Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
File:                     gcAMyMc9EUHIklTtVWqNASypAiY.mft (raw, json)
Hash identifier:          4NA/jSJiXEiEhYEUDf9l3GQZbBVS3vL6oQ3buhvrxV4=
Subject key identifier:   6E:D3:C9:2C:1F:0A:76:80:D7:15:26:C6:F7:2C:6C:B5:27:D5:CD:07
Authority key identifier: 81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26
Certificate issuer:       /CN=81c00cc8c73d1141c89254ed556a8d012ca90226
Certificate serial:       019D2B1717D5DC71ED174A9D6F43A7279162
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
Manifest number:          0AD6
Signing time:             Thu 26 Mar 2026 17:00:26 +0000
Manifest this update:     Thu 26 Mar 2026 17:00:26 +0000
Manifest next update:     Fri 27 Mar 2026 17:00:26 +0000
Files and hashes:         1: HughWH6Do-c-ENW-fx99oMeCUqI.roa (hash: 14sSq9ial8O4LgAIGDTRQt5ot4BvdM54tuDwJgopA0M=)
                          2: gcAMyMc9EUHIklTtVWqNASypAiY.crl (hash: FK2uIYGkSDQOnFpkrfwmXssBso2S72CSi8vtl872rrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:17:17:d5:dc:71:ed:17:4a:9d:6f:43:a7:27:91:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c00cc8c73d1141c89254ed556a8d012ca90226
        Validity
            Not Before: Mar 26 17:00:26 2026 GMT
            Not After : Mar 27 17:00:26 2026 GMT
        Subject: CN=6ed3c92c1f0a7680d71526c6f72c6cb527d5cd07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d1:34:e5:df:7f:80:23:ed:a9:bb:d9:a9:68:
                    48:a8:d9:30:93:0d:52:b1:ac:a0:58:cf:6f:c3:82:
                    e1:f1:ad:63:f9:27:13:39:a4:11:af:e3:db:d3:cb:
                    8f:b8:19:24:55:66:76:22:d9:b6:a2:83:16:e4:ba:
                    b3:f6:ee:82:de:94:89:00:7a:32:8c:d9:95:b6:af:
                    fb:fe:5e:9a:2a:49:ae:3d:16:fc:98:97:f8:57:83:
                    82:4e:71:69:6f:27:29:2c:dc:2d:fc:69:aa:3a:e2:
                    e7:53:d1:97:d1:23:67:7d:44:59:71:33:ae:0c:ea:
                    fb:4e:43:86:5e:fc:bf:0c:65:43:16:90:7d:f5:86:
                    f5:8d:01:b6:9c:4f:b8:86:89:a4:09:c6:4b:39:8e:
                    c6:f8:6b:d8:99:48:58:3e:40:86:cc:44:96:e3:6a:
                    85:53:56:11:53:e1:01:fc:bd:9c:9f:40:9b:b5:0e:
                    ee:cf:f1:a9:a8:c0:d4:4e:5b:6e:be:7c:50:99:d6:
                    a5:ce:f3:e6:79:1e:57:f8:b9:4c:eb:fe:0a:62:b1:
                    2c:c5:3e:67:aa:b3:44:71:b2:f3:83:eb:d7:60:ba:
                    e8:92:0d:f4:19:e3:7e:5c:d7:be:40:fa:a3:8a:d4:
                    84:76:94:86:8f:47:06:c2:66:1e:db:a7:6b:72:97:
                    d3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D3:C9:2C:1F:0A:76:80:D7:15:26:C6:F7:2C:6C:B5:27:D5:CD:07
            X509v3 Authority Key Identifier:
