Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
File:                     GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft (raw, json)
Hash identifier:          oM0pagSKZR762jn6Uyvj+7nJprURQMTrqUcSU5mygOc=
Subject key identifier:   24:86:65:39:7E:5E:B5:2F:FD:4B:0C:17:EF:FB:05:A5:66:5A:E4:3F
Authority key identifier: 1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F
Certificate issuer:       /CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
Certificate serial:       019D2703C34407A45B1ECA15E7FE16504143
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
Manifest number:          1819
Signing time:             Wed 25 Mar 2026 22:00:51 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:51 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:51 +0000
Files and hashes:         1: GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl (hash: 8MkH2ee0gJHIb7UvpIHAF2mkuSXCghyG6LpI6Fun7/Y=)
                          2: O1x05-HbZz9z_RAG_UsW8fq9KnQ.roa (hash: RqXyqzQCK+VpxYKPTIZPxW8p4AdlK8gMbx5a8aqVV1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:c3:44:07:a4:5b:1e:ca:15:e7:fe:16:50:41:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a79a0ac3312c1653f300b04510d9bf2c9c2a55f
        Validity
            Not Before: Mar 25 22:00:51 2026 GMT
            Not After : Mar 26 22:00:51 2026 GMT
        Subject: CN=248665397e5eb52ffd4b0c17effb05a5665ae43f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7d:a3:97:1b:33:0a:04:32:bb:d5:2f:92:7d:
                    78:57:18:10:f6:fb:46:d4:c3:38:ef:8f:19:87:41:
                    17:53:11:d1:8d:cc:ef:68:dc:87:e1:13:40:e6:7b:
                    61:92:d4:1c:e3:86:ee:e0:07:6f:65:95:45:0d:ba:
                    87:4a:ec:70:11:f4:c2:92:fe:ed:93:ed:75:c4:de:
                    bb:a2:cf:ec:db:5b:80:a5:2f:0c:be:47:f3:49:f3:
                    63:27:c3:f5:10:8f:13:2f:fb:97:45:53:29:89:88:
                    d9:c0:00:b2:a6:9e:29:41:bf:5d:e6:31:33:64:18:
                    43:b1:7a:f7:ea:b2:44:b9:3c:f4:79:94:38:89:c3:
                    a8:e6:6e:49:7a:bd:aa:e7:af:45:d4:d8:0f:62:5c:
                    9a:0d:69:b6:88:03:93:b0:d3:c5:95:d7:f7:8a:b7:
                    23:e4:c4:fc:3f:1d:fa:c7:0f:0a:c6:b2:9a:ee:0e:
                    71:dc:98:f0:dd:68:e1:f6:5f:4e:e4:af:23:d5:d7:
                    37:b4:8e:9b:50:54:0b:5b:e6:7e:ce:ae:84:66:50:
                    8a:f4:83:f8:82:ac:30:36:25:c2:37:69:c5:fd:43:
                    a9:ce:80:2e:dc:a2:78:dc:50:4c:ed:68:39:99:76:
                    c1:12:06:47:6c:f1:9a:7a:26:09:7e:9b:1b:d6:a3:
                    6f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:86:65:39:7E:5E:B5:2F:FD:4B:0C:17:EF:FB:05:A5:66:5A:E4:3F
            X509v3 Authority Key Identifier:
                keyid:1A:79:A0:AC:33:12:C1:65:3F:30:0B:04:51:0D:9B:F2:C9:C2:A5:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnmgrDMSwWU_MAsEUQ2b8snCpV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/329968-247c-4dea-99d2-60107b4ea4eb/1/GnmgrDMSwWU_MAsEUQ2b8snCpV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:dd:d8:a6:27:a1:d3:57:aa:69:f8:71:b3:ef:7f:95:13:ca:
         1a:fb:b6:ef:89:ea:9a:fe:cb:c9:82:e5:fa:8b:04:2e:8c:05:
         08:14:42:34:7c:5a:b9:b5:b5:0c:c4:6e:85:f1:51:93:7d:5e:
         83:6a:cd:b3:94:a0:80:67:54:69:5b:7a:a9:92:57:f9:2f:0d:
         63:d2:3d:d9:2b:27:93:29:53:66:15:76:34:1a:45:e8:21:42:
         0b:a5:0d:5f:74:d2:b8:65:db:14:60:2d:a8:17:01:3c:71:16:
         5a:21:e6:97:32:bf:6c:8a:fa:c5:7c:a0:bb:f7:90:d7:c2:98:
         9f:31:dc:51:86:f4:4a:fb:a9:ab:6e:cb:dc:28:76:1b:8b:9f:
         7f:19:f6:a7:78:a0:e8:f4:34:c0:71:67:55:de:e8:ab:da:c7:
         cd:f0:e5:e3:3f:5a:ca:23:4c:f1:55:63:33:7f:f2:98:67:97:
         cc:5f:1f:3d:ed:a1:fd:29:40:54:c6:52:94:1d:97:92:26:64:
         70:e4:bf:19:97:f4:bb:a0:a9:7e:c5:ed:d9:62:ee:6a:50:9f:
         01:fb:b7:d2:59:18:85:4d:75:44:34:f7:e9:ca:1b:dd:58:33:
         6d:0c:b1:79:a0:86:70:37:4c:53:7f:fc:98:f6:86:e3:83:e9:
         5b:56:64:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:05 2026 by rpki-client