Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
File:                     g4dr-7WujP4Ra7X18oZKEWITqk8.mft (raw, json)
Hash identifier:          HK1DO7ZVrmXJUUQTK3DHovpwRdHDXc9Ba7stEEWbdgc=
Subject key identifier:   84:5A:A0:44:49:72:7B:08:C6:54:96:79:67:AA:2F:20:20:BF:64:E4
Authority key identifier: 83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F
Certificate issuer:       /CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f
Certificate serial:       019D27726D7150D4753855FA8687ED65F4A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 00:01:43 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:43 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:43 +0000
Files and hashes:         1: 5z8EHLNlOMTaqhnq-7mzsrklHBA.roa (hash: 2JlTQ4KJ6TRtRR53AGoqYj2XNX1lPxwhYUuY7T8Bgtk=)
                          2: g4dr-7WujP4Ra7X18oZKEWITqk8.crl (hash: NGU6ATNeuW2gvlW9B4R80os+FonkJlc8entk7T+wOqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:6d:71:50:d4:75:38:55:fa:86:87:ed:65:f4:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f
        Validity
            Not Before: Mar 26 00:01:43 2026 GMT
            Not After : Mar 27 00:01:43 2026 GMT
        Subject: CN=845aa04449727b08c654967967aa2f2020bf64e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a8:b2:b7:f7:fb:3d:4e:2e:c8:2d:71:32:f4:
                    f0:e4:3f:ed:51:c1:25:86:a4:e8:9a:97:8f:be:4c:
                    90:c7:14:1b:23:83:b2:7d:0d:8e:6c:3e:2b:e0:5d:
                    b0:4f:a2:64:13:17:e8:8e:c5:f8:98:96:b3:17:6e:
                    15:de:a6:d2:4a:02:43:4c:27:5a:4c:19:f5:d7:e1:
                    71:68:aa:79:a6:66:fa:a6:9c:19:64:fd:ff:df:ff:
                    0f:79:84:3c:15:d5:80:66:05:0f:45:4e:9d:41:bd:
                    21:30:e5:7b:ea:8e:12:5f:6c:d3:88:57:8a:58:8f:
                    89:c4:65:e4:69:d0:c3:e9:31:42:c9:80:ce:8f:f0:
                    0c:49:4b:de:6d:a6:fa:64:eb:c5:4b:69:a3:fa:8f:
                    e3:d6:6b:86:af:ff:58:88:62:10:04:4a:fd:eb:75:
                    fa:c1:45:3c:1c:c3:8c:dd:d3:08:2c:ec:27:9f:c2:
                    89:70:76:6a:c6:46:aa:0a:34:1a:db:4c:95:e8:70:
                    f1:d5:84:7a:17:39:bd:73:ef:90:f6:c6:af:0c:1a:
                    f6:15:5b:30:50:e5:8c:84:ee:3a:93:d2:42:b8:97:
                    f2:24:e1:69:bc:77:ee:02:f0:d9:df:ca:49:bb:0e:
                    c6:52:ce:9b:52:ff:fd:fa:11:b8:60:98:50:9f:75:
                    93:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5A:A0:44:49:72:7B:08:C6:54:96:79:67:AA:2F:20:20:BF:64:E4
            X509v3 Authority Key Identifier:
                keyid:83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:c3:b8:40:b2:91:67:86:1e:45:e0:49:e8:16:24:28:50:51:
         5b:4e:75:1c:51:cf:2c:f4:ac:8f:56:84:58:bb:2c:79:e9:29:
         bf:9b:88:8a:62:e4:e3:6d:85:3a:13:b3:bb:20:c2:0e:dd:64:
         30:36:da:14:48:df:94:bb:9a:0c:da:24:30:9a:04:87:d4:a6:
         fc:e0:35:6a:9d:ad:5e:6b:7c:ac:ac:8a:1e:84:16:9a:e3:79:
         ea:f7:e2:00:82:3e:a3:f2:1b:2b:f4:4b:80:65:2a:58:46:74:
         81:7f:b8:6c:4a:82:5e:d6:7b:92:21:b1:b1:ba:17:e4:a4:ab:
         c7:4d:c8:2e:6d:73:70:c6:16:f4:ad:e3:5a:b5:3b:bc:a7:35:
         b8:1e:74:e7:8f:1d:9a:31:9a:90:c9:92:96:dd:3d:80:48:bd:
         0f:32:bc:db:5c:2a:d5:cc:ed:80:75:b8:0a:2c:2b:13:fe:93:
         65:60:66:ad:cf:64:dc:aa:23:9c:55:61:c7:00:bc:91:1d:4f:
         60:e9:2d:9f:d6:01:22:f9:a7:5d:21:8d:75:4c:ed:9f:ea:80:
         6e:c7:66:90:7e:aa:4a:83:ad:e4:63:07:81:d8:18:cc:b8:81:
         e9:74:30:69:f9:ba:03:ab:d7:19:1f:2d:b3:84:d6:76:dc:59:
         8c:69:0e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:24 2026 by rpki-client