Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
File:                     gWiVcrIAukh5OByFdCdCZVkqFKs.mft (raw, json)
Hash identifier:          u1k+p1eDlpM1uBIJMBqhCVUo84W2SJwNwkmEtjCivBY=
Subject key identifier:   E3:6E:E1:7A:8A:0A:AE:5C:26:F7:91:80:BC:CC:F1:38:C5:C9:C1:FA
Authority key identifier: 81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB
Certificate issuer:       /CN=81689572b200ba4879381c8574274265592a14ab
Certificate serial:       019D270481991C6578BD1DF78C79DC524836
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
Manifest number:          1882
Signing time:             Wed 25 Mar 2026 22:01:39 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:39 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:39 +0000
Files and hashes:         1: gWiVcrIAukh5OByFdCdCZVkqFKs.crl (hash: tEd5PfOuyYik6jfNiXodH2txa1h7nkxAnqKvex61H4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:81:99:1c:65:78:bd:1d:f7:8c:79:dc:52:48:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81689572b200ba4879381c8574274265592a14ab
        Validity
            Not Before: Mar 25 22:01:39 2026 GMT
            Not After : Mar 26 22:01:39 2026 GMT
        Subject: CN=e36ee17a8a0aae5c26f79180bcccf138c5c9c1fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:d5:e9:43:52:8d:c8:5b:43:66:03:b4:cb:22:
                    7b:e8:24:0e:59:38:32:8f:a9:1f:f0:7d:2b:0f:af:
                    a0:be:f5:7b:64:13:4d:9d:de:a6:c8:77:92:b5:d0:
                    b0:2a:72:f0:f0:58:8b:91:32:57:65:34:32:7f:a3:
                    36:e1:04:58:3d:0a:0c:7e:d2:eb:d2:dc:99:18:9f:
                    c9:3e:64:cb:57:51:0e:76:5f:3a:8b:9e:df:81:d2:
                    c4:d2:28:72:9a:8b:6f:bd:30:c2:14:92:e8:49:0f:
                    96:a6:bc:dd:df:50:5c:ac:1e:fe:ba:ab:fb:b2:a3:
                    47:62:2c:a5:dd:f1:1a:03:2a:c6:24:08:c4:80:51:
                    bc:54:be:eb:44:0e:64:93:94:2f:f8:29:66:a6:3e:
                    17:a3:c9:7a:cc:12:54:48:1a:8e:d5:19:a1:3b:8d:
                    01:b4:a0:72:bd:b7:e0:62:45:f7:3b:49:fe:14:65:
                    75:79:28:67:9a:46:62:b3:08:2a:5a:52:ef:fd:85:
                    5b:2d:ec:98:12:64:75:74:09:22:c0:a0:ba:cd:f5:
                    29:95:70:14:9a:ad:c8:54:1b:71:82:ff:7d:79:7d:
                    83:d5:fa:34:ec:75:ec:80:6c:a2:7c:69:14:a4:65:
                    3d:f9:b1:ad:cc:5f:6a:5a:36:a7:60:74:35:f3:2a:
                    7c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6E:E1:7A:8A:0A:AE:5C:26:F7:91:80:BC:CC:F1:38:C5:C9:C1:FA
            X509v3 Authority Key Identifier:
