Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft
File:                     G5gog-Hfv0Yz4IwLWMheif_DIQE.mft (raw, json)
Hash identifier:          oiwzX/Wiu7PZdJ245wMEIo0V+xwDaDxf5zDl/wXsQPU=
Subject key identifier:   0F:83:8F:E5:C5:81:12:2E:99:F8:50:F7:7A:1B:61:9E:FB:14:F3:22
Authority key identifier: 1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01
Certificate issuer:       /CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
Certificate serial:       019D28BB12EFBC71C261BA70EEC52A62B71C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft
Manifest number:          0DDB
Signing time:             Thu 26 Mar 2026 06:00:41 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:41 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:41 +0000
Files and hashes:         1: 4-Kuyhra6Pj-z2hUF16HkaHj9uU.roa (hash: R5niomc2n1HE4RWyhi6lkmKstzQAGxfES0erD2zkkYw=)
                          2: G5gog-Hfv0Yz4IwLWMheif_DIQE.crl (hash: ktRAIh7PESGJLm0VOT/KsCc7OecNYlsj5EkGAFTAhb0=)
                          3: USxwvtYXB02UPNM09473LfzB5NQ.roa (hash: 56e1A04HmFY5l3wfjt2AxhdeII10Vyl+eKvMEFFPfGM=)
                          4: wZmbsUs_zMKDhyYysQ150aHCark.roa (hash: E/PsEmFmpmX2u5lDiUuhxf7JjZYZ6hXTzvmHbRmdJEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:12:ef:bc:71:c2:61:ba:70:ee:c5:2a:62:b7:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
        Validity
            Not Before: Mar 26 06:00:41 2026 GMT
            Not After : Mar 27 06:00:41 2026 GMT
        Subject: CN=0f838fe5c581122e99f850f77a1b619efb14f322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:32:eb:5e:87:02:6d:12:38:ab:57:fc:ac:d7:
                    7e:41:ee:26:06:4f:f3:b8:9b:b6:9e:ee:dd:41:99:
                    83:07:6a:1d:7e:d3:b0:e5:8f:bf:9e:d5:b8:23:59:
                    be:21:f5:05:13:19:61:d2:6c:1c:e3:1d:75:ed:f9:
                    7e:95:2a:8a:f7:9a:87:e7:22:a3:6d:53:f8:b6:d7:
                    0c:8d:f3:da:3e:19:57:b7:27:d9:02:c5:e7:c1:d9:
                    d6:84:0a:8a:36:c5:e0:e7:21:93:74:bf:14:46:f6:
                    7f:5c:74:5a:51:a6:0d:41:18:e2:f7:be:44:3a:d4:
                    1b:47:b6:c6:3c:3e:58:c6:4a:55:21:c9:b7:f0:05:
                    9c:cd:13:a8:96:8f:46:1f:30:86:21:b2:8d:13:11:
                    47:6c:7f:e0:40:89:81:dc:57:39:86:ed:da:08:e7:
                    b0:e7:1b:bf:8f:2e:37:f6:d5:d5:fe:3b:33:2c:de:
                    2e:00:ca:df:5a:bc:44:cd:b2:d2:73:27:27:ab:c6:
                    11:d3:22:9f:9e:ee:b3:7c:12:e5:05:b9:a0:0e:48:
                    ad:95:5a:a0:9c:93:3c:6c:70:2b:5b:d4:a2:2c:d2:
                    67:73:f6:4e:2d:0d:41:8b:d3:d2:e8:15:77:70:13:
                    57:1e:9f:3b:39:33:8c:f6:62:81:fe:32:7f:7f:cd:
