Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.mft
File:                     G-vsblSMHSxoMZyNKaNfwG0Fxco.mft (raw, json)
Hash identifier:          bvo1AdS2/FQcj0QdAMeojTf+l0SWlf+6dSy8f3gdio8=
Subject key identifier:   C0:25:C6:6F:62:C7:AB:5E:03:0F:1B:75:0F:80:84:D7:94:CB:9E:3A
Authority key identifier: 1B:EB:EC:6E:54:8C:1D:2C:68:31:9C:8D:29:A3:5F:C0:6D:05:C5:CA
Certificate issuer:       /CN=1bebec6e548c1d2c68319c8d29a35fc06d05c5ca
Certificate serial:       019D265F31E1655AD4FC92CED75510E33562
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-vsblSMHSxoMZyNKaNfwG0Fxco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.mft
Manifest number:          0325
Signing time:             Wed 25 Mar 2026 19:01:05 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:05 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:05 +0000
Files and hashes:         1: 759EZZ7sNbintfo3VxNnHUcoDHw.roa (hash: m15W6uTHGDBUqzkZ4aLR/GyVbfgOe0pjk7+WPyqtkds=)
                          2: G-vsblSMHSxoMZyNKaNfwG0Fxco.crl (hash: nTrcC9L9uLjkC1RSuB12pvJYl47MZ48HQEorB/wnjOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-vsblSMHSxoMZyNKaNfwG0Fxco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:31:e1:65:5a:d4:fc:92:ce:d7:55:10:e3:35:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bebec6e548c1d2c68319c8d29a35fc06d05c5ca
        Validity
            Not Before: Mar 25 19:01:05 2026 GMT
            Not After : Mar 26 19:01:05 2026 GMT
        Subject: CN=c025c66f62c7ab5e030f1b750f8084d794cb9e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e6:2d:3e:e1:84:44:a7:86:cb:76:53:bd:2c:
                    45:fe:42:6d:10:48:ca:6a:71:57:fa:38:3e:af:5f:
                    54:23:ce:c0:a9:12:54:5a:37:ca:8b:a3:c5:dc:72:
                    90:65:55:3f:e8:dd:65:da:6e:84:3f:12:93:b2:aa:
                    86:1b:e6:3d:df:3c:9b:17:35:4f:8b:66:7e:1e:96:
                    8f:22:60:d7:5f:44:3f:6f:18:f0:c2:96:e3:5d:30:
                    84:ac:e2:51:bc:54:81:87:3e:c2:24:1a:a3:52:ae:
                    15:7c:8b:48:ea:93:3e:3d:50:96:3a:01:fb:ad:f2:
                    d4:a8:19:19:0f:d0:83:3e:5e:c7:39:32:2e:3f:2b:
                    52:c6:f0:55:6c:b7:48:45:27:82:da:7f:8d:ef:04:
                    cb:fb:b5:92:35:7d:fc:70:80:e5:48:a7:01:65:58:
                    36:8e:86:e7:2f:23:2a:95:97:16:ba:7d:a4:1a:fe:
                    42:70:5f:01:20:2a:49:a6:f9:ab:4e:d6:8c:7e:15:
                    b2:c7:a8:78:b5:35:33:2f:b8:40:d6:f1:e1:69:79:
                    36:18:8a:3f:7c:9f:32:81:17:bc:60:be:76:6d:7e:
                    57:5b:52:65:03:39:d8:71:37:14:05:2c:ba:c2:02:
                    53:fe:3f:ed:6d:eb:c5:a0:94:0f:b9:fa:dd:0a:a1:
                    0a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:25:C6:6F:62:C7:AB:5E:03:0F:1B:75:0F:80:84:D7:94:CB:9E:3A
            X509v3 Authority Key Identifier:
                keyid:1B:EB:EC:6E:54:8C:1D:2C:68:31:9C:8D:29:A3:5F:C0:6D:05:C5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-vsblSMHSxoMZyNKaNfwG0Fxco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:92:ec:25:3b:b6:89:c5:a8:75:c2:16:e7:69:56:52:87:1f:
         0d:2a:1b:e0:44:a4:54:88:d7:8e:3f:1d:96:68:76:6e:c7:34:
         23:08:5f:22:78:74:cd:dd:f3:b7:77:a2:9b:1a:0c:e1:26:3d:
         12:c3:39:a6:02:db:f2:95:58:71:fb:db:75:77:38:4a:00:20:
         36:23:6a:99:b9:83:c9:1d:2e:2f:41:7c:2f:98:4c:a6:8d:60:
         73:c6:4f:e7:60:aa:61:39:aa:73:1c:9c:6d:84:9f:68:21:af:
         38:ca:92:81:36:2e:1f:07:f4:1a:84:47:fa:07:c4:1c:fc:56:
         c5:a9:25:e3:3f:c8:5a:3d:c3:2e:66:b3:8a:04:c0:b6:6d:6b:
         12:3a:3e:4f:3a:03:48:50:ec:9a:3a:aa:8c:08:0f:56:f2:07:
         32:11:f8:63:78:ce:85:1d:61:e9:0d:bb:3f:e9:1e:a7:b3:d6:
         f0:16:f6:df:d3:cf:e3:81:f6:c5:15:06:2b:84:cb:77:ae:5a:
         12:5a:cb:ff:a6:d0:24:08:7a:e3:3d:68:89:9a:b7:97:83:b4:
         0f:e4:67:b6:fd:74:de:95:ee:db:7d:4b:69:5a:f7:0b:e8:9b:
         1e:b4:1c:cb:53:b0:24:ec:65:bd:ef:5f:81:78:b8:81:00:96:
         d8:1b:2a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:32 2026 by rpki-client