Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
File:                     g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft (raw, json)
Hash identifier:          Pct8lLRPTHqRWQw7xRPe2yHSRHO9361P7A72JgOYOmk=
Subject key identifier:   1B:F0:0C:C8:9A:60:BB:DB:BE:CC:3D:77:CC:69:9F:A7:D2:4D:A9:28
Authority key identifier: 83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
Certificate issuer:       /CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Certificate serial:       019D3940FDC1C7FD766CA4699A5C80C7299F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
Manifest number:          092B
Signing time:             Sun 29 Mar 2026 11:00:53 +0000
Manifest this update:     Sun 29 Mar 2026 11:00:53 +0000
Manifest next update:     Mon 30 Mar 2026 11:00:53 +0000
Files and hashes:         1: 9s_JyGI1Kf_GuOE5Z1sC6UkS2T0.roa (hash: jdF/VLnuhEvQghTGVss4qBX3vWUgRXAuemcyYtGZ4io=)
                          2: g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl (hash: Zg8JpUhfuIblblMEpARjLz9u2X/v0ab4ZloQaXg2I5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:40:fd:c1:c7:fd:76:6c:a4:69:9a:5c:80:c7:29:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
        Validity
            Not Before: Mar 29 11:00:53 2026 GMT
            Not After : Mar 30 11:00:53 2026 GMT
        Subject: CN=1bf00cc89a60bbdbbecc3d77cc699fa7d24da928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:16:81:15:d1:12:6a:7d:c3:b7:60:a6:59:56:
                    f2:1f:9f:3c:3d:6e:02:b1:d1:a1:aa:11:72:e3:05:
                    2b:11:36:9f:db:5e:b5:a8:4f:bf:e0:42:42:93:67:
                    2b:1d:65:28:28:1a:30:c9:fc:9e:16:5e:af:3c:97:
                    e0:cb:37:cd:00:7a:1b:d0:23:34:03:14:d1:d5:a3:
                    8e:6b:16:fe:a8:cc:e0:f2:ff:b7:0b:25:25:d3:5b:
                    fa:fb:6a:99:c2:46:de:61:58:81:93:bc:de:91:04:
                    3b:14:9c:13:72:e1:94:e2:bf:56:5e:0b:09:77:65:
                    66:78:08:62:80:1c:df:26:0d:44:f5:d7:23:dc:f4:
                    84:1e:89:b1:86:50:74:92:de:9a:02:3e:96:af:eb:
                    e8:55:21:40:d9:90:20:83:d4:af:dc:20:02:55:af:
                    4b:eb:97:f3:74:67:98:b0:a1:5d:45:e1:0e:61:29:
                    5c:05:bd:e7:7b:dd:f3:8b:60:70:88:8f:a7:cc:30:
                    3e:8a:b8:ba:46:05:30:17:a2:54:53:a5:57:ca:f8:
                    fd:a1:e6:74:91:b2:ee:84:10:3d:97:35:ed:50:81:
                    9a:10:cf:74:74:26:da:f5:d2:23:17:0c:e0:b4:2c:
                    fb:df:69:90:44:1a:1c:5f:78:3c:38:9a:e7:83:df:
                    2d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F0:0C:C8:9A:60:BB:DB:BE:CC:3D:77:CC:69:9F:A7:D2:4D:A9:28
            X509v3 Authority Key Identifier:
                keyid:83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:fd:c2:19:0a:a0:84:2e:a5:39:dd:e3:c4:3b:20:1c:b7:4c:
         ef:48:9e:1d:32:7b:88:52:b7:83:de:36:3a:f7:08:f5:39:dc:
         01:5a:9e:38:21:8a:71:1b:5a:17:fb:d0:29:6d:8a:22:0e:f9:
         5a:9c:43:a1:8b:56:4c:5d:21:0a:a5:8c:63:b5:cc:30:bc:26:
         97:c9:92:07:db:03:47:2f:9e:d8:fb:fd:9e:75:cf:94:85:33:
         20:5e:54:8a:b9:23:bf:d7:2c:9e:95:07:a4:0d:30:2b:88:09:
         df:19:fc:3a:6f:83:14:4f:aa:78:43:24:ef:47:e2:d7:db:22:
         92:1b:41:fe:ab:aa:f9:b7:2b:c5:6c:c2:9b:de:0c:2f:23:88:
         0c:22:ac:a1:1e:c3:b4:03:2d:09:8a:f3:82:de:00:35:51:36:
         9c:d5:8c:c7:84:f7:a1:8a:2c:17:85:e1:aa:e5:4f:d9:80:92:
         4b:5c:f3:a5:ac:f3:ad:a0:6f:47:d0:3b:30:a9:3b:8b:57:98:
         6f:5f:b3:c9:f1:25:ea:16:f5:67:3a:1f:2d:85:14:88:f6:74:
         2e:29:b0:a3:e9:ec:2e:76:0c:27:d5:85:72:00:07:b4:6e:20:
         4a:5a:cc:66:9d:52:e1:55:01:b7:24:5a:20:0c:cf:42:77:d2:
         b8:ee:e0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:17 2026 by rpki-client