Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
File:                     GCJVGHajpiZZn0Z8eucJuBwU30k.mft (raw, json)
Hash identifier:          CwvAceCd3ULL9XLvy7r42z70Lpvk6nbV8YrQ46QcpQU=
Subject key identifier:   22:51:D4:56:01:3F:B8:C7:75:F7:73:57:93:D1:1F:81:B6:80:48:7C
Authority key identifier: 18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49
Certificate issuer:       /CN=1822551876a3a626599f467c7ae709b81c14df49
Certificate serial:       019D27A88B05F44E42F9FE62057518A06733
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
Manifest number:          10E2
Signing time:             Thu 26 Mar 2026 01:00:50 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:50 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:50 +0000
Files and hashes:         1: 8T_L6iEGijgsOFAP__TyTkzacD4.roa (hash: lT4gyxVqqODirySdjQ4sbRLQmQNb+GEiL/V4cJzYViM=)
                          2: GCJVGHajpiZZn0Z8eucJuBwU30k.crl (hash: 3jD/Lgztv/pMCTJR8ulK8LUV2ikAtky48JnVKyd2crg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:8b:05:f4:4e:42:f9:fe:62:05:75:18:a0:67:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1822551876a3a626599f467c7ae709b81c14df49
        Validity
            Not Before: Mar 26 01:00:50 2026 GMT
            Not After : Mar 27 01:00:50 2026 GMT
        Subject: CN=2251d456013fb8c775f7735793d11f81b680487c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:63:82:c5:b9:d0:22:fc:e0:b2:f6:ca:a6:
                    13:3b:99:2b:72:59:f4:dc:3d:28:cd:96:5d:5d:cd:
                    e8:db:fc:95:bd:66:c0:90:e4:86:a1:95:c3:5e:e4:
                    37:b5:bc:1a:7c:99:30:fb:02:1c:b1:bd:fa:02:40:
                    49:f5:1b:78:4c:30:35:c2:61:ab:ed:8e:6c:ea:75:
                    75:1e:3b:84:f1:9d:d7:16:81:21:bb:ec:ca:e5:5b:
                    b8:ef:20:09:c5:cb:37:b9:e2:a1:2e:ff:76:d2:d0:
                    bd:2b:4b:f5:a8:c1:4e:84:b8:05:ce:40:a9:9d:1c:
                    fd:3e:8c:07:88:18:b6:d1:a4:9d:6f:6f:b7:20:1c:
                    4f:f1:f7:cf:d0:ea:e2:01:51:18:5d:dd:a1:99:09:
                    4d:08:12:0d:63:00:cc:fd:54:2e:73:e0:61:13:af:
                    31:15:43:6a:c1:3c:a6:c8:cf:fc:39:73:36:26:93:
                    8b:71:e9:83:90:b3:bc:e8:98:9e:b9:97:a4:3f:99:
                    3b:af:1e:57:0a:62:b5:33:46:95:b8:f3:00:a5:50:
                    5b:66:1b:5e:75:6f:03:51:0e:4e:f3:60:97:23:77:
                    de:db:bf:b9:95:4d:f4:b8:aa:66:fa:f1:19:2b:e0:
                    f3:cf:63:e6:3e:25:f9:73:49:af:f7:de:ae:1f:e2:
                    bc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:51:D4:56:01:3F:B8:C7:75:F7:73:57:93:D1:1F:81:B6:80:48:7C
            X509v3 Authority Key Identifier:
                keyid:18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:9a:be:2d:89:17:a8:7a:a2:38:89:24:32:48:f4:92:30:10:
         f1:bd:1c:4a:ce:37:12:24:93:e3:b5:d8:59:a4:03:4f:fc:07:
         94:ea:22:1c:2e:ee:9f:56:f5:ff:17:d2:0b:50:e5:cb:4d:ad:
         84:8e:92:ee:c4:bd:0b:cb:b0:cb:31:90:fa:64:66:ff:22:1c:
         7f:51:6a:ea:b4:d3:32:c7:bf:15:44:2e:86:fc:13:12:00:2b:
         d4:d3:4a:a8:dc:33:d5:d3:3b:d7:dc:03:c0:e5:39:f8:89:a7:
         9f:e8:00:d1:39:55:9c:77:f7:03:a7:d8:c6:b4:9d:28:9e:be:
         c0:07:f2:bc:28:8c:05:78:f7:53:e0:22:a5:c7:aa:ab:b1:e6:
         98:09:be:11:4e:cb:43:30:c8:ca:9b:47:6f:5c:78:2c:c4:cd:
         cc:df:1c:d8:a2:44:7c:b9:aa:72:a4:c6:24:27:0d:87:3b:cc:
         08:6d:fb:63:e6:5a:89:2b:4f:cc:9b:6d:77:74:ac:4b:b3:64:
         14:18:91:c6:9c:32:2a:9c:4f:b1:02:cd:36:ab:68:96:bc:03:
         fe:97:cf:10:a0:77:0d:70:9b:4f:2c:e4:0a:0b:d1:d4:77:ec:
         60:a2:b8:ce:ae:80:01:ed:08:8e:1e:c9:54:11:0c:1a:ac:ac:
         4e:50:8f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:30 2026 by rpki-client