Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
File:                     G-u7vrbpIjF2ylod8UmJhgF-jig.mft (raw, json)
Hash identifier:          K+C+RYRqmk7Im0kwQQXQg9Lhlv5Cfk0qJgDMHEsgxmo=
Subject key identifier:   9E:71:37:A3:50:F0:A0:56:23:02:2C:65:A3:96:9A:17:31:63:5C:E9
Authority key identifier: 1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28
Certificate issuer:       /CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
Certificate serial:       019D2703B5BB18DA143BA63431C708743013
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
Manifest number:          1766
Signing time:             Wed 25 Mar 2026 22:00:47 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:47 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:47 +0000
Files and hashes:         1: G-u7vrbpIjF2ylod8UmJhgF-jig.crl (hash: PyhXMyQZN3M1ZAbfz7MGWvIXP0GI3p/0agF03x0JGCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:b5:bb:18:da:14:3b:a6:34:31:c7:08:74:30:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bebbbbeb6e9223176ca5a1df1498986017e8e28
        Validity
            Not Before: Mar 25 22:00:47 2026 GMT
            Not After : Mar 26 22:00:47 2026 GMT
        Subject: CN=9e7137a350f0a05623022c65a3969a1731635ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:a5:f3:a5:77:58:bc:0f:5f:cf:59:7a:b4:
                    d6:ba:6e:2a:df:b3:45:e6:18:83:3b:56:bc:a8:f6:
                    7a:29:a4:23:15:0f:1f:43:4f:e8:f2:32:99:d9:b9:
                    d2:39:3e:7f:7a:32:74:29:96:f6:04:08:36:2c:b5:
                    6c:49:c7:e0:b4:60:e2:c7:e8:80:ca:cb:f4:2c:71:
                    c6:33:5d:a4:f9:f5:1e:3d:e1:af:cb:5a:a8:42:b4:
                    12:38:a8:1f:4f:6c:3a:4e:a9:b5:c8:ac:9f:17:26:
                    2d:a7:ba:66:86:5d:a9:11:2a:fc:a5:6c:2a:81:dc:
                    63:2c:5f:a8:2c:95:14:e3:7a:66:01:14:f9:af:ac:
                    23:ca:51:25:cc:88:91:d3:d5:8b:96:55:bd:f8:c1:
                    bc:69:dc:c3:63:b0:02:40:63:87:51:26:5b:4b:70:
                    fc:84:7d:b4:66:09:ea:5e:92:80:c8:1e:93:11:a3:
                    cb:76:cc:fc:f4:c4:cd:59:4a:58:cb:f0:50:07:d3:
                    38:01:8f:ed:b1:0e:b9:e2:6a:6b:ef:b9:40:30:10:
                    72:34:ca:67:dc:f3:d2:38:1b:db:48:33:91:43:97:
                    cd:d5:30:a9:32:3e:10:83:f2:bb:cf:6c:2c:9c:14:
                    2c:83:5a:76:a1:36:94:43:7c:6e:f1:f6:4c:be:1f:
                    56:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:71:37:A3:50:F0:A0:56:23:02:2C:65:A3:96:9A:17:31:63:5C:E9
            X509v3 Authority Key Identifier:
                keyid:1B:EB:BB:BE:B6:E9:22:31:76:CA:5A:1D:F1:49:89:86:01:7E:8E:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-u7vrbpIjF2ylod8UmJhgF-jig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/839fd8-c28c-4112-979a-7ec402ecfb5c/1/G-u7vrbpIjF2ylod8UmJhgF-jig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:87:b3:21:ff:cb:73:ca:7c:2a:47:d3:6b:f5:ed:35:98:26:
         2d:f7:34:05:56:9d:62:00:85:f0:52:c5:3c:a4:c0:c3:cb:f4:
         47:fc:9f:3c:45:5f:40:bc:5d:1a:64:ef:36:0a:7f:ce:f2:72:
         e7:ed:fb:74:67:c9:8c:92:3d:20:dd:b0:dd:60:36:bc:91:6d:
         b6:09:1d:e2:9e:24:9e:8e:1b:83:b3:34:86:00:c8:5b:12:50:
         ef:e9:dc:e1:d0:a7:b5:ea:cf:24:83:ac:0f:b8:06:9b:9b:a7:
         55:32:32:5b:5a:2f:ff:16:d5:cb:87:a6:1c:ba:27:25:d8:4f:
         ae:2b:ff:73:8a:a0:e6:27:f6:e6:80:55:e2:77:e1:9e:b6:01:
         a3:50:cc:b0:35:d8:bc:e1:52:ca:04:e3:29:d8:e0:9a:d3:b6:
         5a:19:34:ff:a0:97:d7:b4:27:7a:f5:d6:10:28:98:19:da:35:
         1b:5d:5e:76:fa:1e:03:76:b6:59:d1:43:da:d9:f1:d9:93:b3:
         fb:3d:42:f5:ae:9d:82:1a:c7:ad:cf:5d:7f:2a:0e:72:a9:38:
         3d:d2:2f:21:33:43:25:15:b6:a2:30:de:07:e7:a2:30:d2:06:
         f2:9f:21:45:c4:bd:34:35:af:05:f9:cc:41:ad:52:c5:ed:46:
         18:1e:0d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:05 2026 by rpki-client