Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
File:                     gBfqodqvIl9FOAKjO6-WOMzNd6U.mft (raw, json)
Hash identifier:          jLB6WEos0wROj8qpRGggZRC+iRA+j2s6EN0XSLXh2xU=
Subject key identifier:   41:C2:96:C3:7F:50:7D:12:4E:6F:9F:E8:5E:9B:7B:36:39:E9:06:7F
Authority key identifier: 80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
Certificate issuer:       /CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Certificate serial:       019D25836E3BD63D8F91A1876C323D78DAE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
Manifest number:          0E27
Signing time:             Wed 25 Mar 2026 15:01:03 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:03 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:03 +0000
Files and hashes:         1: aIIL3zN4ZUN1hFPhWa5OB2tT7BE.roa (hash: fzKmg/Y3EsolCl+9NGvW6oDouQRm2edVgKukMEtlQJI=)
                          2: gBfqodqvIl9FOAKjO6-WOMzNd6U.crl (hash: izsLospOAQdN99Rrmb7OqVCeL2E7Shtx36oHapSALx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:6e:3b:d6:3d:8f:91:a1:87:6c:32:3d:78:da:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8017eaa1daaf225f453802a33baf9638cccd77a5
        Validity
            Not Before: Mar 25 15:01:03 2026 GMT
            Not After : Mar 26 15:01:03 2026 GMT
        Subject: CN=41c296c37f507d124e6f9fe85e9b7b3639e9067f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:4d:99:5e:ea:fa:79:5b:64:38:fb:c1:f5:
                    74:18:89:ed:88:bd:73:45:4c:dd:d0:a5:d9:01:e8:
                    19:5d:05:46:51:cc:56:d3:3a:01:22:26:37:c9:eb:
                    8f:cd:ac:34:4d:85:38:4f:8b:a4:51:4d:0c:3d:5a:
                    bc:e8:4f:67:f1:fb:db:ed:85:b1:8c:e3:eb:43:d5:
                    20:a6:82:07:0f:9b:d9:3c:ab:e0:75:82:fb:1c:f9:
                    e6:4b:b9:cd:12:7e:94:50:38:27:68:21:c4:18:c8:
                    92:5d:a0:cf:65:bc:15:27:bf:b5:2e:c3:1d:04:f5:
                    10:98:11:2b:4f:5d:f7:fd:50:e4:d1:60:e1:e8:cb:
                    9a:4b:c0:c8:07:27:5a:d4:19:97:d2:f3:9c:5d:6f:
                    a7:1b:dc:c9:1d:b7:e4:f1:90:4d:23:40:68:a5:db:
                    ef:9f:5c:07:b5:a3:5f:d9:d2:86:30:6f:00:24:88:
                    d2:c8:b0:40:92:b3:e7:6b:d7:87:91:dc:d3:dd:f8:
                    40:60:ac:aa:c2:a4:b3:d2:4c:fe:e4:80:63:18:88:
                    62:3f:11:4c:a2:11:c0:f9:ec:a8:90:df:18:07:39:
                    03:8a:ca:45:0b:0f:9d:10:47:9c:4b:5e:3f:df:58:
                    f1:67:85:f4:ca:a6:6b:46:ba:90:2e:4e:53:10:db:
                    2b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C2:96:C3:7F:50:7D:12:4E:6F:9F:E8:5E:9B:7B:36:39:E9:06:7F
            X509v3 Authority Key Identifier:
                keyid:80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a5:3b:b8:7d:33:ba:36:08:c3:c4:6c:57:c5:a9:ab:4e:ed:
         f0:ae:80:82:85:60:5e:c0:48:2a:d2:54:b9:dc:24:15:14:2f:
         0f:b7:96:fb:0a:30:5d:20:22:e1:8c:18:b3:ed:4e:8f:b0:7b:
         9e:4a:14:e5:fd:cb:09:ea:3d:f4:3c:dc:ff:42:d4:80:40:00:
         5f:91:ea:69:02:ce:21:5e:ed:f0:91:f8:0e:88:7f:be:67:9c:
         6c:35:ba:53:59:0c:a2:4c:05:22:37:09:f9:df:60:57:36:b2:
         64:8f:eb:aa:18:94:09:a5:f2:38:0f:9d:aa:b2:48:5a:5a:fa:
         fb:1b:ee:67:8b:68:7e:91:aa:4e:9e:5d:8f:19:7d:4f:fa:58:
         5b:97:c2:6a:47:75:ef:1a:e1:ca:e8:ba:98:3c:af:de:b4:cb:
         82:50:30:66:9f:61:3f:d4:6e:5f:f5:6e:ee:0b:5c:81:92:00:
         69:d4:48:b6:18:2c:c9:82:a4:c6:e9:2e:7f:76:86:60:77:fd:
         e7:6e:78:8f:82:c2:a8:8b:e8:74:63:85:e9:32:2e:84:94:ef:
         19:b3:b4:b9:a3:fc:02:53:cb:46:f1:52:1b:3c:e4:1f:e5:dc:
         16:0b:51:1d:bb:cc:db:c1:97:2b:e4:ea:50:51:44:df:c3:20:
         cc:7d:71:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:06 2026 by rpki-client