Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft
File:                     gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft (raw, json)
Hash identifier:          muT7P9AJdIUz+xDNvgnJzHrH9wGVpYC1aQ+A5Q2oa4g=
Subject key identifier:   E2:B5:B7:FD:D2:1B:7F:92:9E:6D:64:DF:86:56:C9:B2:11:63:2E:E5
Authority key identifier: 83:07:6F:3A:B3:EF:AA:63:28:F0:A3:8F:CF:4A:7F:96:30:04:B7:77
Certificate issuer:       /CN=83076f3ab3efaa6328f0a38fcf4a7f963004b777
Certificate serial:       019D25BA5A5912A1EE0CEA7A8076C9C7FD03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft
Manifest number:          1885
Signing time:             Wed 25 Mar 2026 16:01:02 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:02 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:02 +0000
Files and hashes:         1: 2gOdZT77SlZQ7SMis2YKPnVu3ew.roa (hash: vi5xO2zmTTExWg1kG+TvdmGj6rlu4A+rOB43H/1OzD4=)
                          2: gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl (hash: eLYfx82vmM0CfiNLBuae3GHEHganwgAyg82fkzVBAb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:5a:59:12:a1:ee:0c:ea:7a:80:76:c9:c7:fd:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83076f3ab3efaa6328f0a38fcf4a7f963004b777
        Validity
            Not Before: Mar 25 16:01:02 2026 GMT
            Not After : Mar 26 16:01:02 2026 GMT
        Subject: CN=e2b5b7fdd21b7f929e6d64df8656c9b211632ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c2:84:3f:28:e6:82:8f:78:dd:a5:d6:9f:e0:
                    b2:65:95:06:e7:31:aa:3c:cb:f3:fd:2d:03:d6:f0:
                    24:44:dd:cf:f1:34:78:bd:8f:20:41:e0:a8:30:8b:
                    d6:76:ec:c0:d7:78:83:01:70:67:c6:f8:d7:b4:83:
                    e1:7f:46:51:04:1a:c1:44:25:9a:1d:d0:a8:38:82:
                    43:85:cf:b9:67:a8:51:9f:77:ca:f9:7b:3c:d9:9b:
                    6a:ba:aa:dc:4c:24:f1:f1:65:83:ef:52:b7:2f:d0:
                    af:ba:19:42:1a:64:cf:7f:d7:b3:1d:50:80:42:68:
                    bc:6c:6b:a0:b1:d4:0e:6f:0e:0f:f2:29:81:05:96:
                    b2:17:09:34:18:3e:7a:fb:24:75:17:1f:c9:dd:7f:
                    5d:d1:61:4f:c0:94:d7:06:ca:a2:d5:dc:93:71:ba:
                    e4:3d:14:32:13:ca:71:3d:f1:f2:ca:0c:8c:6e:3f:
                    48:1c:5b:bb:30:9f:ef:fe:10:43:49:1b:06:6e:b5:
                    d6:39:5a:87:4f:65:dc:c8:be:e7:66:f1:68:3d:0c:
                    56:4e:ec:5d:c3:12:85:4e:bf:8a:47:16:0c:36:c3:
                    fb:4d:54:3a:c9:f9:23:2a:e3:58:85:4e:c6:48:22:
                    89:41:63:14:3c:4e:64:6f:fc:69:67:8a:84:9d:5b:
                    cc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B5:B7:FD:D2:1B:7F:92:9E:6D:64:DF:86:56:C9:B2:11:63:2E:E5
            X509v3 Authority Key Identifier:
                keyid:83:07:6F:3A:B3:EF:AA:63:28:F0:A3:8F:CF:4A:7F:96:30:04:B7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:36:ef:ad:26:6f:45:26:5e:a0:a0:89:a2:f9:a8:86:1e:15:
         b3:c5:42:00:2e:b7:47:96:75:30:51:ae:b1:45:e2:a0:d1:b0:
         db:cf:9f:55:8b:03:58:72:55:59:b5:e6:fa:72:c2:08:d2:80:
         15:5f:83:9e:5f:28:4e:14:bc:ba:a7:09:66:fe:e2:52:7d:6d:
         3c:c2:17:b2:d5:9f:f9:e6:a5:dc:f1:94:04:d5:25:50:4f:fc:
         d8:a9:c4:0b:92:17:85:d7:32:2a:49:47:ec:ba:d4:ea:d4:51:
         44:e3:ba:f3:2d:8a:64:b4:d7:e5:8f:17:de:54:2a:13:27:9f:
         29:2e:25:2f:36:12:f3:0c:6d:69:56:e8:47:c1:02:ef:fb:20:
         b1:87:d5:04:ae:f6:5a:72:1f:1f:8d:3d:e9:e7:fa:03:c3:22:
         67:5f:47:0f:76:5c:ee:fd:29:01:2f:3b:02:cf:4e:65:c0:a5:
         f9:fc:25:5b:48:fe:e9:a5:f6:8c:fe:5f:c3:a9:00:7c:60:c9:
         df:f9:4e:a8:95:16:75:81:03:f9:09:39:37:93:cb:54:5a:ca:
         a3:d0:86:42:f8:e1:a7:3d:39:9a:6f:b9:b7:ed:c3:a9:63:90:
         78:18:a1:7d:ea:82:6d:14:f8:38:2f:1e:f3:1f:d4:d7:51:0c:
         a2:24:bb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:22 2026 by rpki-client