                    3a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:83:8F:E5:C5:81:12:2E:99:F8:50:F7:7A:1B:61:9E:FB:14:F3:22
            X509v3 Authority Key Identifier:
                keyid:1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a7:f3:03:6a:ef:d8:d8:09:8d:00:17:0e:ac:27:81:4d:e3:
         ca:a0:25:cb:3d:f2:fa:ab:b8:9f:24:d8:af:57:67:ab:c9:34:
         64:75:03:a8:7d:6d:8d:0a:44:99:ab:27:96:f2:1f:c6:4d:75:
         70:b6:00:e7:b5:6e:b6:c1:b7:f2:b9:a4:87:f3:a2:30:46:6d:
         25:df:e7:79:22:54:1a:91:9d:6e:b8:31:ac:26:8d:02:eb:f2:
         4a:57:fd:fe:6e:b7:b3:28:49:81:fb:0b:1a:7c:eb:2e:c3:ac:
         7b:a7:b2:4e:0f:a4:bf:7e:b2:84:e4:dd:3e:d8:a1:5c:00:2f:
         2e:5b:d0:bb:70:46:82:2f:78:a7:da:be:5c:65:19:bc:00:e4:
         fb:ab:24:08:01:c5:8d:c4:11:a8:97:d7:04:4c:2f:9c:59:5e:
         bf:1c:2c:26:42:93:c9:1d:61:59:2f:26:35:fd:44:9c:7a:37:
         83:85:ea:4e:01:a4:74:4b:01:de:0c:94:37:10:bb:b3:9c:56:
         e6:19:ec:f6:35:c3:e5:d4:dd:de:22:b5:83:88:1c:96:b0:1a:
         b3:c7:41:5c:ff:e2:14:8e:68:d5:fc:f6:70:96:e8:5e:86:2d:
         7a:7f:58:de:97:37:5c:4d:be:0a:cd:b9:46:aa:f3:3f:34:83:
         36:50:2b:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouxLvvHHCYbpw7sUqYrccMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOTgyODgzZTFkZmJmNDYzM2UwOGMwYjU4Yzg1ZTg5ZmZj
MzIxMDEwHhcNMjYwMzI2MDYwMDQxWhcNMjYwMzI3MDYwMDQxWjAzMTEwLwYDVQQD
EygwZjgzOGZlNWM1ODExMjJlOTlmODUwZjc3YTFiNjE5ZWZiMTRmMzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTLrXocCbRI4q1f8rNd+Qe4mBk/z
uJu2nu7dQZmDB2odftOw5Y+/ntW4I1m+IfUFExlh0mwc4x117fl+lSqK95qH5yKj
bVP4ttcMjfPaPhlXtyfZAsXnwdnWhAqKNsXg5yGTdL8URvZ/XHRaUaYNQRji975E
OtQbR7bGPD5YxkpVIcm38AWczROolo9GHzCGIbKNExFHbH/gQImB3Fc5hu3aCOew
5xu/jy439tXV/jszLN4uAMrfWrxEzbLScycnq8YR0yKfnu6zfBLlBbmgDkitlVqg
nJM8bHArW9SiLNJnc/ZOLQ1Bi9PS6BV3cBNXHp87OTOM9mKB/jJ/f8060QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+Dj+XFgRIumfhQ93obYZ77FPMiMB8GA1UdIwQY
MBaAFBuYKIPh379GM+CMC1jIXon/wyEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzVnb2ctSGZ2MFl6NEl3TFdNaGVpZl9ESVFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81Nzg2MGEtZGQ1ZS00NmU4LTllY2It
ZDA3OGVlYzgyYjJhLzEvRzVnb2ctSGZ2MFl6NEl3TFdNaGVpZl9ESVFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS81Nzg2MGEtZGQ1ZS00NmU4LTllY2ItZDA3OGVlYzgyYjJh
LzEvRzVnb2ctSGZ2MFl6NEl3TFdNaGVpZl9ESVFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6fzA2rv
2NgJjQAXDqwngU3jyqAlyz3y+qu4nyTYr1dnq8k0ZHUDqH1tjQpEmasnlvIfxk11
cLYA57VutsG38rmkh/OiMEZtJd/neSJUGpGdbrgxrCaNAuvySlf9/m63syhJgfsL
GnzrLsOse6eyTg+kv36yhOTdPtihXAAvLlvQu3BGgi94p9q+XGUZvADk+6skCAHF
jcQRqJfXBEwvnFlevxwsJkKTyR1hWS8mNf1EnHo3g4XqTgGkdEsB3gyUNxC7s5xW
5hns9jXD5dTd3iK1g4gclrAas8dBXP/iFI5o1fz2cJboXoYten9Y3pc3XE2+Cs25
RqrzPzSDNlArBw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:17 2026 by rpki-client