Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
File:                     gnMxRuPp1uEVRjF_dSGeogLF-S0.mft (raw, json)
Hash identifier:          ty05wTxyUGUxtM9DAnOnTtIBkfnQkCZ4YpWuNQseAco=
Subject key identifier:   7C:FB:51:84:2D:88:DE:4F:F0:A8:C8:90:40:72:E9:7B:88:99:D5:12
Authority key identifier: 82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D
Certificate issuer:       /CN=82733146e3e9d6e11546317f75219ea202c5f92d
Certificate serial:       019D27725F4F2BD572BFAB45DE6F8B51D8A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
Manifest number:          0832
Signing time:             Thu 26 Mar 2026 00:01:39 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:39 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:39 +0000
Files and hashes:         1: QKjiIqM0UbknWM_0hZSPOOQrhbE.roa (hash: Ym8+l1LE5PwdsL5Z1gyeamQjMBjG/nU2Uc7hHjtf64w=)
                          2: gnMxRuPp1uEVRjF_dSGeogLF-S0.crl (hash: zbMrMOgBmH7Pt+6AVr02AF1nlGWuVgWLy4ZiKAFk1uM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:5f:4f:2b:d5:72:bf:ab:45:de:6f:8b:51:d8:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82733146e3e9d6e11546317f75219ea202c5f92d
        Validity
            Not Before: Mar 26 00:01:39 2026 GMT
            Not After : Mar 27 00:01:39 2026 GMT
        Subject: CN=7cfb51842d88de4ff0a8c8904072e97b8899d512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:76:8f:bb:0c:4e:dd:70:f8:ef:80:ea:aa:e9:
                    c0:d0:d8:3f:44:5d:46:3c:f1:cf:ce:06:80:6f:83:
                    a6:bf:ef:a1:02:2d:9c:2e:eb:b5:29:0e:45:52:f9:
                    c4:e1:90:89:e5:32:6c:a8:27:17:93:4a:34:02:7f:
                    ac:80:2e:4d:2e:1a:82:d3:c2:81:0d:65:f3:54:6d:
                    23:cc:ad:c7:95:91:aa:98:01:61:24:d3:8d:37:4f:
                    41:3f:cc:b7:80:3f:e0:99:a4:65:34:a9:af:23:0e:
                    33:a4:8f:cd:7e:80:cd:07:13:68:2f:80:b5:a5:e1:
                    ce:48:de:b1:42:20:9c:0f:af:a9:a9:8b:4e:2d:2a:
                    c2:7e:98:6b:8b:bd:bf:3c:a2:0a:a0:bb:a1:2c:f1:
                    cd:69:ca:1f:fc:e4:bb:6c:b5:19:99:62:9c:98:a6:
                    07:25:41:75:7f:e3:3b:b1:39:4c:1a:66:1e:ba:1d:
                    c6:d5:01:4b:9b:4f:eb:1a:ec:b4:fc:f0:b2:c4:e5:
                    b3:14:55:fe:93:63:2b:a0:83:3a:3c:44:31:76:5b:
                    bd:42:07:5a:26:e2:be:5a:f6:1e:17:7e:f9:50:da:
                    fa:d9:18:f9:bf:76:ea:b0:bb:9a:06:e9:32:dd:df:
                    cf:dc:81:1e:10:95:30:33:a1:72:6c:17:4a:29:6e:
                    9d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FB:51:84:2D:88:DE:4F:F0:A8:C8:90:40:72:E9:7B:88:99:D5:12
            X509v3 Authority Key Identifier:
                keyid:82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c5:f1:fe:7f:3d:88:d8:a3:92:7d:4d:66:8a:c6:35:11:a0:
         7a:06:ab:00:15:9a:95:6e:39:f2:b9:df:fc:75:a2:3f:27:79:
         23:87:66:b3:9c:b1:9f:63:70:e0:ee:77:61:af:61:53:26:49:
         63:bb:a2:36:6d:96:9f:15:0b:d1:f3:1b:34:46:ec:1c:44:e8:
         29:bf:76:61:79:04:b8:24:d5:58:4e:01:cb:91:30:70:d7:a8:
         8f:6a:d7:53:5c:71:c0:75:d4:87:06:95:7c:58:22:3e:fe:3f:
         4b:93:8d:80:04:3e:0b:0b:03:1f:8c:16:c0:b9:78:3a:8b:3e:
         ef:74:43:ae:44:3e:e1:63:6b:15:55:89:0d:00:2b:fa:32:78:
         48:7f:7e:5a:35:2a:cb:bb:66:2f:ae:48:02:9d:53:6f:8d:b8:
         11:1c:52:ad:c8:14:ac:a6:24:00:43:a5:77:73:ce:67:1d:e7:
         df:22:f5:7e:82:1c:4d:67:40:80:d2:7b:88:4d:ad:f6:0f:e4:
         64:1a:64:af:87:3d:dd:f7:37:2b:04:b6:5d:84:fd:09:70:5d:
         08:c6:67:33:4c:12:a7:37:7f:ed:2b:79:31:aa:e3:db:78:ce:
         fb:65:06:6f:e5:94:f9:32:9c:86:54:3e:bf:0f:70:2f:b2:53:
         db:c6:56:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncl9PK9Vyv6tF3m+LUdijMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNzMzMTQ2ZTNlOWQ2ZTExNTQ2MzE3Zjc1MjE5ZWEyMDJj
NWY5MmQwHhcNMjYwMzI2MDAwMTM5WhcNMjYwMzI3MDAwMTM5WjAzMTEwLwYDVQQD
Eyg3Y2ZiNTE4NDJkODhkZTRmZjBhOGM4OTA0MDcyZTk3Yjg4OTlkNTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHaPuwxO3XD474DqqunA0Ng/RF1G
PPHPzgaAb4Omv++hAi2cLuu1KQ5FUvnE4ZCJ5TJsqCcXk0o0An+sgC5NLhqC08KB
DWXzVG0jzK3HlZGqmAFhJNONN09BP8y3gD/gmaRlNKmvIw4zpI/NfoDNBxNoL4C1
peHOSN6xQiCcD6+pqYtOLSrCfphri72/PKIKoLuhLPHNacof/OS7bLUZmWKcmKYH
JUF1f+M7sTlMGmYeuh3G1QFLm0/rGuy0/PCyxOWzFFX+k2MroIM6PEQxdlu9Qgda
JuK+WvYeF375UNr62Rj5v3bqsLuaBuky3d/P3IEeEJUwM6FybBdKKW6dLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHz7UYQtiN5P8KjIkEBy6XuImdUSMB8GA1UdIwQY
MBaAFIJzMUbj6dbhFUYxf3UhnqICxfktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25NeFJ1UHAxdUVWUmpGX2RTR2VvZ0xGLVMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS80ZDVlMTYtNWU2NS00ZWQ4LWJiZTMt
YmFjYjAyODUzOGRjLzEvZ25NeFJ1UHAxdUVWUmpGX2RTR2VvZ0xGLVMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS80ZDVlMTYtNWU2NS00ZWQ4LWJiZTMtYmFjYjAyODUzOGRj
LzEvZ25NeFJ1UHAxdUVWUmpGX2RTR2VvZ0xGLVMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsXx/n89
iNijkn1NZorGNRGgegarABWalW458rnf/HWiPyd5I4dms5yxn2Nw4O53Ya9hUyZJ
Y7uiNm2WnxUL0fMbNEbsHEToKb92YXkEuCTVWE4By5EwcNeoj2rXU1xxwHXUhwaV
fFgiPv4/S5ONgAQ+CwsDH4wWwLl4Oos+73RDrkQ+4WNrFVWJDQAr+jJ4SH9+WjUq
y7tmL65IAp1Tb424ERxSrcgUrKYkAEOld3POZx3n3yL1foIcTWdAgNJ7iE2t9g/k
ZBpkr4c93fc3KwS2XYT9CXBdCMZnM0wSpzd/7St5Marj23jO+2UGb+WU+TKchlQ+
vw9wL7JT28ZWHQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:52:58 2026 by rpki-client