Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft
File:                     gbv0m8K-YG6m9Ivb-WJX3natfMA.mft (raw, json)
Hash identifier:          0uUFzDXyzxMtO7ZCUxX5Q7AGeKewqXRrHIvud5ia3p8=
Subject key identifier:   EC:4C:59:CB:19:5E:E1:E2:67:26:95:95:F7:9B:4A:1B:2C:66:36:BF
Authority key identifier: 81:BB:F4:9B:C2:BE:60:6E:A6:F4:8B:DB:F9:62:57:DE:76:AD:7C:C0
Certificate issuer:       /CN=81bbf49bc2be606ea6f48bdbf96257de76ad7cc0
Certificate serial:       019D28F26CA532670DAE294FA12D92FA0BC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gbv0m8K-YG6m9Ivb-WJX3natfMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft
Manifest number:          1884
Signing time:             Thu 26 Mar 2026 07:01:09 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:09 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:09 +0000
Files and hashes:         1: gbv0m8K-YG6m9Ivb-WJX3natfMA.crl (hash: 0cJTwA9DVlSkhOm8T3XFu1mGMmEjcs1JSg0TBn0wtbk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gbv0m8K-YG6m9Ivb-WJX3natfMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:6c:a5:32:67:0d:ae:29:4f:a1:2d:92:fa:0b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81bbf49bc2be606ea6f48bdbf96257de76ad7cc0
        Validity
            Not Before: Mar 26 07:01:09 2026 GMT
            Not After : Mar 27 07:01:09 2026 GMT
        Subject: CN=ec4c59cb195ee1e267269595f79b4a1b2c6636bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3a:d9:f4:cb:02:31:74:30:67:85:60:1f:33:
                    a1:65:e8:4b:14:c1:df:09:13:a2:64:5f:d0:5b:58:
                    0e:9f:48:d4:55:d8:54:fe:f0:1d:df:59:e6:19:8c:
                    98:bf:d6:c1:5d:67:ed:13:0f:f3:a5:35:e6:4f:02:
                    ca:0a:73:6b:5c:67:f2:3c:53:8f:41:b5:7c:4a:ba:
                    47:0b:19:50:03:f9:f2:42:87:b7:88:31:cf:34:b0:
                    3d:45:0e:5b:23:2f:ce:3b:df:96:c2:e9:4a:06:ca:
                    3a:a8:2a:5f:3b:b0:66:b6:02:ca:8e:33:fa:59:02:
                    21:f4:a2:bf:6c:28:57:6e:ae:18:f7:17:5c:b9:88:
                    70:d2:8a:2e:0b:91:27:70:0f:fa:a4:e6:80:c6:76:
                    fb:84:37:9f:12:bc:63:c7:a7:00:dd:77:a1:3e:1e:
                    54:66:20:35:2a:1c:d5:33:8a:19:ca:ea:4e:4c:9b:
                    d2:b9:6a:4d:25:29:cd:f6:ba:8e:61:01:0c:b1:58:
                    5b:4a:c8:35:87:c5:a7:6b:16:19:bc:37:47:97:44:
                    09:91:87:cd:aa:3d:c2:98:30:d3:50:db:06:32:97:
                    8f:38:a6:8e:2a:27:d7:68:45:b2:9d:e2:66:d2:aa:
                    c4:7b:6d:93:97:4d:d7:9f:53:7d:9d:69:04:e7:01:
                    6c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4C:59:CB:19:5E:E1:E2:67:26:95:95:F7:9B:4A:1B:2C:66:36:BF
            X509v3 Authority Key Identifier:
                keyid:81:BB:F4:9B:C2:BE:60:6E:A6:F4:8B:DB:F9:62:57:DE:76:AD:7C:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbv0m8K-YG6m9Ivb-WJX3natfMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/863eee-7714-4bc4-9268-41694202de68/1/gbv0m8K-YG6m9Ivb-WJX3natfMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:62:be:d2:1e:82:9e:45:2d:20:ae:0a:ff:aa:47:bc:3c:47:
         e7:2a:f8:31:97:f6:df:ab:98:d1:c0:84:80:5c:91:97:f3:26:
         b7:54:d7:50:2e:f4:76:5a:b4:7c:9d:78:66:83:76:aa:8b:55:
         e6:19:d4:43:df:f3:48:65:dc:fb:b7:1d:7a:32:03:6a:d9:71:
         2b:7b:09:e5:ab:a6:db:ec:48:e4:f7:27:b8:98:fd:ee:cd:62:
         06:a5:47:e5:0d:82:6f:f5:26:89:66:ae:30:00:16:64:bf:27:
         20:f1:16:06:20:0b:14:61:e6:15:ef:bc:52:8a:46:d1:43:51:
         c1:8c:92:3f:0c:d2:65:63:3e:43:35:ac:dd:ba:d3:90:a7:c6:
         36:02:59:1d:1f:6e:c9:b5:a6:80:74:30:49:04:f0:bd:19:83:
         36:77:26:fa:6a:99:48:67:0c:46:05:ad:1f:cd:6a:de:16:d8:
         a2:66:c9:1e:cf:00:4c:b2:96:b9:48:62:bb:fa:63:04:b8:3e:
         e5:0a:90:25:0f:86:94:cb:2b:c1:18:30:0b:06:61:4d:c6:79:
         ff:45:51:a7:82:c5:d2:63:d1:cb:56:fc:25:02:e8:43:4f:23:
         14:9f:8f:de:17:58:ac:34:83:6d:fc:0e:3d:15:4b:15:28:59:
         ae:b7:94:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:53 2026 by rpki-client