Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
File:                     gcEVEu7o_tkcQi8ztljWi8NOt4A.mft (raw, json)
Hash identifier:          //k3v+UBFJY8mSdKEoZBQ0HKPMFdS9X0py9rwwBax50=
Subject key identifier:   EC:18:76:23:9D:87:50:5C:F3:B4:EB:A5:CD:50:EC:57:E9:85:8D:87
Authority key identifier: 81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80
Certificate issuer:       /CN=81c11512eee8fed91c422f33b658d68bc34eb780
Certificate serial:       019D27A88509EC99F0D7525EED0E327DF5ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
Manifest number:          0C37
Signing time:             Thu 26 Mar 2026 01:00:48 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:48 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:48 +0000
Files and hashes:         1: 5qQ7K2Sw3wA3dSNaHobcrxLnZf8.roa (hash: 3XSxcIAkBoWThD9Raz/rE6P+YouBEagvQQFhIuaHny4=)
                          2: gcEVEu7o_tkcQi8ztljWi8NOt4A.crl (hash: 1Rvt+EBs59Tl2x5b6aofZlqfBdjP6ZgPzWAF6eJYeEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:85:09:ec:99:f0:d7:52:5e:ed:0e:32:7d:f5:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c11512eee8fed91c422f33b658d68bc34eb780
        Validity
            Not Before: Mar 26 01:00:48 2026 GMT
            Not After : Mar 27 01:00:48 2026 GMT
        Subject: CN=ec1876239d87505cf3b4eba5cd50ec57e9858d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fd:d9:a4:5d:68:44:c6:6b:77:4d:c2:91:bb:
                    d9:8f:20:f3:f4:2e:bb:54:7b:24:29:1f:f1:33:1e:
                    bc:2b:24:95:2a:30:f9:49:3b:dd:24:3e:e6:26:e0:
                    bc:ca:69:df:13:d9:28:ec:d6:78:b5:d3:48:fd:02:
                    0d:64:fa:4c:66:9f:cb:e3:a4:34:5c:36:45:39:37:
                    5a:3b:08:7e:fe:cb:ec:92:42:24:a2:d9:3e:6d:2d:
                    90:09:22:62:eb:aa:2b:92:bd:ca:c2:cd:55:cc:a9:
                    44:b3:3d:83:bb:12:11:5d:0f:ad:00:31:78:cc:79:
                    6f:4c:3a:e4:3c:04:16:1b:9b:08:8f:e8:e7:24:50:
                    a6:06:72:9e:1a:80:2f:f6:d2:d6:71:25:b5:7e:c8:
                    4b:06:21:a5:5c:d7:5a:d5:e2:7a:2c:e5:f4:bb:54:
                    ac:fb:8a:1b:94:b1:80:4a:f2:ab:ef:41:d6:92:50:
                    de:04:d2:22:86:5d:b0:12:b6:db:d4:90:0e:76:86:
                    30:a9:96:81:37:cf:ef:c7:36:9b:db:82:d9:80:45:
                    cc:50:a2:e8:52:dd:05:63:34:02:96:55:77:d6:67:
                    bd:e0:d4:a0:aa:b3:df:1a:c3:7d:da:d5:4d:f7:6c:
                    2d:97:14:b4:88:34:30:1d:9b:b0:6b:eb:31:84:d4:
                    7d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:18:76:23:9D:87:50:5C:F3:B4:EB:A5:CD:50:EC:57:E9:85:8D:87
