Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
File:                     l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft (raw, json)
Hash identifier:          i6Gr+rnxnXdaZN2MsuTWwV61wCxwV0NdA9TF0sSCT+k=
Subject key identifier:   80:A4:58:80:38:9E:6E:AD:3A:3D:50:FA:03:2E:2F:49:15:E0:2A:E7
Authority key identifier: 97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
Certificate issuer:       /CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Certificate serial:       019D265F7B99789356BA4DAB03D10FA87A2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
Manifest number:          01BC
Signing time:             Wed 25 Mar 2026 19:01:24 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:24 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:24 +0000
Files and hashes:         1: Je6pwcupxmYkeLTCOv8CGXlDTBs.roa (hash: JZNE/6+TrLFJcwxnS7s7SxfstDxwCFdTQJQsRp/mtTA=)
                          2: e-HTjSuozo0mlChsUxa0_7Yk7RM.roa (hash: dXEcwi7645/h7WjWO/cFOzI2igf3QOOGJnm9yHOk7a0=)
                          3: l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl (hash: Iy0ewbR2F5R5hPMiQJTZb6ZUwb7aFPS5HqN4fyCFVKI=)
                          4: po54B6DcG4NNjfbOaiSiD07LWNY.roa (hash: F6tAS7XR1ayK/65ME6r1XZa5gTXikXeH7j2JEQzHRCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:7b:99:78:93:56:ba:4d:ab:03:d1:0f:a8:7a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
        Validity
            Not Before: Mar 25 19:01:24 2026 GMT
            Not After : Mar 26 19:01:24 2026 GMT
        Subject: CN=80a45880389e6ead3a3d50fa032e2f4915e02ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:20:95:ec:d1:c9:a7:96:5b:1e:ce:da:83:7c:
                    4a:6e:8d:ce:bf:d9:69:b0:28:a1:44:25:b7:93:f2:
                    c8:32:e4:32:d9:46:87:e1:b8:ec:fe:4b:b8:c2:90:
                    b7:2b:09:ab:18:00:8c:e8:43:e6:6a:94:e0:86:bb:
                    4e:bd:94:75:1e:85:f2:14:41:67:c2:31:d6:5f:24:
                    e1:9b:62:7d:30:35:c7:a7:9e:67:7b:2f:68:c4:37:
                    fd:e0:79:26:33:0a:5e:15:83:b8:f6:55:d2:97:a1:
                    5f:b2:32:d3:44:6d:87:c4:3b:f5:00:d7:2d:9b:dc:
                    ea:20:5c:09:3a:b8:60:db:0c:c1:1c:eb:5b:9b:9c:
                    00:f2:a7:3d:14:36:70:c2:9a:d2:3c:87:0d:61:0e:
                    bb:da:a5:dd:70:c9:17:be:54:cd:85:6c:8a:88:77:
                    0d:84:0f:64:e2:f8:f9:32:27:59:0f:2c:0d:4a:92:
                    5f:f9:08:9d:77:4b:04:9d:71:10:b2:47:36:68:3d:
                    03:a3:fd:5d:05:9f:4d:52:06:7d:cd:7b:53:bb:27:
                    44:20:26:e3:1d:d0:29:bc:01:2a:f2:20:d3:dd:6e:
                    0c:36:e3:9c:64:7e:86:b7:33:83:db:72:af:f5:87:
                    8b:ed:ce:9a:3e:fa:0d:84:ef:92:2a:16:f3:48:e9:
                    7d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A4:58:80:38:9E:6E:AD:3A:3D:50:FA:03:2E:2F:49:15:E0:2A:E7
            X509v3 Authority Key Identifier:
                keyid:97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:37:e1:8c:29:e6:53:39:58:30:92:88:3f:07:20:49:d2:f1:
         ff:4b:bf:de:af:4a:21:d5:3a:60:9d:0e:d3:b6:95:90:cb:ac:
         64:86:1b:13:8c:ff:78:86:63:e5:72:c7:7c:ce:9e:1d:dc:41:
         dc:50:86:4b:e7:c6:8c:fa:d2:0d:2c:fb:bd:0f:6a:94:e6:b8:
         d0:37:0d:29:7d:fb:eb:d8:24:0c:70:98:6b:bc:37:a8:8b:68:
         ab:9b:e3:1c:2a:12:14:e9:77:fa:b8:9e:c2:c8:d8:74:3b:7d:
         34:5f:90:25:83:8e:1f:8b:39:71:e2:bf:57:03:79:d1:89:23:
         bc:7c:90:ab:27:81:f9:e5:7f:c4:5e:72:a4:e1:a4:e1:56:82:
         86:9c:43:14:d0:78:0a:5b:f3:8e:03:98:3f:bd:71:bd:c3:1d:
         31:8f:03:5f:fc:64:20:25:2b:12:f2:0a:aa:c4:82:a4:29:2b:
         17:01:a1:29:b4:47:c3:c1:48:e5:c0:07:37:47:af:e7:53:cd:
         ac:eb:b8:d7:9d:8d:ea:c7:02:da:65:6f:9b:4a:c3:c1:eb:9b:
         60:c3:f8:5f:35:41:2d:d5:02:3d:3b:96:38:83:4d:cd:1f:b6:
         fb:64:2e:10:5f:8c:55:8d:0b:06:15:a5:20:5f:ae:d2:ae:d7:
         68:0f:f1:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX3uZeJNWuk2rA9EPqHotMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZjE5MDQ3ZjNmMWUwNTkzZDFjMzE3OTk3YmVkZTI4OTBh
YTBmZmIwHhcNMjYwMzI1MTkwMTI0WhcNMjYwMzI2MTkwMTI0WjAzMTEwLwYDVQQD
Eyg4MGE0NTg4MDM4OWU2ZWFkM2EzZDUwZmEwMzJlMmY0OTE1ZTAyYWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSCV7NHJp5ZbHs7ag3xKbo3Ov9lp
sCihRCW3k/LIMuQy2UaH4bjs/ku4wpC3KwmrGACM6EPmapTghrtOvZR1HoXyFEFn
wjHWXyThm2J9MDXHp55ney9oxDf94HkmMwpeFYO49lXSl6FfsjLTRG2HxDv1ANct
m9zqIFwJOrhg2wzBHOtbm5wA8qc9FDZwwprSPIcNYQ672qXdcMkXvlTNhWyKiHcN
hA9k4vj5MidZDywNSpJf+Qidd0sEnXEQskc2aD0Do/1dBZ9NUgZ9zXtTuydEICbj
HdApvAEq8iDT3W4MNuOcZH6GtzOD23Kv9YeL7c6aPvoNhO+SKhbzSOl9WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICkWIA4nm6tOj1Q+gMuL0kV4CrnMB8GA1UdIwQY
MBaAFJfxkEfz8eBZPRwxeZe+3iiQqg/7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbF9HUVJfUHg0Rms5SERGNWw3N2VLSkNxRF9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8yMGIzZmUtZWViZi00MmZmLWIwMTIt
N2EzZTM5NGMwNDkzLzEvbF9HUVJfUHg0Rms5SERGNWw3N2VLSkNxRF9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8yMGIzZmUtZWViZi00MmZmLWIwMTItN2EzZTM5NGMwNDkz
LzEvbF9HUVJfUHg0Rms5SERGNWw3N2VLSkNxRF9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwDfhjCnm
UzlYMJKIPwcgSdLx/0u/3q9KIdU6YJ0O07aVkMusZIYbE4z/eIZj5XLHfM6eHdxB
3FCGS+fGjPrSDSz7vQ9qlOa40DcNKX3769gkDHCYa7w3qItoq5vjHCoSFOl3+rie
wsjYdDt9NF+QJYOOH4s5ceK/VwN50YkjvHyQqyeB+eV/xF5ypOGk4VaChpxDFNB4
ClvzjgOYP71xvcMdMY8DX/xkICUrEvIKqsSCpCkrFwGhKbRHw8FI5cAHN0ev51PN
rOu4152N6scC2mVvm0rDweubYMP4XzVBLdUCPTuWOINNzR+2+2QuEF+MVY0LBhWl
IF+u0q7XaA/x5g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:37:03 2026 by rpki-client