Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
File:                     GpOEm_8zffi4sL0a4lLuYRnYph8.mft (raw, json)
Hash identifier:          erkRZKHuRt1v7qiXji7nqp0h/RiuQ9gKt2pQSnflQuo=
Subject key identifier:   0E:70:5C:93:6B:36:3A:03:3D:9B:87:BF:09:32:0C:FF:59:59:D4:06
Authority key identifier: 1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F
Certificate issuer:       /CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f
Certificate serial:       019D26CD8260D72C3ACFA05DE000214E2B6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
Manifest number:          188A
Signing time:             Wed 25 Mar 2026 21:01:35 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:35 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:35 +0000
Files and hashes:         1: GpOEm_8zffi4sL0a4lLuYRnYph8.crl (hash: eKL50WUbbXOBvOw7989FPTay1vkcEkgwA1jW6dyjCuk=)
                          2: cKcEH95-xZkMRq9n8qxJQ8taC0I.roa (hash: 5CGu3gKojPJu4bccEdLgCE4zbwffs6jrhAuLccKD0VM=)
                          3: qOGZnmJn9twBLNZ-YPGtBuaarUA.roa (hash: 8dGXa2ecQGk4C5r7XMrelqu+XdDeVoRN8xB6oD32Evs=)
                          4: r7k-qYwu_gVhVP_qzP1I3k06xN8.roa (hash: Qmj2gAagugrdnVz/mHy0g80G5C8fPaZdzMVSJwy2cLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:82:60:d7:2c:3a:cf:a0:5d:e0:00:21:4e:2b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f
        Validity
            Not Before: Mar 25 21:01:35 2026 GMT
            Not After : Mar 26 21:01:35 2026 GMT
        Subject: CN=0e705c936b363a033d9b87bf09320cff5959d406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:55:4f:de:ed:cb:cd:66:07:c3:e4:66:16:d8:
                    84:49:1b:5d:d9:cd:13:4a:5a:66:03:b4:f4:8d:98:
                    ee:fd:13:5d:01:0c:c9:fe:fe:42:15:e5:3c:72:4f:
                    b2:99:d8:ff:5a:cc:90:58:a0:2b:07:0e:67:61:6a:
                    fa:5a:43:5e:d8:b1:76:14:33:aa:37:21:16:db:d3:
                    32:d0:7e:83:d1:86:d0:c7:ba:5f:91:b4:e1:c0:31:
                    d2:6b:bf:57:a6:93:06:d7:16:66:f1:26:f3:69:0f:
                    92:a8:91:f0:9d:80:4d:30:7b:f0:dc:13:d9:7f:3f:
                    4d:27:9a:93:08:7b:82:20:43:0e:d4:30:88:8a:15:
                    ad:32:77:15:50:29:87:31:87:40:86:4f:87:6e:be:
                    07:3e:b6:ff:01:09:1d:9f:6c:1f:be:a4:96:e6:cb:
                    1c:1b:3a:07:30:36:a4:15:94:c8:2c:71:0b:98:9a:
                    d6:6b:c9:18:12:47:76:df:ac:6b:52:57:6f:43:ad:
                    3a:69:63:14:94:bc:44:f5:56:8f:38:7f:9c:ff:9e:
                    27:26:b6:5f:f0:ba:bb:dd:0d:ac:59:c0:ec:ec:95:
                    2b:12:63:fb:22:ef:9b:d6:88:1c:ae:c4:c1:9f:90:
                    69:b2:81:5a:92:da:23:bd:3a:d2:1b:ac:fc:10:0d:
