Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
File:                     gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft (raw, json)
Hash identifier:          abs6APPMmqJ9S/KIi5pZWL8F8Khfnp47qsooXnubG6U=
Subject key identifier:   75:E4:08:BF:43:7D:23:50:DD:56:4D:05:DD:6E:A3:FE:62:BC:10:B5
Authority key identifier: 83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
Certificate issuer:       /CN=830555f011be5e241eb0b425de5fd86cc6834a54
Certificate serial:       019D299713BDF8863073175C78010634825C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 10:00:59 +0000
Manifest this update:     Thu 26 Mar 2026 10:00:59 +0000
Manifest next update:     Fri 27 Mar 2026 10:00:59 +0000
Files and hashes:         1: HKGatfk6oGFkC2zfjCu8mblRssI.roa (hash: S6ZotY5E9t/FLq5dfSr9cTUufNdOhOYR8EgFCPMUcus=)
                          2: cXOHYWy0-7WUBhjTzP2yi-7Q4SU.roa (hash: p+uHzH3gdQcuGHFOcwVTN/fHDrzadai+XLOUDXJnLlE=)
                          3: gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl (hash: kdQNOj7sCNlbdDEMfEzL1TblNdkVdEzkiqDD6eoicvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:13:bd:f8:86:30:73:17:5c:78:01:06:34:82:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830555f011be5e241eb0b425de5fd86cc6834a54
        Validity
            Not Before: Mar 26 10:00:59 2026 GMT
            Not After : Mar 27 10:00:59 2026 GMT
        Subject: CN=75e408bf437d2350dd564d05dd6ea3fe62bc10b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8a:d7:8a:e9:59:17:c5:78:f5:75:66:67:0a:
                    0d:63:3c:d9:9c:9e:60:76:e8:34:99:78:d2:1e:7e:
                    e1:b0:93:23:5b:df:59:fd:b3:84:36:4b:c1:cc:1c:
                    8f:5a:89:b9:5f:7f:58:61:21:99:b9:6c:be:e4:e0:
                    15:d2:5c:5d:05:39:6d:d8:43:0a:87:8a:d1:10:60:
                    89:a9:95:b3:8e:c8:ca:f5:09:6e:82:19:eb:fa:9f:
                    cf:ed:22:97:74:99:80:5e:c5:b9:1b:30:ea:d3:2d:
                    ec:aa:a4:7e:27:1e:f7:8e:b2:d1:a8:49:aa:b6:c7:
                    62:14:73:bd:01:65:3e:0c:3e:90:13:ec:cc:0d:86:
                    8b:87:29:73:b3:fc:37:ad:9f:5b:d4:ae:52:4d:1a:
                    41:7e:26:5d:cd:bf:b1:69:15:5f:dc:63:dd:05:76:
                    45:4e:4b:72:c3:fb:07:f0:c7:cc:83:12:6c:97:e6:
                    28:66:29:a7:01:3b:20:e8:4f:b9:97:00:22:d9:0a:
                    ba:3c:b8:e9:a1:ec:9f:99:14:66:8d:80:a6:6a:82:
                    f8:58:2a:8c:7a:7f:20:29:ef:cb:65:b9:d1:dc:bc:
                    1b:96:b9:43:b1:74:cf:af:83:44:e9:18:ea:5a:e4:
                    ad:81:2d:88:ee:9c:9a:4f:2e:e0:8b:7b:0b:b9:f4:
                    66:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E4:08:BF:43:7D:23:50:DD:56:4D:05:DD:6E:A3:FE:62:BC:10:B5
            X509v3 Authority Key Identifier:
                keyid:83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:c8:35:e3:d8:df:30:44:02:07:1a:1c:c8:7e:47:02:a0:7f:
         c3:05:d5:ba:c2:b8:82:8e:bb:49:78:5a:4e:44:9f:4c:27:4e:
         8a:c4:72:1a:8b:f6:f6:36:6c:41:be:76:b9:5c:51:75:cf:70:
         af:b9:f0:33:0c:f7:6b:22:28:2a:02:af:52:06:20:32:d1:19:
         c5:fe:15:e3:a7:b3:bb:e1:9d:5c:75:28:5f:d0:87:69:17:72:
         eb:cf:e8:ae:1d:3c:da:63:c1:ec:8b:81:c8:72:7d:a6:6b:cd:
         72:8e:cb:8f:85:b6:7e:c3:69:aa:c2:40:e9:dc:92:8c:fc:0d:
         62:69:1e:3c:71:92:db:0d:a5:98:a2:44:31:60:de:36:a4:f0:
         a2:bd:14:0e:34:40:98:44:e7:33:3e:95:b9:23:5a:3e:3a:02:
         06:0e:20:b3:77:a4:cd:ac:41:b8:53:c8:2f:b5:18:e5:70:88:
         5a:af:2a:4d:70:da:cb:3d:3e:98:0b:61:5c:5f:d9:d1:30:73:
         35:2c:67:a0:5e:62:c2:48:79:b0:3f:ed:29:15:8d:91:65:40:
         5a:42:a5:11:75:48:bc:f2:f0:13:56:22:34:cc:04:5d:c8:dc:
         5a:f7:ab:9a:70:68:0e:e9:51:86:dc:8b:ab:78:78:ba:36:4a:
         59:ac:3e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:08:38 2026 by rpki-client