Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
File:                     g-k154ofll0QiRUhXQ8Et2tzPlg.mft (raw, json)
Hash identifier:          2OWW9TUvGHUyOHHzn3Fm8B/v4cM9rmZ0Sk6/l1lfvWQ=
Subject key identifier:   3D:69:5F:E4:EA:60:F2:94:A0:18:AF:04:F8:6E:E9:07:24:3E:69:D4
Authority key identifier: 83:E9:35:E7:8A:1F:96:5D:10:89:15:21:5D:0F:04:B7:6B:73:3E:58
Certificate issuer:       /CN=83e935e78a1f965d108915215d0f04b76b733e58
Certificate serial:       019D28F2CBFD6D0ADE776BCB65FEB6C833F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g-k154ofll0QiRUhXQ8Et2tzPlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
Manifest number:          1885
Signing time:             Thu 26 Mar 2026 07:01:33 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:33 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:33 +0000
Files and hashes:         1: g-k154ofll0QiRUhXQ8Et2tzPlg.crl (hash: Iec84SS7S7YSFH/vn6f7IB0YQdNeIzvy1KG83lVu8N4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g-k154ofll0QiRUhXQ8Et2tzPlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:cb:fd:6d:0a:de:77:6b:cb:65:fe:b6:c8:33:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83e935e78a1f965d108915215d0f04b76b733e58
        Validity
            Not Before: Mar 26 07:01:33 2026 GMT
            Not After : Mar 27 07:01:33 2026 GMT
        Subject: CN=3d695fe4ea60f294a018af04f86ee907243e69d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f1:ec:98:98:10:36:f0:92:a8:7e:d1:81:54:
                    51:87:d8:7a:7d:63:f8:67:c7:fa:3e:72:e4:8c:71:
                    74:ca:36:25:e3:92:d2:f4:22:4c:45:f4:6a:8b:e1:
                    f0:0b:2a:aa:01:73:e5:17:c6:a0:04:a1:49:fc:45:
                    e8:00:a8:4b:6d:06:4b:ac:0c:5c:20:9d:95:0f:c8:
                    bd:33:b8:9d:84:13:a2:03:e0:4f:47:59:e7:53:d6:
                    4c:df:03:c5:91:71:0b:3a:5f:0b:89:c4:7e:e3:fb:
                    65:b7:33:0a:0e:a0:c7:71:9f:42:59:a8:66:93:aa:
                    de:94:c3:17:48:73:d1:07:9a:8d:98:00:81:e1:4f:
                    30:09:e5:a7:96:49:a8:09:2c:26:b6:bf:64:0b:2f:
                    d0:a8:5e:7b:80:3a:d7:d4:67:74:14:61:d0:7c:da:
                    8c:be:c0:0d:4c:5d:08:99:bf:49:02:fb:08:32:db:
                    fa:0b:96:ec:df:b1:c8:a8:87:b4:a4:88:cf:b6:a1:
                    75:04:2b:ae:8f:df:d9:50:37:6a:7a:9d:ac:cd:0c:
                    28:b5:31:8d:52:12:9c:86:19:a3:75:a3:c0:37:1b:
                    a8:b4:ac:47:be:66:1a:02:2f:3a:98:ce:b4:a3:9d:
                    b5:71:4a:a7:1b:80:95:d1:5d:88:60:1c:08:a3:13:
                    29:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:69:5F:E4:EA:60:F2:94:A0:18:AF:04:F8:6E:E9:07:24:3E:69:D4
            X509v3 Authority Key Identifier:
