Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
File:                     gi9abAuVZH8HA1DmUk4SIPukf6M.mft (raw, json)
Hash identifier:          d0/8oEeW9Qdj3N5wCn8rZPLosjk1Q+OD6/E57t6BSvo=
Subject key identifier:   DF:BB:0F:23:A3:F5:13:F6:98:86:86:2B:6C:DA:C9:36:3F:2D:86:4C
Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Certificate issuer:       /CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Certificate serial:       019D254CCBB01D05B29B7FA87C7B55178C8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
Manifest number:          1885
Signing time:             Wed 25 Mar 2026 14:01:22 +0000
Manifest this update:     Wed 25 Mar 2026 14:01:22 +0000
Manifest next update:     Thu 26 Mar 2026 14:01:22 +0000
Files and hashes:         1: 4ShXPhWP4Qk_JTUR7nsENpLjDoc.asa (hash: HXRCdfUgdsuwOo68NwP3+PURL7JrnmOHum1V4B+oxJQ=)
                          2: G0YZaRvOpGakuanm7RUcv6bj3MM.roa (hash: 7CABJvLN6kQ3DAKmcEt6bVwV3ypsakkVsbnD4Bax900=)
                          3: gi9abAuVZH8HA1DmUk4SIPukf6M.crl (hash: RCGXdaJucOllwKdf3hsB+sPVAK9LINOFkKLMMi0+7jc=)
                          4: p6q8es-Iqyn2i48xEoUKjUI4d2M.roa (hash: m5/VmABNTamwPueU2592p62mT3TfbEBJmNKOlgAWGE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:4c:cb:b0:1d:05:b2:9b:7f:a8:7c:7b:55:17:8c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
        Validity
            Not Before: Mar 25 14:01:22 2026 GMT
            Not After : Mar 26 14:01:22 2026 GMT
        Subject: CN=dfbb0f23a3f513f69886862b6cdac9363f2d864c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ce:fc:43:a9:d2:a0:30:75:9c:f9:1d:d5:00:
                    62:9b:fe:84:62:ad:55:b1:04:32:01:01:b1:35:27:
                    d2:f3:24:bc:06:c8:d9:11:2e:08:c4:1b:11:81:e0:
                    1b:ed:af:57:fe:f8:ba:5e:ea:ac:9d:83:17:72:30:
                    e7:4c:79:1d:a1:8d:2a:2d:2c:90:3a:69:6c:ab:60:
                    f3:23:22:3b:65:23:70:03:39:88:45:78:c2:83:71:
                    89:6a:6b:15:65:c1:22:55:c5:fa:30:c6:69:72:02:
                    93:ce:da:2d:ab:28:2a:35:44:c4:3a:7d:70:60:45:
                    1d:d8:40:11:11:f0:10:a0:a5:01:ad:14:54:07:a0:
                    ad:f3:ea:51:78:75:5f:56:a1:95:85:ef:df:5f:e9:
                    43:9c:a8:dd:53:d6:22:a8:75:e7:47:85:49:c9:92:
                    48:80:66:3a:96:fc:8c:0b:5d:0a:72:50:9e:84:64:
                    06:72:0a:41:18:22:9e:86:59:91:f2:19:63:c7:ec:
                    c6:97:a8:b1:e8:b3:6e:49:f3:07:18:ff:cc:57:39:
                    27:00:9a:fd:d5:e5:93:b3:8c:d4:18:62:14:71:20:
                    72:63:7b:d5:b1:24:54:0f:bf:91:92:78:82:ad:ce:
                    0c:b8:d1:01:2a:92:6b:1a:e3:51:ec:b6:d8:07:f0:
                    aa:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BB:0F:23:A3:F5:13:F6:98:86:86:2B:6C:DA:C9:36:3F:2D:86:4C
            X509v3 Authority Key Identifier:
                keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:e5:f5:e2:46:70:38:b2:53:d9:be:71:67:99:17:20:e6:49:
         41:2a:d2:b8:7b:60:17:a0:aa:ea:02:e1:54:26:c7:ae:5c:75:
         d1:bf:0b:77:fb:51:fc:5c:ea:c6:af:7f:4f:43:3d:8e:be:3d:
         9f:c4:cc:6b:f5:77:a5:82:b1:bd:d8:a9:ce:7a:5a:8a:da:73:
         93:da:a2:90:ee:0a:bb:c7:76:12:f8:fa:87:d4:0a:4f:b8:46:
         c0:5a:f1:c3:3f:9d:09:54:c7:0c:1b:2b:62:49:6f:41:d9:97:
         4e:37:05:4a:cd:8c:da:1c:12:23:04:85:7c:a5:a7:7c:90:c5:
         5a:e6:6f:b2:68:0c:d9:7a:36:5d:3c:c1:40:7e:d6:ef:9b:28:
         d6:b2:20:d7:3c:9e:f1:fe:c1:fc:33:e7:35:96:08:27:34:7b:
         f7:08:50:e8:47:f6:27:46:bd:24:74:43:64:16:9a:16:c0:31:
         d0:f5:85:b7:75:a0:f3:e1:04:8c:63:1d:30:68:17:e9:9f:ff:
         c2:3d:3d:67:a7:78:ae:70:75:0b:36:06:e1:bb:e5:f0:dd:20:
         e9:e9:55:f3:4f:43:3d:ef:62:db:09:e8:db:f2:40:e0:83:58:
         87:c5:a1:31:bf:db:f2:e6:1d:34:ea:5d:64:d9:3e:d6:c6:32:
         42:65:68:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:23 2026 by rpki-client