                    5e:9f:d7:f9:3b:9a:61:0d:2d:6d:78:37:f1:2b:57:
                    a9:7f:da:a8:40:0f:fa:f3:93:eb:18:00:ea:7d:37:
                    e8:d2:06:8f:ac:c2:77:1f:b5:8f:85:6a:4e:a8:23:
                    d3:2e:93:72:bb:f1:ee:5d:0f:8c:87:97:c4:e9:8c:
                    dd:5d:ac:e4:92:15:47:04:c6:08:19:ee:eb:95:f1:
                    9e:85:87:bd:04:8c:83:92:af:22:df:fc:4a:3f:57:
                    86:cd:54:cf:8b:6e:44:41:4c:b3:51:11:8a:20:5e:
                    fb:1c:17:ed:0b:0d:c0:0f:b5:f4:e8:15:8a:90:4b:
                    5a:3d:29:41:51:85:6f:9b:55:fb:96:88:19:71:48:
                    9e:6b:80:55:ed:bb:7f:2e:66:e6:6f:7b:69:08:44:
                    f8:e8:29:0a:29:4e:78:dc:ea:1b:55:2e:84:f3:bc:
                    25:45:95:e1:d1:89:36:2f:86:5f:38:d5:99:f9:81:
                    34:fc:75:25:66:35:ba:9f:47:e7:6f:a1:df:92:95:
                    76:81:13:7a:ce:f7:90:9a:49:d3:1b:44:9c:58:50:
                    4d:25:88:5b:e6:3c:c6:d9:ef:4b:21:51:dd:7a:13:
                    66:e0:d1:6e:53:20:dc:bf:09:ab:3e:da:94:20:bd:
                    b6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:86:4E:BE:EC:68:A3:99:BD:9A:40:90:F4:60:AC:BF:A1:65:59:DB
            X509v3 Authority Key Identifier:
                keyid:1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ec:a3:04:a7:3a:ba:2e:83:93:97:c3:1b:54:20:b0:6b:c9:
         9c:dc:c6:43:ab:88:64:f4:91:ee:e5:86:d8:65:4e:b9:85:bb:
         b5:55:9c:a5:87:89:f4:74:67:bb:76:d8:31:4f:d0:fc:89:27:
         08:f9:10:36:cc:6a:f2:fc:ba:07:d6:ae:18:05:fb:36:a6:e2:
         db:2c:1a:22:6c:fc:ee:67:2f:95:2f:8c:4b:29:6f:e8:0f:e2:
         98:7f:a8:8d:c2:48:47:f8:00:fe:ff:b4:8a:b2:3d:d1:32:e0:
         80:36:84:07:fe:06:bc:f5:0c:c2:f6:b7:4c:1a:8d:e4:50:70:
         52:a7:8e:72:9a:97:81:af:e9:1f:87:0b:75:d5:cb:60:bb:0b:
         3b:bb:75:84:12:67:2b:47:c4:4b:57:dc:bd:85:e6:23:0d:cf:
         5a:7f:3a:43:87:0e:25:80:71:76:66:11:68:47:a9:33:73:9e:
         52:dc:35:dc:b1:9c:fa:75:af:50:16:04:83:ee:a2:b7:97:49:
         d1:35:b6:af:61:30:eb:89:72:8e:f9:e8:48:94:1b:8a:3e:e9:
         88:bd:a5:6c:d7:ee:f6:60:d4:a7:f3:c1:de:bf:7b:5a:55:74:
         4c:28:9c:50:2c:60:95:34:89:78:8b:0d:0c:6e:29:a1:f9:78:
         6d:d9:93:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:27:11 2026 by rpki-client