Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
File:                     GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft (raw, json)
Hash identifier:          42JQd6nVlWBeYyb09l4Ve/tNFu/UBhLf0TXTn4i6n6c=
Subject key identifier:   FD:FC:DD:61:2F:BA:4F:CB:30:92:CA:0B:E5:47:BB:F8:76:E9:78:40
Authority key identifier: 18:8A:87:AB:79:10:19:37:93:B8:AA:6C:3C:1E:E6:6B:DB:06:A7:1F
Certificate issuer:       /CN=188a87ab7910193793b8aa6c3c1ee66bdb06a71f
Certificate serial:       019CDA31EADA14DB1CBFC9E15736CA6996BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
Manifest number:          E0
Signing time:             Wed 11 Mar 2026 00:00:30 +0000
Manifest this update:     Wed 11 Mar 2026 00:00:30 +0000
Manifest next update:     Thu 12 Mar 2026 00:00:30 +0000
Files and hashes:         1: GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl (hash: kIo4SCepgXLzHxEhQUj6dQBOvM6alAG3YfBR6G8uQcY=)
                          2: dKUSVy6IdXXRjgtpigNGU0J9jeU.asa (hash: CejzruUkEWq9zLEaoAabqikLpPGhjf75ZRntC5aAVpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:da:31:ea:da:14:db:1c:bf:c9:e1:57:36:ca:69:96:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188a87ab7910193793b8aa6c3c1ee66bdb06a71f
        Validity
            Not Before: Mar 11 00:00:30 2026 GMT
            Not After : Mar 12 00:00:30 2026 GMT
        Subject: CN=fdfcdd612fba4fcb3092ca0be547bbf876e97840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f3:ff:7c:bb:64:e6:5c:25:a6:40:53:58:72:
                    e0:55:ee:2e:34:59:56:0f:61:d3:bb:5f:a6:5c:15:
                    bf:54:45:bb:1b:7a:f8:3b:9b:59:1a:ba:59:55:2e:
                    76:ad:e5:90:15:e2:bd:e0:28:8b:21:98:d1:7f:2e:
                    ad:00:16:4f:27:f4:b6:48:d5:32:1c:44:64:e6:07:
                    3c:f9:85:d9:c3:f1:ce:64:8b:d6:31:70:0b:fe:22:
                    7e:78:dc:95:62:89:56:4b:c6:03:72:70:dc:9e:97:
                    b4:af:92:93:c8:0d:94:c7:27:3b:49:01:77:ed:8d:
                    1d:30:9e:ff:d6:6e:49:db:b9:09:07:de:3a:11:72:
                    91:36:e1:f3:e9:b7:9a:94:24:55:a8:cf:e4:e7:06:
                    30:3b:db:bb:f3:03:58:a1:40:4a:ba:4a:2a:93:e4:
                    74:f8:8e:c2:b8:db:ac:e5:cd:eb:3a:f6:65:f5:ac:
                    c4:fe:20:81:db:63:f5:bf:03:90:7f:b5:33:8d:5d:
                    fc:15:c3:fc:a0:b5:c1:2f:e8:d1:a3:99:87:72:ba:
                    9b:6a:33:31:1b:08:c7:45:e6:80:c2:8b:b6:fd:35:
                    99:31:dc:57:74:05:18:77:45:bc:c2:e0:6f:c4:21:
                    9e:03:1e:e4:65:35:fa:75:08:2f:cc:ca:10:ef:ff:
                    f5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FC:DD:61:2F:BA:4F:CB:30:92:CA:0B:E5:47:BB:F8:76:E9:78:40
            X509v3 Authority Key Identifier:
                keyid:18:8A:87:AB:79:10:19:37:93:B8:AA:6C:3C:1E:E6:6B:DB:06:A7:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:66:64:78:b7:f2:8e:ca:07:14:12:e0:f9:8f:78:94:45:37:
         96:55:04:23:d3:8c:88:9b:1f:68:30:1e:fb:3d:38:d6:b4:ad:
         0e:5f:c6:77:56:59:96:7c:34:45:d6:54:38:55:e8:44:b1:ad:
         20:72:5a:54:6b:3a:39:48:75:d4:7a:36:62:34:91:df:eb:07:
         3e:22:f7:20:38:6f:df:4f:9a:d5:2d:72:21:86:3a:d6:77:c1:
         ff:bc:53:47:66:a2:17:7c:05:6f:77:e6:16:3c:01:44:13:ca:
         e7:d5:a9:59:2f:ae:ed:e5:59:bb:14:1b:6f:6d:48:89:37:43:
         53:7a:46:dc:e2:a2:75:97:5e:1d:43:b1:b4:a4:ea:98:42:22:
         42:cc:a7:08:89:8a:b3:48:5e:51:3c:ed:b5:06:55:03:03:1d:
         11:4c:c2:39:b8:53:d8:93:ab:ed:fd:8f:79:cc:6b:15:70:b8:
         fc:08:56:fd:5e:d3:51:13:ff:10:f5:c0:26:31:1a:d7:4b:e0:
         00:eb:d6:c3:52:80:d0:ad:97:75:8b:4d:b6:96:5c:bb:b1:a4:
         a4:ae:9c:f5:b5:fe:62:99:5d:dd:b3:07:29:ae:49:97:7d:78:
         b9:a9:7c:0f:89:7d:c1:e9:51:8e:72:fa:51:6a:9a:ca:cf:f6:
         63:0b:fa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 04:18:33 2026 by rpki-client