Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
File:                     GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft (raw, json)
Hash identifier:          u3p9rAEzGz1C+9Eo0xZMltxkVkstUR2YcOvR3ITcs/M=
Subject key identifier:   ED:A6:46:9A:77:7D:FF:0E:4B:A5:F6:D4:F4:57:63:52:8A:45:0B:28
Authority key identifier: 19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
Certificate issuer:       /CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Certificate serial:       019D273AD917C1F5EDFC874E24BCFDDDA332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 23:01:01 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:01 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:01 +0000
Files and hashes:         1: GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl (hash: UD1IuiaPN6Hpoyn63K3ouCCLgN/E2obY+eD5avTaouA=)
                          2: i2X0mHk6bAtPNecvn2NA6zmZj9U.roa (hash: mQLU4VLoVcMKqVZZfsB2FdV3V92h7zVuv01+LCyktYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:d9:17:c1:f5:ed:fc:87:4e:24:bc:fd:dd:a3:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
        Validity
            Not Before: Mar 25 23:01:01 2026 GMT
            Not After : Mar 26 23:01:01 2026 GMT
        Subject: CN=eda6469a777dff0e4ba5f6d4f45763528a450b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b9:ff:05:b6:12:eb:9c:18:69:b1:61:be:53:
                    ab:c6:2e:4b:1b:23:95:05:8f:8e:1b:f7:a8:35:94:
                    14:0f:7b:bb:62:dd:b4:91:b6:03:7c:95:42:67:0f:
                    5f:90:0e:6b:73:ba:ee:b8:8a:90:22:35:57:1b:d2:
                    bd:c8:0d:83:b2:f8:7c:f0:26:22:c5:be:a4:4c:9a:
                    a5:92:4c:a7:2d:90:71:7f:f1:07:0e:7b:51:04:d8:
                    81:01:32:f2:1a:39:7e:ba:60:f6:c4:0e:3f:22:27:
                    26:57:16:c7:65:96:cd:e5:99:c6:d0:71:a8:8e:8e:
                    14:4d:f8:71:7c:4f:9a:57:2b:1d:98:61:43:96:9f:
                    9f:cb:78:b8:5c:1a:18:95:26:9d:63:c5:16:05:77:
                    dd:13:8c:76:6c:07:cb:4d:30:cf:db:e7:47:59:4f:
                    d0:13:c7:46:9f:16:a8:4a:83:2a:06:e1:bb:c0:ce:
                    52:eb:3e:2c:ea:e9:d2:41:07:d4:75:4d:f6:38:3d:
                    b4:8a:81:55:e6:66:21:12:85:51:83:c4:b5:fc:f6:
                    70:77:38:1e:40:33:c1:be:1c:0f:c3:1b:ca:d5:1e:
                    ef:59:44:e2:60:3f:56:1f:c0:54:f1:90:d6:57:ad:
                    02:29:58:c2:ce:80:bf:44:15:f7:e5:4d:cd:d2:eb:
                    d7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A6:46:9A:77:7D:FF:0E:4B:A5:F6:D4:F4:57:63:52:8A:45:0B:28
            X509v3 Authority Key Identifier:
                keyid:19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:38:d5:51:c5:4e:11:c5:cb:a3:79:4d:57:82:c0:f4:fa:4f:
         68:56:ee:2b:d3:99:46:a3:de:e1:07:fd:25:f5:2d:4a:5d:6e:
         62:3d:d5:70:0f:05:05:70:81:6f:e5:ed:8d:0b:44:73:e0:37:
         39:a5:a4:6e:7b:c3:a1:dd:05:06:09:02:3a:39:31:45:25:90:
         58:be:8c:eb:80:71:1b:83:5b:d2:db:0f:84:f1:63:34:6e:93:
         cc:f8:e9:40:df:a5:94:6d:59:f7:db:6a:5c:31:f2:39:ae:56:
         92:8e:27:d6:be:d8:ce:64:00:be:8e:06:2a:c8:84:7c:22:37:
         ff:5d:34:43:c6:51:28:7f:40:1f:41:ff:ba:d3:fc:dd:77:c6:
         4d:76:08:45:76:1e:df:8c:07:53:8e:ca:0e:61:e1:16:7b:40:
         f4:20:f7:a3:64:63:d8:83:40:31:dc:0f:36:18:42:7a:82:49:
         60:21:ea:9d:29:73:af:87:63:d1:7a:92:14:73:92:20:5a:f3:
         7a:94:dc:52:f5:c2:32:c2:6c:ca:d4:8f:03:cb:0a:5b:fe:24:
         f6:f5:57:2c:98:ca:38:33:55:63:e4:0a:4d:ec:af:bc:2c:23:
         2a:db:2c:12:68:9d:91:18:11:3c:d8:87:4b:c7:5c:7d:86:53:
         07:6a:2e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:48 2026 by rpki-client