Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File:                     gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier:          OzPrZmIfaS37qqDVE10R9nJW4/zf2tTQxg2NpsJB4QQ=
Subject key identifier:   2F:97:41:28:44:B8:BA:AA:F8:87:BA:05:83:5B:65:DF:82:B6:A9:BD
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer:       /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial:       019D2C97DC34BEC07F7DD4265BB53D7A2129
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number:          188B
Signing time:             Fri 27 Mar 2026 00:00:42 +0000
Manifest this update:     Fri 27 Mar 2026 00:00:42 +0000
Manifest next update:     Sat 28 Mar 2026 00:00:42 +0000
Files and hashes:         1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: 7MKfVNtRUqXh05T4CSks5mFq3H3RLr3Y0wf7uIOIs9E=)
                          2: zXFwqAAnYrIjiWd8TXgaxxMmw0s.roa (hash: Ovzx2APxYoxGQIUTR5wFv0olnXJaY9uRnLcnYqntG64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2c:97:dc:34:be:c0:7f:7d:d4:26:5b:b5:3d:7a:21:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
        Validity
            Not Before: Mar 27 00:00:42 2026 GMT
            Not After : Mar 28 00:00:42 2026 GMT
        Subject: CN=2f97412844b8baaaf887ba05835b65df82b6a9bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:28:d1:82:5f:58:d5:0e:34:aa:81:23:95:27:
                    8b:ae:85:4a:b3:22:d2:e4:ca:fe:09:7f:c1:3d:ae:
                    dc:57:68:93:f0:68:7b:10:c1:4f:18:ba:4b:71:3f:
                    f5:29:87:07:7b:3a:4a:f7:58:bf:94:60:ae:2e:93:
                    30:11:05:3c:9a:39:3e:2d:d6:fc:ad:44:f8:4b:f7:
                    fb:59:a6:1e:28:99:16:47:bf:b9:dc:11:ea:0e:c8:
                    c8:32:d5:61:37:0c:91:40:63:58:bb:55:cd:3e:c4:
                    1c:8c:10:e2:8c:af:2b:5f:45:6e:82:f6:dc:b3:8b:
                    05:c6:da:9f:bf:9b:3b:e9:56:92:78:fb:5e:5e:ec:
                    ad:9d:c8:38:b1:7f:42:5f:74:8c:77:b8:77:84:f0:
                    b9:aa:02:27:2c:b4:30:8e:7e:10:61:5f:60:99:87:
                    c2:25:af:b0:82:b2:ab:39:b4:32:f9:b7:4d:22:2f:
                    e2:30:a7:0a:5b:cd:d2:1d:28:1f:49:fa:b6:02:b8:
                    74:01:99:d3:aa:1e:91:e4:db:31:36:4d:8f:2b:40:
                    8b:b3:4b:cd:e7:46:35:57:e7:da:03:ee:fc:b4:08:
                    73:6a:d8:aa:9f:e8:07:eb:db:53:9a:87:cc:f6:fa:
                    90:cc:31:99:cd:b0:73:b0:36:05:2e:13:17:39:49:
                    da:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:97:41:28:44:B8:BA:AA:F8:87:BA:05:83:5B:65:DF:82:B6:A9:BD
            X509v3 Authority Key Identifier:
                keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:3f:9c:8b:2b:da:4d:a6:9e:48:b7:71:a6:13:4a:50:bd:f5:
         d7:8b:b4:1d:a4:bc:85:19:c6:24:db:6b:bb:80:98:4f:b9:f7:
         49:aa:45:0e:b6:90:bb:4e:fd:1e:fe:8c:ac:ae:c8:17:86:89:
         7c:00:15:a3:3e:fa:4c:90:a0:b1:c2:15:e8:66:ee:08:9a:4a:
         c6:73:68:55:5f:82:25:2f:03:50:61:98:cd:b1:32:5a:b5:32:
         d2:1f:b3:31:38:7b:03:a2:db:4f:84:ee:46:aa:89:e0:49:3a:
         fd:85:82:56:9e:09:f2:31:32:d5:1f:e7:22:84:4d:20:87:c3:
         00:6d:00:34:e2:8a:cd:c1:9f:6f:dd:6c:c1:f4:82:60:19:4f:
         d3:e7:1a:9b:99:fd:e3:46:8d:52:f1:3b:e4:78:c6:68:40:b3:
         42:70:5b:bf:0c:9d:d9:37:c8:f3:b3:cd:eb:83:b4:9a:ec:ba:
         e6:48:69:e3:0e:8e:df:c1:9d:98:bf:e9:c3:8f:36:c6:1b:00:
         69:2f:d7:34:7b:99:7a:38:f1:43:b5:9c:ad:40:26:8d:01:ef:
         82:1b:87:97:f1:95:bf:f3:1d:ab:63:80:35:8a:b2:5d:fd:8f:
         cd:8e:af:1e:21:cf:1d:bf:06:42:a4:59:ed:37:cc:c4:7f:72:
         a2:1a:e0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:26:00 2026 by rpki-client