            X509v3 Authority Key Identifier:
                keyid:81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:6d:0d:20:eb:78:09:c6:62:f4:ad:f7:65:37:73:9b:35:ad:
         fd:f5:5e:a4:14:4a:08:8b:e7:98:a3:6b:50:0a:eb:78:f1:fb:
         9d:0f:10:f1:c7:07:a5:19:f3:08:42:61:b3:76:4a:35:37:dd:
         c6:83:75:c9:36:35:42:6e:ac:92:8d:b6:dd:52:61:f0:1e:19:
         45:bf:c2:d9:e6:35:6a:c2:b7:48:8e:35:c2:a8:5a:71:17:39:
         ab:3d:7e:34:c7:fc:c4:25:59:8a:56:89:e3:af:b0:18:5a:07:
         88:19:86:bc:7f:ba:df:66:01:ea:f6:02:f6:6a:2c:58:d8:68:
         10:6e:0a:33:69:5b:ca:b3:be:84:56:63:34:0d:47:ca:c8:29:
         79:fd:7d:cf:e7:77:56:21:4a:cc:97:98:e9:6a:b9:0a:f0:5b:
         88:b9:1d:d7:10:93:d8:41:3b:f5:75:d1:bb:58:87:46:b9:d1:
         3b:c6:94:36:5a:d4:49:c1:a4:82:b3:24:61:21:b6:14:7a:10:
         a0:c9:a3:7f:b9:e4:8a:17:2a:94:53:8e:2e:92:ad:36:a2:cc:
         ac:03:bc:27:66:d4:ad:bc:2a:cf:a1:45:c1:d5:7d:65:30:cf:
         3e:8a:f2:77:c1:76:52:52:81:dc:88:61:e8:e3:48:d6:46:65:
         a9:7e:e7:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqIUJ7Jnw11Je7Q4yffXtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYzExNTEyZWVlOGZlZDkxYzQyMmYzM2I2NThkNjhiYzM0
ZWI3ODAwHhcNMjYwMzI2MDEwMDQ4WhcNMjYwMzI3MDEwMDQ4WjAzMTEwLwYDVQQD
EyhlYzE4NzYyMzlkODc1MDVjZjNiNGViYTVjZDUwZWM1N2U5ODU4ZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP3ZpF1oRMZrd03CkbvZjyDz9C67
VHskKR/xMx68KySVKjD5STvdJD7mJuC8ymnfE9ko7NZ4tdNI/QINZPpMZp/L46Q0
XDZFOTdaOwh+/svskkIkotk+bS2QCSJi66orkr3Kws1VzKlEsz2DuxIRXQ+tADF4
zHlvTDrkPAQWG5sIj+jnJFCmBnKeGoAv9tLWcSW1fshLBiGlXNda1eJ6LOX0u1Ss
+4oblLGASvKr70HWklDeBNIihl2wErbb1JAOdoYwqZaBN8/vxzab24LZgEXMUKLo
Ut0FYzQCllV31me94NSgqrPfGsN92tVN92wtlxS0iDQwHZuwa+sxhNR9OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwYdiOdh1Bc87Trpc1Q7FfphY2HMB8GA1UdIwQY
MBaAFIHBFRLu6P7ZHEIvM7ZY1ovDTreAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jMmMwM2UtNTZlMS00MDNhLTkzZGUt
ZTIzYWQ3OTliMWQxLzEvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9jMmMwM2UtNTZlMS00MDNhLTkzZGUtZTIzYWQ3OTliMWQx
LzEvZ2NFVkV1N29fdGtjUWk4enRsaldpOE5PdDRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABm0NIOt4
CcZi9K33ZTdzmzWt/fVepBRKCIvnmKNrUArrePH7nQ8Q8ccHpRnzCEJhs3ZKNTfd
xoN1yTY1Qm6sko223VJh8B4ZRb/C2eY1asK3SI41wqhacRc5qz1+NMf8xCVZilaJ
46+wGFoHiBmGvH+632YB6vYC9mosWNhoEG4KM2lbyrO+hFZjNA1Hysgpef19z+d3
ViFKzJeY6Wq5CvBbiLkd1xCT2EE79XXRu1iHRrnRO8aUNlrUScGkgrMkYSG2FHoQ
oMmjf7nkihcqlFOOLpKtNqLMrAO8J2bUrbwqz6FFwdV9ZTDPPoryd8F2UlKB3Ihh
6ONI1kZlqX7nMQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:29 2026 by rpki-client