Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
File:                     GbvChJjrFpWQsGmgBUFMQaF5skA.mft (raw, json)
Hash identifier:          aCTUGq7vNkR1Onsr7wREHi63HEF5n+pkox0+e/RxlLs=
Subject key identifier:   E9:6B:2F:5C:A7:53:66:1A:07:2A:83:FC:D9:BF:B8:1E:33:CB:1F:8F
Authority key identifier: 19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40
Certificate issuer:       /CN=19bbc28498eb169590b069a005414c41a179b240
Certificate serial:       019D2628831629FB1498186C427B831262E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
Manifest number:          1885
Signing time:             Wed 25 Mar 2026 18:01:22 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:22 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:22 +0000
Files and hashes:         1: GbvChJjrFpWQsGmgBUFMQaF5skA.crl (hash: SgjoN4qPqfcXpYBQSs5tyujustrww0V4/OCOJvAQ2+s=)
                          2: Uwy94ESK4H9_ORvt89GH2GKZ-wA.roa (hash: NnPhFs3DaaK4BxiXGVh9eUavNQZbFqm0Zmxp3/WTUQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:83:16:29:fb:14:98:18:6c:42:7b:83:12:62:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19bbc28498eb169590b069a005414c41a179b240
        Validity
            Not Before: Mar 25 18:01:22 2026 GMT
            Not After : Mar 26 18:01:22 2026 GMT
        Subject: CN=e96b2f5ca753661a072a83fcd9bfb81e33cb1f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:02:1d:cf:6b:2f:20:f8:2c:fb:8c:69:c2:c4:
                    4a:78:c2:03:6b:33:38:82:7f:31:5b:41:d6:da:34:
                    19:6c:73:b7:d3:2d:5f:51:ba:af:37:7d:fd:c6:d6:
                    0e:7a:81:96:95:72:bd:38:d1:75:47:ff:06:4c:26:
                    5c:50:c2:42:f9:53:dd:5b:98:92:a8:4e:1f:1d:f0:
                    55:8a:eb:43:62:78:0f:f0:8e:c1:df:1d:fd:1c:38:
                    52:2b:64:1c:78:cb:67:52:cd:d8:57:7a:cb:54:30:
                    50:ba:45:f7:b0:3e:ca:5a:de:1b:f2:72:60:6d:8a:
                    b2:f5:f5:f3:5f:69:05:26:ef:12:38:9f:9f:8a:f0:
                    df:e2:e0:5f:2f:d4:bc:c4:2f:c9:6d:ef:be:c2:d3:
                    40:bc:cf:07:e1:97:a5:7a:b1:5b:7e:ba:59:2b:09:
                    6f:b7:a0:f7:a2:ae:df:8a:e4:6f:79:ca:32:88:1e:
                    0a:84:29:31:b9:d1:d1:4b:8b:42:d9:f2:b1:2f:53:
                    5d:b9:2b:07:3b:71:10:2c:73:70:3b:67:a9:4a:f4:
                    7c:f8:76:b0:6a:ef:b6:07:65:a4:57:a1:3c:d7:a7:
                    a7:7c:b5:4e:ed:aa:23:69:71:4e:df:ea:be:cb:51:
                    b0:93:87:66:bd:57:c5:c3:5b:18:14:8f:bf:8a:db:
                    cf:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:6B:2F:5C:A7:53:66:1A:07:2A:83:FC:D9:BF:B8:1E:33:CB:1F:8F
            X509v3 Authority Key Identifier:
                keyid:19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:76:44:27:b5:bd:31:50:60:85:c5:67:59:cf:7c:99:39:36:
         4f:bf:62:e9:6c:b0:31:6a:ae:f2:56:46:95:66:5e:3e:8a:ca:
         5b:83:46:8d:56:20:eb:04:3a:0f:89:f7:eb:ec:bc:bb:93:e8:
         a4:c9:86:d4:f0:01:00:4d:a5:76:92:5e:68:1a:ae:a1:07:6e:
         7b:60:51:43:2f:30:3b:92:df:17:01:b3:56:19:8c:ee:26:f8:
         27:37:51:f5:60:a5:d2:d2:d9:81:2a:ee:44:6d:f5:84:00:bd:
         12:f1:01:a8:49:94:37:34:21:c8:30:2f:f3:01:60:ae:7d:da:
         1b:0d:60:0d:00:04:51:50:0d:3c:08:a0:28:d9:2c:13:73:03:
         ac:bb:2d:bd:39:cd:a9:c2:84:25:4b:5b:8f:91:70:aa:74:f6:
         9e:38:5c:c9:dc:bb:c2:e7:45:b0:ad:7e:2b:3a:a2:39:1d:7d:
         c0:f1:6c:f4:4c:be:db:7d:00:df:f9:8f:00:d0:5e:98:e6:5f:
         b7:86:10:c7:88:d5:6c:9d:d8:e1:85:10:7f:8d:27:b5:5f:da:
         92:71:0d:4a:41:c3:b5:cc:08:12:f3:30:03:bb:b7:fe:3a:22:
         6d:57:b9:ae:a7:a8:a9:09:e5:17:f2:f7:9d:e0:7c:23:17:27:
         cb:dd:83:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:56 2026 by rpki-client