                keyid:83:E9:35:E7:8A:1F:96:5D:10:89:15:21:5D:0F:04:B7:6B:73:3E:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-k154ofll0QiRUhXQ8Et2tzPlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:1b:f7:65:9a:a3:6f:de:2f:fb:09:74:62:2e:98:56:3d:2a:
         81:14:c2:66:17:7d:d2:0a:7a:c9:f8:d2:04:06:9e:ee:ad:40:
         a4:25:57:6e:7c:3d:e6:20:9e:27:5f:91:03:6a:52:b3:3b:94:
         08:cb:ac:8f:df:ef:3a:83:95:d5:5e:54:d8:52:c5:d5:2f:09:
         8d:7b:f2:e4:7a:2b:9f:26:34:83:ce:7a:d9:81:92:29:28:19:
         26:f2:63:dc:03:30:58:0f:1e:af:7d:a6:1a:9c:17:a9:97:9c:
         26:67:c0:35:92:a7:8e:bd:39:63:e0:a3:f1:07:77:90:97:ca:
         a6:a3:3e:84:2f:77:15:90:5c:66:72:bf:3b:f7:c4:87:d6:9f:
         d2:15:0e:55:65:1e:ae:59:e1:db:94:ec:3d:8a:f7:81:f4:48:
         5b:83:5c:97:50:b8:9e:9e:06:25:98:57:8b:9e:91:b8:c4:6e:
         58:85:57:b9:76:a7:f2:13:39:ac:c9:b5:93:f0:8a:0d:1e:3d:
         6e:9d:d1:0b:1a:aa:45:92:ab:f1:b9:46:c6:64:5b:eb:7a:60:
         a9:00:9a:d6:54:2e:35:ae:55:8d:23:0c:da:c6:ae:c8:3b:74:
         cd:8a:bf:98:15:cd:de:b0:cc:00:d7:f4:4e:d3:40:69:5d:93:
         a4:f2:17:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8sv9bQred2vLZf62yDPyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZTkzNWU3OGExZjk2NWQxMDg5MTUyMTVkMGYwNGI3NmI3
MzNlNTgwHhcNMjYwMzI2MDcwMTMzWhcNMjYwMzI3MDcwMTMzWjAzMTEwLwYDVQQD
EygzZDY5NWZlNGVhNjBmMjk0YTAxOGFmMDRmODZlZTkwNzI0M2U2OWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/HsmJgQNvCSqH7RgVRRh9h6fWP4
Z8f6PnLkjHF0yjYl45LS9CJMRfRqi+HwCyqqAXPlF8agBKFJ/EXoAKhLbQZLrAxc
IJ2VD8i9M7idhBOiA+BPR1nnU9ZM3wPFkXELOl8LicR+4/tltzMKDqDHcZ9CWahm
k6relMMXSHPRB5qNmACB4U8wCeWnlkmoCSwmtr9kCy/QqF57gDrX1Gd0FGHQfNqM
vsANTF0Imb9JAvsIMtv6C5bs37HIqIe0pIjPtqF1BCuuj9/ZUDdqep2szQwotTGN
UhKchhmjdaPANxuotKxHvmYaAi86mM60o521cUqnG4CV0V2IYBwIoxMpLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1pX+TqYPKUoBivBPhu6QckPmnUMB8GA1UdIwQY
MBaAFIPpNeeKH5ZdEIkVIV0PBLdrcz5YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZy1rMTU0b2ZsbDBRaVJVaFhROEV0MnR6UGxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNDIzYzctZmE3ZC00OWY4LWE2ZjMt
MGE2N2YwMGZkZWRlLzEvZy1rMTU0b2ZsbDBRaVJVaFhROEV0MnR6UGxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9hNDIzYzctZmE3ZC00OWY4LWE2ZjMtMGE2N2YwMGZkZWRl
LzEvZy1rMTU0b2ZsbDBRaVJVaFhROEV0MnR6UGxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBv3ZZqj
b94v+wl0Yi6YVj0qgRTCZhd90gp6yfjSBAae7q1ApCVXbnw95iCeJ1+RA2pSszuU
CMusj9/vOoOV1V5U2FLF1S8JjXvy5HornyY0g8562YGSKSgZJvJj3AMwWA8er32m
GpwXqZecJmfANZKnjr05Y+Cj8Qd3kJfKpqM+hC93FZBcZnK/O/fEh9af0hUOVWUe
rlnh25TsPYr3gfRIW4Ncl1C4np4GJZhXi56RuMRuWIVXuXan8hM5rMm1k/CKDR49
bp3RCxqqRZKr8blGxmRb63pgqQCa1lQuNa5VjSMM2sauyDt0zYq/mBXN3rDMANf0
TtNAaV2TpPIXAQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:34 2026 by rpki-client