Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
File:                     Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft (raw, json)
Hash identifier:          H/A2Xmx8cb4JuRnJQhBQkYn1EdGfiY73/7nbc9l/oFQ=
Subject key identifier:   31:89:9B:47:D0:46:EA:30:D7:B1:05:41:38:66:70:26:A0:77:1A:B9
Authority key identifier: 1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
Certificate issuer:       /CN=1a9b70ef99760a0659deaefa660345a0e6115423
Certificate serial:       019D273B1F4EAF7BC3325C6726F3D32552A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
Manifest number:          1818
Signing time:             Wed 25 Mar 2026 23:01:19 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:19 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:19 +0000
Files and hashes:         1: Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl (hash: QSyCjPCmNK3pyc5FDUk/Ap2P7zhPpl76LUvkNQ8sDS4=)
                          2: ZohyHfqFv67z4908u3_QeIT8zVw.roa (hash: F/BjQl+7N2tQfUywKhEzc2DzriEJ3gerXgEGzUTdIDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:1f:4e:af:7b:c3:32:5c:67:26:f3:d3:25:52:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a9b70ef99760a0659deaefa660345a0e6115423
        Validity
            Not Before: Mar 25 23:01:19 2026 GMT
            Not After : Mar 26 23:01:19 2026 GMT
        Subject: CN=31899b47d046ea30d7b1054138667026a0771ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2f:03:a0:f4:cc:57:ae:84:24:ec:78:6b:20:
                    78:51:3f:0d:aa:18:5b:83:86:cb:1d:81:58:ca:89:
                    b6:71:1e:d0:a7:39:0f:a2:17:55:45:91:1f:62:11:
                    90:af:62:ef:b4:65:66:e1:5d:0e:64:fe:72:65:ba:
                    84:1e:1e:fc:bd:ed:f6:9c:a8:bd:20:06:ee:7e:89:
                    c6:23:f7:5c:dd:66:f9:db:74:1c:c9:a2:f5:56:d9:
                    3c:ca:12:2f:2b:30:e6:12:14:a8:32:0e:d2:51:c0:
                    18:14:6b:55:95:d6:b7:c0:1d:8e:81:09:be:41:8f:
                    ae:7b:c7:0c:a6:ff:3d:a4:b3:ba:af:89:57:00:d4:
                    b4:85:e1:77:7a:30:56:b7:ce:d6:5a:34:1e:bd:fa:
                    98:94:a4:97:3e:a5:56:22:0f:60:ef:c8:c9:34:73:
                    bc:f8:87:30:68:a9:d3:f3:c7:aa:43:3c:d7:91:8f:
                    4b:88:fc:55:fb:73:60:3d:a8:38:d3:ea:f3:f0:c1:
                    49:63:7a:14:38:6a:1d:f6:4d:c6:f5:38:34:87:c5:
                    35:7f:00:8d:9b:5a:e3:0a:3b:a1:2e:6c:e4:fe:66:
                    78:04:54:e9:81:9c:cf:f8:11:44:43:52:9e:0f:04:
                    bd:08:2c:4b:52:43:3e:cb:96:f5:ef:0f:91:3d:0a:
                    a9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:89:9B:47:D0:46:EA:30:D7:B1:05:41:38:66:70:26:A0:77:1A:B9
            X509v3 Authority Key Identifier:
                keyid:1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c4:12:4d:89:89:51:8e:7f:e8:73:c7:16:83:65:d6:91:26:
         df:f0:2c:34:ee:e9:6e:95:5d:34:67:da:67:20:ee:35:6b:36:
         4a:8f:d2:e1:63:f6:0a:5d:96:d7:5d:c1:47:8e:86:1a:19:aa:
         1c:f4:44:34:aa:74:be:56:2c:59:ca:5d:df:1e:a2:47:cc:8b:
         43:93:b0:11:0f:b7:ce:b1:ce:80:fa:99:f9:03:c3:3d:f0:97:
         14:94:f6:b5:fd:4c:a0:5e:04:ee:50:91:12:0d:9c:60:85:ad:
         73:15:30:ae:2a:5e:e1:ce:25:7f:76:c8:89:d5:45:68:b5:8f:
         f5:c8:4c:40:9a:39:7c:5b:f0:15:4c:f9:81:68:11:2c:39:56:
         08:fa:3b:da:9e:bf:a7:aa:da:3e:b2:98:30:62:1b:a4:48:69:
         13:d7:1f:95:9c:63:ba:46:5a:fd:b5:e8:86:4e:e2:08:83:6f:
         34:bb:1b:b3:bb:25:4a:bc:b6:0c:92:d5:84:e0:3e:a0:3c:bc:
         c1:56:e9:c4:1e:e2:fb:b4:1c:15:4e:75:44:13:fe:98:84:9e:
         dd:94:07:00:51:b0:e8:69:e4:2a:ae:37:34:dc:90:4e:3a:c9:
         ef:b8:7f:fa:2f:69:eb:b7:14:66:9a:c8:01:ba:41:15:7a:55:
         65:a4:32:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:29:16 2026 by rpki-client