Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
File:                     GODpo9IM-sbL48z3SrV4SndoKTM.mft (raw, json)
Hash identifier:          CGPs/mHE00HTWgRyMTEUpVw476fnLOVy8DvQQHWhItQ=
Subject key identifier:   54:86:63:82:C2:F9:09:ED:13:F3:17:50:73:AC:FC:A8:CC:76:AB:51
Authority key identifier: 18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33
Certificate issuer:       /CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
Certificate serial:       019D284E3D8CB2F3D4E4FE6013436814C7A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 04:01:49 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:49 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:49 +0000
Files and hashes:         1: GODpo9IM-sbL48z3SrV4SndoKTM.crl (hash: aBrfmKMW42xp9YEvPuyO0iIy0lDcwLQkdtXqlhx9x1M=)
                          2: IE5A6p3ihCrcbMxKq92_b0wXLO4.roa (hash: V9HxeCXOTsCIR19CGoeLkRMuI9i6B2h8bj5VYOFXyYk=)
                          3: ZBthpRszRnWPefnQslvGVVRB_Ss.roa (hash: /MipCJsyzaVKfbqwd9l/2ank8ZfA/0lQtm26p9j7ZRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:3d:8c:b2:f3:d4:e4:fe:60:13:43:68:14:c7:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
        Validity
            Not Before: Mar 26 04:01:49 2026 GMT
            Not After : Mar 27 04:01:49 2026 GMT
        Subject: CN=54866382c2f909ed13f3175073acfca8cc76ab51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e1:d5:ef:98:fd:47:c5:98:e9:7d:d1:04:1f:
                    77:58:69:48:5f:3a:3b:0c:7a:cf:78:45:30:52:d3:
                    26:13:3b:74:25:5b:1b:7f:d5:82:a4:b6:5b:6c:66:
                    dd:25:5f:3b:89:7f:4f:98:87:44:c3:d5:99:88:63:
                    4e:d7:37:94:d1:b3:a3:cf:15:12:ff:f5:69:ff:5c:
                    c6:6b:49:01:eb:63:9c:ab:97:bd:0b:df:2a:81:8f:
                    d8:f7:49:5f:81:d2:67:76:ec:6e:d3:70:68:07:20:
                    6a:c7:0a:99:98:bb:9a:8e:7d:0d:d6:ae:d8:65:98:
                    73:53:68:e1:a6:97:ce:af:26:39:a5:aa:c8:80:d9:
                    8a:c4:35:01:13:04:98:33:f4:a9:ae:05:a0:bb:57:
                    62:37:83:74:9f:6e:9c:43:57:d5:e5:38:db:47:a4:
                    e9:7b:01:72:e2:1f:d3:0d:38:9b:94:5b:72:c9:54:
                    9f:99:2e:9e:82:76:c5:e0:4d:1e:e5:0c:fe:a2:08:
                    6d:95:a1:57:cd:34:85:a5:e2:73:3f:c2:7a:07:7e:
                    75:43:97:49:56:78:7c:0e:2c:9b:89:f6:98:6b:fe:
                    b6:40:8d:62:a4:50:fc:aa:8e:e6:70:1b:81:21:2a:
                    79:a3:fe:9f:56:ec:5e:35:2b:b6:cd:3b:3f:38:a0:
                    6d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:86:63:82:C2:F9:09:ED:13:F3:17:50:73:AC:FC:A8:CC:76:AB:51
            X509v3 Authority Key Identifier:
                keyid:18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:1d:22:3b:36:c6:8b:10:67:67:6f:54:c5:d6:4a:e7:3a:24:
         e5:80:d7:c7:0b:15:25:fb:5b:10:ea:24:50:19:e7:75:29:f2:
         d7:28:16:ed:77:cc:f6:c6:64:21:d8:38:b4:c5:17:fa:48:3b:
         cc:22:db:ab:fa:fa:4b:52:66:e3:e3:70:4e:31:6b:a4:f1:39:
         3a:e5:e2:1e:c3:80:50:13:d5:81:c7:2a:07:fd:52:97:b6:d2:
         bb:44:61:f5:af:32:48:d5:de:f7:14:80:65:17:5b:00:ab:1b:
         a4:b6:cd:08:f5:06:90:d2:d5:cd:81:94:18:e3:9c:86:30:76:
         48:b6:6e:ec:57:44:60:77:ab:25:14:42:cf:fd:2f:7a:8e:0a:
         84:29:a3:d5:17:fd:a9:86:e6:7f:3a:78:72:52:be:9a:c8:1d:
         28:f7:68:25:ac:8d:db:2e:cb:c9:e6:fd:f2:fc:fc:90:0c:99:
         98:a8:86:09:09:92:e1:08:8b:ca:56:e1:f0:69:52:55:15:07:
         c6:3b:cd:00:bb:1e:03:07:94:6a:86:6f:92:aa:4a:27:ed:e1:
         c3:a0:3b:1e:e7:37:b0:bd:1f:40:b9:9b:28:d1:13:be:df:1d:
         15:83:57:81:7c:69:2f:f1:25:b9:d1:1f:7d:61:23:b8:80:7f:
         5d:58:0e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:30 2026 by rpki-client