                keyid:81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1c:30:e0:ba:44:91:c5:de:c7:c1:a3:60:f6:78:26:78:62:
         3f:09:b4:41:4f:97:aa:d6:8c:7b:07:9f:a2:a9:dc:c7:6b:e5:
         96:b7:34:f4:9c:1c:28:88:41:47:05:18:76:c6:01:02:05:a5:
         d7:31:49:e7:3c:65:87:c7:f1:bd:c8:4d:77:06:93:05:39:0a:
         eb:95:e6:b5:54:b3:45:da:52:08:89:8d:d1:24:86:1e:1a:7e:
         e6:5b:0b:df:2d:ca:90:0a:69:c6:72:6c:c1:cd:e1:c7:76:1f:
         b6:07:2e:23:12:4d:ac:c6:3e:be:40:c5:b9:58:ce:a9:4f:e8:
         01:ff:ef:0c:67:bf:9a:38:a2:5b:1d:ad:75:53:bf:5b:51:c8:
         66:7e:ac:4f:1b:63:1b:69:77:97:6b:0f:f1:21:fb:90:64:e9:
         d1:c4:cf:33:3e:d0:90:cc:ae:b7:f9:37:7b:ac:ed:67:58:2b:
         5b:0d:be:9f:fe:d3:35:5d:24:bf:23:6e:36:be:89:7c:b8:c0:
         ef:74:9b:f2:39:64:91:1e:b5:ce:57:43:40:87:a0:2c:56:14:
         b0:1e:9f:e1:d1:68:f3:92:04:79:16:b4:e3:d7:1b:9a:74:5f:
         4e:37:03:46:7d:75:eb:d7:b4:8d:03:0e:c6:e7:4b:a5:70:74:
         38:5d:b5:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBIGZHGV4vR33jHncUkg2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNjg5NTcyYjIwMGJhNDg3OTM4MWM4NTc0Mjc0MjY1NTky
YTE0YWIwHhcNMjYwMzI1MjIwMTM5WhcNMjYwMzI2MjIwMTM5WjAzMTEwLwYDVQQD
EyhlMzZlZTE3YThhMGFhZTVjMjZmNzkxODBiY2NjZjEzOGM1YzljMWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+9XpQ1KNyFtDZgO0yyJ76CQOWTgy
j6kf8H0rD6+gvvV7ZBNNnd6myHeStdCwKnLw8FiLkTJXZTQyf6M24QRYPQoMftLr
0tyZGJ/JPmTLV1EOdl86i57fgdLE0ihymotvvTDCFJLoSQ+Wprzd31BcrB7+uqv7
sqNHYiyl3fEaAyrGJAjEgFG8VL7rRA5kk5Qv+Clmpj4Xo8l6zBJUSBqO1RmhO40B
tKByvbfgYkX3O0n+FGV1eShnmkZiswgqWlLv/YVbLeyYEmR1dAkiwKC6zfUplXAU
mq3IVBtxgv99eX2D1fo07HXsgGyifGkUpGU9+bGtzF9qWjanYHQ18yp8ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONu4XqKCq5cJveRgLzM8TjFycH6MB8GA1UdIwQY
MBaAFIFolXKyALpIeTgchXQnQmVZKhSrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1dpVmNySUF1a2g1T0J5RmRDZENaVmtxRktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84OGQ2ODQtNTYyNy00ZmYyLWFhNGIt
NjI0MTU5MmE5NDRiLzEvZ1dpVmNySUF1a2g1T0J5RmRDZENaVmtxRktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84OGQ2ODQtNTYyNy00ZmYyLWFhNGItNjI0MTU5MmE5NDRi
LzEvZ1dpVmNySUF1a2g1T0J5RmRDZENaVmtxRktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYhww4LpE
kcXex8GjYPZ4JnhiPwm0QU+XqtaMewefoqncx2vllrc09JwcKIhBRwUYdsYBAgWl
1zFJ5zxlh8fxvchNdwaTBTkK65XmtVSzRdpSCImN0SSGHhp+5lsL3y3KkAppxnJs
wc3hx3YftgcuIxJNrMY+vkDFuVjOqU/oAf/vDGe/mjiiWx2tdVO/W1HIZn6sTxtj
G2l3l2sP8SH7kGTp0cTPMz7QkMyut/k3e6ztZ1grWw2+n/7TNV0kvyNuNr6JfLjA
73Sb8jlkkR61zldDQIegLFYUsB6f4dFo85IEeRa049cbmnRfTjcDRn1169e0jQMO
xudLpXB0OF21jQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:39:01 2026 by rpki-client