Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft
File:                     gynJE4dY3-i6EjXuDsfZtlifSyc.mft (raw, json)
Hash identifier:          c5nu174Ds0agsWh8D8AzSVXlZAtuYB4k95b0lPhQ6M8=
Subject key identifier:   EC:0D:07:43:8E:7F:6F:06:28:42:2B:AC:04:62:AC:1F:85:1C:CA:AB
Authority key identifier: 83:29:C9:13:87:58:DF:E8:BA:12:35:EE:0E:C7:D9:B6:58:9F:4B:27
Certificate issuer:       /CN=8329c9138758dfe8ba1235ee0ec7d9b6589f4b27
Certificate serial:       019D27E05D39C77F0F2685321590EAFBA21F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft
Manifest number:          0871
Signing time:             Thu 26 Mar 2026 02:01:48 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:48 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:48 +0000
Files and hashes:         1: PYRVlO-jN4cauhkJtjiu69BHf7g.roa (hash: KzLhCQkDAQ9keU3NpLY3q6k73UjDZ8YfyF1YN3DhJDg=)
                          2: gynJE4dY3-i6EjXuDsfZtlifSyc.crl (hash: o37xAEgQ+hPBSoBYWgl/IbPH8UQxEv1IGWDoCDM0eTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:5d:39:c7:7f:0f:26:85:32:15:90:ea:fb:a2:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8329c9138758dfe8ba1235ee0ec7d9b6589f4b27
        Validity
            Not Before: Mar 26 02:01:48 2026 GMT
            Not After : Mar 27 02:01:48 2026 GMT
        Subject: CN=ec0d07438e7f6f0628422bac0462ac1f851ccaab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bd:f2:ef:58:76:7e:be:72:a1:b4:81:2b:ea:
                    bc:b4:1c:bc:65:5e:f8:ea:7a:28:d7:b6:a0:80:d1:
                    ba:33:39:ac:e6:51:45:41:22:f1:34:5a:68:a2:a5:
                    15:5f:c0:6d:24:cb:01:35:47:ea:ee:1e:6e:65:71:
                    b3:4a:07:01:eb:34:1d:41:dd:3e:17:0c:7a:fc:ef:
                    4c:6d:f3:de:38:a1:5b:77:26:54:90:c9:0f:20:f7:
                    36:28:8a:62:47:0e:d3:ab:68:08:cb:94:52:dc:cf:
                    8f:47:d0:a4:00:37:79:b1:12:b0:90:02:a3:0a:c9:
                    c2:4b:fe:51:5a:96:4b:94:af:ce:23:f1:3e:7f:d1:
                    26:ca:3e:bc:07:fc:8d:0f:36:44:83:5b:ed:7a:57:
                    64:c0:9d:87:49:4d:8c:89:2b:d1:2d:a4:80:71:50:
                    d4:3f:77:cb:43:82:1e:75:b2:a5:45:69:da:7b:71:
                    29:eb:54:6c:ea:72:08:9d:6d:bb:6c:c8:fe:75:19:
                    e7:3a:da:6c:93:6e:2f:4a:68:a4:05:2d:03:25:54:
                    b8:0c:c7:e3:31:f3:b7:9f:3b:f3:d6:4e:c0:62:11:
                    79:56:43:9e:91:f3:f9:41:8d:0b:a9:8e:3e:19:cf:
                    ba:8f:1f:c6:9b:69:2c:f8:77:9d:fb:0d:5e:f3:ee:
                    3e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0D:07:43:8E:7F:6F:06:28:42:2B:AC:04:62:AC:1F:85:1C:CA:AB
            X509v3 Authority Key Identifier:
                keyid:83:29:C9:13:87:58:DF:E8:BA:12:35:EE:0E:C7:D9:B6:58:9F:4B:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:3d:69:0e:ca:94:36:38:66:4f:fc:d1:2e:7b:f0:74:e3:ce:
         3e:12:e9:15:5f:03:ab:62:ee:e8:2a:d3:49:4a:3f:4d:8b:fa:
         71:9f:41:3d:06:fc:92:47:93:f9:0d:df:26:b1:6d:7a:46:45:
         e0:8f:32:9a:46:92:71:b0:30:7f:c6:9b:a4:f8:67:ea:02:cc:
         29:58:05:86:09:60:aa:3b:fe:99:23:49:13:b1:13:e7:50:68:
         90:a9:24:c6:96:be:3c:ef:61:42:b2:00:77:da:99:08:79:71:
         2a:63:b2:2b:2f:62:c6:47:70:4e:2a:e1:a0:79:45:be:1d:9a:
         46:0a:20:42:92:ae:43:6f:57:7e:e6:e2:28:15:f6:1e:d6:08:
         ef:07:24:e1:f3:6b:d0:a7:ab:bd:9f:23:83:20:85:70:b2:65:
         60:95:fa:ee:cd:f6:40:bd:cc:d3:21:9d:d7:19:34:11:e5:11:
         45:e2:25:4b:5c:8d:14:15:05:f9:c3:7f:72:a4:d7:03:19:76:
         f4:af:ff:8e:cf:8b:92:f9:fc:17:3b:4f:d3:a4:22:4d:e7:50:
         78:44:a6:22:f5:ab:4e:b7:1b:b6:12:07:99:2a:83:cf:0e:83:
         f1:9f:6a:4f:ba:e0:43:fd:79:5d:5a:f0:7d:60:67:bc:c0:da:
         2e:41:50:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:56 2026 by rpki-client