Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
File:                     GckfHLCHQjKgT7wJK6poiszsydc.mft (raw, json)
Hash identifier:          2NSp6mds59UfJUXAqJwrta2YmyGOyeJH5AakmsmICZI=
Subject key identifier:   FD:EF:EB:66:6B:E8:BD:B6:EA:DA:5B:7A:3F:08:58:D7:B6:1D:55:BE
Authority key identifier: 19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7
Certificate issuer:       /CN=19c91f1cb0874232a04fbc092baa688accecc9d7
Certificate serial:       019D2960FC5DA3D6C8EE27B1B32051FA34EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 09:01:54 +0000
Manifest this update:     Thu 26 Mar 2026 09:01:54 +0000
Manifest next update:     Fri 27 Mar 2026 09:01:54 +0000
Files and hashes:         1: GckfHLCHQjKgT7wJK6poiszsydc.crl (hash: 3RhW+2VmIaYtgWg8g6Oc0Trf0502dEayRwg4vDJjeyI=)
                          2: SoVU9F3W3Bai3qKtYef_WnEk3Mc.roa (hash: qPqyEDMPhVctrtsifGL512rIc3cU9LPj65aKHgKyOGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:60:fc:5d:a3:d6:c8:ee:27:b1:b3:20:51:fa:34:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c91f1cb0874232a04fbc092baa688accecc9d7
        Validity
            Not Before: Mar 26 09:01:54 2026 GMT
            Not After : Mar 27 09:01:54 2026 GMT
        Subject: CN=fdefeb666be8bdb6eada5b7a3f0858d7b61d55be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:5e:43:fe:49:eb:cf:50:a1:59:6a:b8:6c:ab:
                    b3:e8:86:22:52:5c:57:20:e2:53:91:63:fd:0a:fa:
                    9b:d4:0c:3f:b8:0f:11:e5:18:89:25:e9:ce:32:a6:
                    9c:7c:54:e8:cb:26:a2:d3:8f:53:ab:2f:d5:b7:e1:
                    3a:c6:87:ae:9e:b8:ae:f6:3f:62:7d:8a:0a:4d:d0:
                    6b:8b:5e:ba:7b:42:2e:0d:64:25:81:95:fe:c7:bf:
                    a5:0f:02:61:e1:9a:f3:0e:0d:5c:4d:b1:79:75:0f:
                    77:47:82:6b:b5:9e:75:ef:c6:d0:cb:6e:b3:15:18:
                    47:60:af:bf:c9:88:3e:9e:98:da:0b:36:23:a1:e4:
                    83:e0:46:b8:14:b0:a3:7b:4f:e4:3f:71:f2:d3:c3:
                    ee:15:8b:e5:75:c9:38:1c:ad:8f:f2:28:bc:ed:7e:
                    8a:fe:17:36:54:be:2e:d7:e6:46:a8:1c:56:5f:28:
                    1b:50:cd:7d:c6:a9:3f:0d:36:11:55:12:59:c6:d5:
                    e1:ab:4b:fd:e0:b4:b1:c5:3d:42:be:b1:89:89:86:
                    4f:a0:aa:53:83:85:15:e5:4a:b3:e9:b6:7c:18:29:
                    ef:89:ea:d0:9b:9c:a0:70:ce:40:c3:f7:6b:6b:27:
                    43:0a:e8:eb:c0:be:a1:bb:8c:93:eb:93:11:a1:9c:
                    0f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EF:EB:66:6B:E8:BD:B6:EA:DA:5B:7A:3F:08:58:D7:B6:1D:55:BE
            X509v3 Authority Key Identifier:
                keyid:19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:f4:a8:e4:a4:1b:ba:54:eb:3c:69:8e:cd:57:e4:05:49:ff:
         24:b0:01:43:81:b8:b4:5b:c7:6d:3e:a8:93:e5:d5:fe:27:e1:
         c5:76:f1:18:f3:1a:71:8d:b1:7c:bd:e8:b5:9d:d8:8c:d7:b2:
         4c:03:b8:74:c6:18:aa:7e:19:11:72:9f:a1:cc:ce:08:8d:e6:
         0a:b1:31:be:f0:aa:19:1c:6f:8e:39:7e:65:ba:0d:02:af:b0:
         e6:74:05:9e:7a:9d:d9:1a:d5:ad:de:f3:31:e0:14:79:1c:a8:
         48:c6:2d:26:93:78:0b:4f:c3:f8:fd:90:39:48:85:c7:40:96:
         45:34:84:56:de:09:ec:c3:74:da:6e:41:e0:a7:54:45:69:83:
         e4:a9:f8:19:69:44:02:51:18:66:e7:7e:35:63:4f:6e:13:7c:
         1a:ef:e8:e1:6d:10:86:10:a9:e3:c5:87:df:9b:0d:4c:00:bc:
         94:19:b0:5e:63:92:13:aa:3f:51:83:27:b0:f5:bb:0d:1f:fd:
         9d:66:91:57:93:b5:4e:37:06:f6:ac:f2:00:86:dc:16:0d:b3:
         a1:c2:79:f8:42:c9:8f:0a:9f:65:a3:6f:d7:9a:e8:4e:34:04:
         8c:6d:e4:fa:c5:98:61:a7:5e:08:37:62:a5:bc:5f:73:98:97:
         f3:a0:ed:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:47:53 2026 by rpki-client