                keyid:81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e1:16:ce:61:1d:6a:ab:c3:7c:8a:7f:9c:54:93:b3:61:1e:
         e2:35:e1:b7:bd:71:37:9d:ed:89:6f:01:ce:1c:c9:5d:e4:69:
         ba:a1:2e:ac:ab:18:b9:79:af:a3:39:b8:4a:3b:05:5c:4d:d1:
         21:c6:2b:2d:5e:b7:1c:b2:61:70:c7:cf:65:7a:eb:8b:03:a6:
         94:72:ca:d6:b4:3e:5b:ce:cf:72:72:31:3f:8b:ab:fb:51:a4:
         85:b0:43:9d:d4:91:1a:27:60:e1:11:ef:60:cf:98:08:e1:a6:
         17:fa:2d:0a:61:ce:a3:41:4c:a8:e7:68:69:59:50:da:96:14:
         01:11:78:6d:23:f5:a6:17:d6:bc:88:61:5c:f8:19:a2:2d:fc:
         ff:3a:9b:bc:75:a0:da:b5:c1:15:58:0b:e3:4d:fd:bc:74:22:
         ab:07:f2:f9:3c:5b:08:d3:42:92:f1:80:49:de:c4:e0:a7:c2:
         2e:5f:a7:54:b9:fa:ae:b3:71:cf:16:82:d1:ff:73:71:f8:06:
         6e:54:ab:98:c9:84:77:37:4c:a4:95:3b:a5:23:f9:85:65:ae:
         0f:1c:59:32:db:5d:c6:c5:0b:4f:09:2d:cd:b6:82:b0:4b:20:
         bb:d8:b2:ee:c3:6b:bd:46:64:50:26:49:52:f6:1b:16:69:27:
         0e:ab:3d:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rFxfV3HHtF0qdb0OnJ5FiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYzAwY2M4YzczZDExNDFjODkyNTRlZDU1NmE4ZDAxMmNh
OTAyMjYwHhcNMjYwMzI2MTcwMDI2WhcNMjYwMzI3MTcwMDI2WjAzMTEwLwYDVQQD
Eyg2ZWQzYzkyYzFmMGE3NjgwZDcxNTI2YzZmNzJjNmNiNTI3ZDVjZDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNE05d9/gCPtqbvZqWhIqNkwkw1S
saygWM9vw4Lh8a1j+ScTOaQRr+Pb08uPuBkkVWZ2Itm2ooMW5Lqz9u6C3pSJAHoy
jNmVtq/7/l6aKkmuPRb8mJf4V4OCTnFpbycpLNwt/GmqOuLnU9GX0SNnfURZcTOu
DOr7TkOGXvy/DGVDFpB99Yb1jQG2nE+4homkCcZLOY7G+GvYmUhYPkCGzESW42qF
U1YRU+EB/L2cn0CbtQ7uz/GpqMDUTltuvnxQmdalzvPmeR5X+LlM6/4KYrEsxT5n
qrNEcbLzg+vXYLrokg30GeN+XNe+QPqjitSEdpSGj0cGwmYe26drcpfTawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7TySwfCnaA1xUmxvcsbLUn1c0HMB8GA1UdIwQY
MBaAFIHADMjHPRFByJJU7VVqjQEsqQImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2NBTXlNYzlFVUhJa2xUdFZXcU5BU3lwQWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iNGQ0ZWEtZjEwYi00YmNkLWEzZjUt
OTA1Mjc2YzVjNDE0LzEvZ2NBTXlNYzlFVUhJa2xUdFZXcU5BU3lwQWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9iNGQ0ZWEtZjEwYi00YmNkLWEzZjUtOTA1Mjc2YzVjNDE0
LzEvZ2NBTXlNYzlFVUhJa2xUdFZXcU5BU3lwQWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUuEWzmEd
aqvDfIp/nFSTs2Ee4jXht71xN53tiW8BzhzJXeRpuqEurKsYuXmvozm4SjsFXE3R
IcYrLV63HLJhcMfPZXrriwOmlHLK1rQ+W87PcnIxP4ur+1GkhbBDndSRGidg4RHv
YM+YCOGmF/otCmHOo0FMqOdoaVlQ2pYUARF4bSP1phfWvIhhXPgZoi38/zqbvHWg
2rXBFVgL4039vHQiqwfy+TxbCNNCkvGASd7E4KfCLl+nVLn6rrNxzxaC0f9zcfgG
blSrmMmEdzdMpJU7pSP5hWWuDxxZMttdxsULTwktzbaCsEsgu9iy7sNrvUZkUCZJ
UvYbFmknDqs9Lw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:32:49 2026 by rpki-client