Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
File:                     GoPORK5McB6pcdM036u8WyjmR24.mft (raw, json)
Hash identifier:          oEQGW+Wv5LP/QKVw3E2cDb2IGicnmDMdC2BNR+C7Blc=
Subject key identifier:   61:1A:2A:7D:10:EF:B2:DE:99:3D:D3:E0:1C:FC:CF:6A:A1:E0:AE:87
Authority key identifier: 1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E
Certificate issuer:       /CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
Certificate serial:       019CEA134ED7CCECA493CB151702F016CBEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
Manifest number:          10B8
Signing time:             Sat 14 Mar 2026 02:00:59 +0000
Manifest this update:     Sat 14 Mar 2026 02:00:59 +0000
Manifest next update:     Sun 15 Mar 2026 02:00:59 +0000
Files and hashes:         1: GoPORK5McB6pcdM036u8WyjmR24.crl (hash: afiYIeNdBQ6oUCnEfeDoSTLkPFBNgIKZr+0p9MFNqOQ=)
                          2: e7GASbeCgANWz5iegzo-dHYfZVM.roa (hash: l9HQNVcMldPVoQboUzC9kltlmdqxfM4f7etmfeKvc9E=)
                          3: l1XA1WxDomG_I7YpojfGXMLSADs.roa (hash: 5XkhMqZeEKAmgMdjJ9L6nB7pdTZD72Q0VcYVhIxf4rk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ea:13:4e:d7:cc:ec:a4:93:cb:15:17:02:f0:16:cb:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a83ce44ae4c701ea971d334dfabbc5b28e6476e
        Validity
            Not Before: Mar 14 02:00:59 2026 GMT
            Not After : Mar 15 02:00:59 2026 GMT
        Subject: CN=611a2a7d10efb2de993dd3e01cfccf6aa1e0ae87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9c:33:c7:5e:02:5a:7c:e2:89:03:84:d5:b7:
                    26:71:6c:9c:71:5b:44:cf:a6:e0:cb:5b:a2:f1:cd:
                    a7:ee:24:4f:87:3c:4b:89:7c:54:f8:33:f0:3b:cd:
                    b5:d3:2f:3a:1a:8d:81:ac:d5:9a:e0:48:f1:a0:6a:
                    c8:2d:c3:6d:50:fe:2b:ab:08:ac:53:0b:05:23:21:
                    04:f7:ff:e8:aa:7d:25:eb:a5:9d:74:56:08:0e:8b:
                    14:9f:97:8b:e2:2b:e3:6e:b6:65:92:73:02:89:dc:
                    5e:89:98:0d:91:8f:36:b2:0f:88:a5:00:0e:ad:d9:
                    d7:32:f8:20:cf:0e:74:22:38:f2:80:a2:eb:66:c7:
                    88:f0:dd:86:bf:ad:97:b0:f9:0d:82:81:62:11:4a:
                    1c:5f:64:d9:88:df:bb:e6:46:d8:f9:c8:bd:1a:4e:
                    7c:67:09:71:fa:5a:77:29:8f:4b:5f:ee:dd:c3:b8:
                    09:db:5c:7f:83:c1:fd:c3:47:54:a1:66:84:78:4f:
                    cb:6e:67:17:53:df:6d:42:b8:13:5c:64:ac:d7:c4:
                    a2:cd:70:af:c1:62:8c:5c:b5:68:e7:f3:83:05:cf:
                    91:a4:a4:4a:04:9e:b7:e9:0f:b4:d0:0c:59:11:6d:
                    1e:60:d3:4e:d2:63:8b:f3:65:2e:1a:a1:17:98:f4:
                    d2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1A:2A:7D:10:EF:B2:DE:99:3D:D3:E0:1C:FC:CF:6A:A1:E0:AE:87
            X509v3 Authority Key Identifier:
                keyid:1A:83:CE:44:AE:4C:70:1E:A9:71:D3:34:DF:AB:BC:5B:28:E6:47:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GoPORK5McB6pcdM036u8WyjmR24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2773b3-5109-43c0-8009-424dda519ef1/1/GoPORK5McB6pcdM036u8WyjmR24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f1:bd:17:f1:b2:a9:4e:e7:b7:86:9c:90:71:66:5b:7c:04:
         ba:2e:a5:28:e5:44:92:36:1e:55:ab:99:6a:1b:8c:a5:b8:f1:
         47:5c:c8:34:d6:37:e7:d5:1a:8f:de:79:21:9f:ed:ba:a2:9d:
         d5:c3:fe:e7:88:73:1c:17:72:68:b3:92:68:d7:42:88:0b:84:
         3b:cd:ab:b6:54:fc:0b:d8:20:e9:b6:9a:21:7c:20:35:b0:6f:
         06:2f:92:42:37:01:25:ae:5a:12:82:fd:d2:20:2e:98:94:28:
         59:ed:02:03:66:d0:62:97:2a:1b:8e:85:9a:c0:c8:f6:4d:21:
         54:7d:df:d5:90:ce:e1:c3:79:50:95:38:a1:ac:62:b1:06:b4:
         5e:11:37:01:01:80:dd:7d:33:09:58:84:17:7c:ac:b4:d6:0a:
         a4:cc:b2:61:39:b3:51:f0:8b:1b:2f:35:2f:e2:a3:2b:91:35:
         f1:f5:80:73:79:9e:0d:24:52:93:e7:fe:02:ea:be:ff:b0:64:
         cc:f1:f3:34:89:59:9a:7f:83:e1:26:4c:2a:0f:76:86:f3:ab:
         be:98:14:9f:c8:8d:a8:e5:cd:ae:35:70:a4:4d:9e:b9:10:f8:
         b7:ca:0f:87:da:f8:77:5b:5d:d4:c5:de:93:14:31:04:5f:37:
         31:78:25:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 10:43:00 2026 by rpki-client