                    bf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:70:5C:93:6B:36:3A:03:3D:9B:87:BF:09:32:0C:FF:59:59:D4:06
            X509v3 Authority Key Identifier:
                keyid:1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:25:37:63:59:c8:95:55:ed:7e:cf:1b:8e:5e:10:de:ec:d8:
         9d:42:71:5c:6c:dd:ff:b5:de:ae:b3:9e:e8:03:b5:a8:99:26:
         fe:a3:fe:0a:1a:0f:eb:1b:e3:95:75:58:00:14:af:23:86:c4:
         ec:41:0a:30:78:8b:ee:97:4b:f5:6a:0d:07:1e:3f:cf:88:58:
         5c:33:be:81:12:bb:11:5c:bc:5c:c3:36:7d:a2:af:50:e4:28:
         76:cc:ac:e2:d6:32:ee:d3:bb:a0:b1:ad:3a:1a:2d:96:d7:45:
         61:5d:b0:81:62:dd:71:1d:56:5f:6e:81:fa:93:2b:55:23:60:
         6f:6c:9e:b7:ce:64:66:aa:3f:7a:52:86:38:c2:6d:cc:e9:53:
         5d:c6:6b:b7:25:ed:a6:dd:2d:97:c4:eb:9d:98:c5:cd:8f:36:
         63:40:e5:ed:55:e5:72:53:ae:17:32:c2:7e:f2:7b:77:33:7c:
         2a:d9:13:95:c0:68:54:43:48:08:6f:20:c4:ee:14:e0:5c:e6:
         eb:7c:f0:8b:4a:6e:25:ad:7d:7d:3a:d0:42:01:e9:2b:fd:c3:
         d8:af:9b:69:36:b4:21:bd:54:82:03:a6:4c:13:42:3d:99:5b:
         d7:cd:21:22:06:70:cc:fd:97:2a:a5:44:58:fd:b2:c4:69:55:
         5c:45:c1:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzYJg1yw6z6Bd4AAhTitqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhOTM4NDliZmYzMzdkZjhiOGIwYmQxYWUyNTJlZTYxMTlk
OGE2MWYwHhcNMjYwMzI1MjEwMTM1WhcNMjYwMzI2MjEwMTM1WjAzMTEwLwYDVQQD
EygwZTcwNWM5MzZiMzYzYTAzM2Q5Yjg3YmYwOTMyMGNmZjU5NTlkNDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31VP3u3LzWYHw+RmFtiESRtd2c0T
SlpmA7T0jZju/RNdAQzJ/v5CFeU8ck+ymdj/WsyQWKArBw5nYWr6WkNe2LF2FDOq
NyEW29My0H6D0YbQx7pfkbThwDHSa79XppMG1xZm8SbzaQ+SqJHwnYBNMHvw3BPZ
fz9NJ5qTCHuCIEMO1DCIihWtMncVUCmHMYdAhk+Hbr4HPrb/AQkdn2wfvqSW5ssc
GzoHMDakFZTILHELmJrWa8kYEkd236xrUldvQ606aWMUlLxE9VaPOH+c/54nJrZf
8Lq73Q2sWcDs7JUrEmP7Iu+b1ogcrsTBn5BpsoFaktojvTrSG6z8EA2/DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5wXJNrNjoDPZuHvwkyDP9ZWdQGMB8GA1UdIwQY
MBaAFBqThJv/M334uLC9GuJS7mEZ2KYfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3BPRW1fOHpmZmk0c0wwYTRsTHVZUm5ZcGg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9kNDQ5N2EtMTFmMi00OWFjLWFlZjkt
NDNlNjdkNWQwYTg1LzEvR3BPRW1fOHpmZmk0c0wwYTRsTHVZUm5ZcGg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9kNDQ5N2EtMTFmMi00OWFjLWFlZjktNDNlNjdkNWQwYTg1
LzEvR3BPRW1fOHpmZmk0c0wwYTRsTHVZUm5ZcGg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyU3Y1nI
lVXtfs8bjl4Q3uzYnUJxXGzd/7XerrOe6AO1qJkm/qP+ChoP6xvjlXVYABSvI4bE
7EEKMHiL7pdL9WoNBx4/z4hYXDO+gRK7EVy8XMM2faKvUOQodsys4tYy7tO7oLGt
OhotltdFYV2wgWLdcR1WX26B+pMrVSNgb2yet85kZqo/elKGOMJtzOlTXcZrtyXt
pt0tl8TrnZjFzY82Y0Dl7VXlclOuFzLCfvJ7dzN8KtkTlcBoVENICG8gxO4U4Fzm
63zwi0puJa19fTrQQgHpK/3D2K+baTa0Ib1UggOmTBNCPZlb180hIgZwzP2XKqVE
WP2yxGlVXEXBTQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:36 2026 by rpki-client