Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
File:                     gJ7XCYERxniJisDwrsl_3Ts7bQI.mft (raw, json)
Hash identifier:          Zjgaxg91sZLcNH8SSxiJXj0YVjIynr6I4BJ98Ewg0GI=
Subject key identifier:   E5:EE:A5:FA:12:61:E2:42:A0:F9:8C:7D:40:C6:01:83:84:98:EE:7A
Authority key identifier: 80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
Certificate issuer:       /CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Certificate serial:       019D27E044C89F4E24162FAE49B42F741FB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 02:01:42 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:42 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:42 +0000
Files and hashes:         1: gJ7XCYERxniJisDwrsl_3Ts7bQI.crl (hash: mpCZ49qEsFRwzQvHfoeOauRDduWihLuVqauF4GmSPhs=)
                          2: k1oWIl9uaPhK_7wC7TzwxBmJV5U.roa (hash: Teuvy3ArR3TwwUcbjV0tYtPi6ySgg76mgoEbmzqvJDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:44:c8:9f:4e:24:16:2f:ae:49:b4:2f:74:1f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
        Validity
            Not Before: Mar 26 02:01:42 2026 GMT
            Not After : Mar 27 02:01:42 2026 GMT
        Subject: CN=e5eea5fa1261e242a0f98c7d40c601838498ee7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:07:46:72:32:b0:65:6d:81:96:40:5c:f7:ca:
                    05:a1:35:2c:a0:4c:17:78:63:17:e6:2b:9e:d2:1c:
                    c7:43:29:00:0c:7a:39:ac:b7:21:c8:21:f7:a8:36:
                    08:d0:bd:7a:23:2d:64:bb:70:31:ad:25:c1:ad:16:
                    0a:b4:b1:99:d1:fe:98:83:bf:f4:b0:24:0a:3b:1f:
                    66:cc:0f:21:1e:fe:2b:5d:63:08:e9:85:43:ea:30:
                    52:ec:4a:76:d7:91:6c:3e:87:67:bf:06:74:63:00:
                    80:14:1b:3a:b6:c4:69:c2:70:2c:af:2e:09:f8:27:
                    b8:49:55:87:e0:4a:ae:ed:69:91:e2:e8:23:63:91:
                    ba:e5:d8:8a:ac:8a:83:9d:a2:4a:77:6b:c6:90:48:
                    5d:5c:03:aa:b6:b7:88:a7:e2:1f:49:3c:54:7a:bd:
                    5b:ca:3c:9f:8b:fb:2e:78:ec:7b:c8:dd:14:70:46:
                    ea:ad:3e:72:5c:7c:b8:84:db:3c:2e:1e:be:d4:23:
                    46:b1:4f:b3:5a:6a:02:38:60:a0:91:d7:15:2c:1e:
                    f4:b3:5e:99:e7:67:6c:c4:4a:a8:7f:1f:d8:9f:b9:
                    7d:d4:2c:a3:d3:d8:28:b1:6f:d8:3f:e6:c9:01:5c:
                    9c:07:0c:90:be:2c:a4:e9:97:3a:f3:b0:04:80:ac:
                    af:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EE:A5:FA:12:61:E2:42:A0:F9:8C:7D:40:C6:01:83:84:98:EE:7A
            X509v3 Authority Key Identifier:
                keyid:80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:fa:2e:28:81:62:dd:04:6b:6f:d3:61:6c:9d:ac:ac:45:6e:
         ad:a7:dc:0e:e4:f7:63:78:2a:c4:7d:cb:6e:94:f0:73:f1:69:
         22:ef:dc:fb:88:18:a0:85:83:6b:6a:89:1d:b0:48:ed:66:d3:
         f4:42:9c:11:5a:23:51:45:7e:4d:3f:1d:e2:d7:d6:d9:04:a5:
         90:f2:8b:4b:dc:4b:1b:95:a8:54:30:dd:84:77:67:86:b3:e6:
         00:58:03:0a:54:32:da:d1:5f:34:11:f5:51:a6:e5:04:34:42:
         fc:0c:b2:a2:62:06:dd:75:5f:f7:6c:ff:ff:0a:01:79:b5:b8:
         fd:6a:46:66:4f:0f:e9:10:83:22:e6:dd:93:8c:eb:90:04:d7:
         f2:6a:fc:db:15:c0:39:e8:78:4d:37:c5:b0:49:85:da:1a:2f:
         c4:df:d4:55:35:05:31:fd:7e:7f:dc:f0:7b:09:73:73:fe:6b:
         63:dd:75:1b:a8:86:65:ed:60:34:5d:66:a7:48:53:19:a3:cd:
         9d:9d:5a:f8:cf:40:49:b6:05:fa:46:48:7f:68:64:30:10:98:
         7e:0c:58:7b:da:c5:f3:d2:3d:de:18:b8:e2:48:86:97:f8:6b:
         3d:ba:bd:6b:d9:40:02:8c:f1:9f:07:8f:dc:b8:24:71:c7:ac:
         34:54:69:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:41:19 2026 by rpki-client