Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
File:                     gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft (raw, json)
Hash identifier:          UzAY0YIVkbrjR2pv8CFw9a6WQz3YHkoAdGcuoAPJWd4=
Subject key identifier:   8E:80:C5:C2:3D:5D:99:79:7E:77:C3:5C:C5:62:07:A0:43:F0:C5:2F
Authority key identifier: 82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7
Certificate issuer:       /CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
Certificate serial:       019CE5C921D8EFAB2A779C8DF2CC613F10FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
Manifest number:          1864
Signing time:             Fri 13 Mar 2026 06:01:29 +0000
Manifest this update:     Fri 13 Mar 2026 06:01:29 +0000
Manifest next update:     Sat 14 Mar 2026 06:01:29 +0000
Files and hashes:         1: gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl (hash: Sv+0VMl5jtL2EfSDPRd1wwn/OgZ2OBNA4HbNFY63vls=)
                          2: sl_qn_gMelOUS3XMJODn5T8W54w.roa (hash: MlmmeycjTjJos3jc0JF/rEVajpy499lBCd4bHXbugOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 06:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:c9:21:d8:ef:ab:2a:77:9c:8d:f2:cc:61:3f:10:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
        Validity
            Not Before: Mar 13 06:01:29 2026 GMT
            Not After : Mar 14 06:01:29 2026 GMT
        Subject: CN=8e80c5c23d5d99797e77c35cc56207a043f0c52f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c1:5b:24:a1:b6:f0:ac:5d:9f:7f:dd:f1:dc:
                    32:42:eb:13:e8:7f:7e:dd:09:90:18:73:5a:2f:f0:
                    df:d5:f6:5b:f1:1b:b3:c0:be:ac:c6:1c:d4:1b:d4:
                    fb:d8:11:89:86:82:8c:af:df:8d:79:dd:c0:24:37:
                    b0:f9:2c:e0:08:dc:c7:8c:9f:f3:ba:a3:74:01:fa:
                    d9:79:c1:bf:1b:8c:cb:b4:f4:c7:d1:ad:b7:52:f2:
                    f2:78:08:e0:d0:c7:57:83:49:78:65:d8:9d:a8:b4:
                    75:5e:e0:3d:8c:21:bf:8b:28:f1:48:a8:b1:ec:ee:
                    f4:4d:72:23:8d:c0:c9:0a:49:3d:d8:aa:0b:4a:c7:
                    5c:15:c1:5e:e7:f1:1b:e7:e5:f2:8b:30:09:e2:49:
                    f6:ea:53:6e:63:d2:f3:9d:3c:00:b6:6b:b8:d1:fe:
                    53:81:25:fb:38:b4:5f:37:90:b5:76:6c:88:04:18:
                    8a:ae:8e:4d:a8:4d:16:42:6f:aa:b1:2a:89:63:65:
                    fd:cf:d9:7a:00:4b:1a:e9:0c:86:d2:d0:c1:70:5d:
                    28:8d:f1:50:b9:56:a7:04:37:74:66:ec:6e:72:c0:
                    a1:f5:27:39:69:3a:fd:49:b1:c8:80:84:aa:0c:5c:
                    04:83:7c:39:02:da:c5:70:d3:65:32:5b:d4:8a:8f:
                    40:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:80:C5:C2:3D:5D:99:79:7E:77:C3:5C:C5:62:07:A0:43:F0:C5:2F
            X509v3 Authority Key Identifier:
                keyid:82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f6:e6:1c:98:2c:34:8e:cc:21:de:d5:25:59:ba:a6:ca:02:
         63:aa:72:e9:40:a6:ae:6c:f6:8f:34:c1:e2:b0:d5:cd:45:48:
         50:1f:d6:92:cd:4f:48:bd:39:28:63:89:72:99:b7:60:aa:18:
         ca:57:26:2a:71:32:12:5c:b4:b5:ee:0d:c9:f9:0e:f3:de:2a:
         f3:93:c4:f0:9e:da:c4:33:6a:1e:b3:c2:98:fd:c6:0a:67:74:
         aa:54:b0:5f:c8:e9:9d:bd:22:1f:12:fc:bb:8b:c1:bd:f4:d1:
         00:0a:ea:2c:06:0a:2a:55:fb:d7:f2:60:a2:54:42:02:a5:3a:
         6b:97:2e:e1:cb:b2:95:b2:a3:41:06:3c:60:7f:af:32:06:be:
         97:fe:61:4a:c2:7a:d6:f7:5b:54:47:ac:f2:8e:ab:b1:13:7b:
         81:d6:d6:f4:12:5f:23:58:99:20:04:52:a0:80:45:cd:dc:46:
         26:ce:ff:fe:18:5e:6a:a7:de:6d:53:7e:d4:85:fb:d4:ee:d7:
         d1:09:0a:53:df:10:03:53:03:79:05:f9:e8:3a:4c:22:aa:c8:
         6a:7a:46:a6:4d:29:e6:0c:1a:bf:58:a6:26:bf:90:93:93:19:
         29:4f:64:af:2c:43:ce:bd:f5:78:0f:45:f7:f2:b6:46:f6:9a:
         56:93:49:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlySHY76sqd5yN8sxhPxD/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNzllYWQ4MzVhOGZjZmFlMGQ5ZWUyODM5Y2QxNjg4MWJh
MTFkZDcwHhcNMjYwMzEzMDYwMTI5WhcNMjYwMzE0MDYwMTI5WjAzMTEwLwYDVQQD
Eyg4ZTgwYzVjMjNkNWQ5OTc5N2U3N2MzNWNjNTYyMDdhMDQzZjBjNTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8FbJKG28Kxdn3/d8dwyQusT6H9+
3QmQGHNaL/Df1fZb8RuzwL6sxhzUG9T72BGJhoKMr9+Ned3AJDew+SzgCNzHjJ/z
uqN0AfrZecG/G4zLtPTH0a23UvLyeAjg0MdXg0l4ZdidqLR1XuA9jCG/iyjxSKix
7O70TXIjjcDJCkk92KoLSsdcFcFe5/Eb5+XyizAJ4kn26lNuY9LznTwAtmu40f5T
gSX7OLRfN5C1dmyIBBiKro5NqE0WQm+qsSqJY2X9z9l6AEsa6QyG0tDBcF0ojfFQ
uVanBDd0ZuxucsCh9Sc5aTr9SbHIgISqDFwEg3w5AtrFcNNlMlvUio9AcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6AxcI9XZl5fnfDXMViB6BD8MUvMB8GA1UdIwQY
MBaAFIJ56tg1qPz64NnuKDnNFogboR3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kYWFhZTQtZWQyNC00NDczLTllYzUt
ZWUyOWM5MTM2ZThiLzEvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9kYWFhZTQtZWQyNC00NDczLTllYzUtZWUyOWM5MTM2ZThi
LzEvZ25ucTJEV29fUHJnMmU0b09jMFdpQnVoSGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfbmHJgs
NI7MId7VJVm6psoCY6py6UCmrmz2jzTB4rDVzUVIUB/Wks1PSL05KGOJcpm3YKoY
ylcmKnEyEly0te4NyfkO894q85PE8J7axDNqHrPCmP3GCmd0qlSwX8jpnb0iHxL8
u4vBvfTRAArqLAYKKlX71/JgolRCAqU6a5cu4cuylbKjQQY8YH+vMga+l/5hSsJ6
1vdbVEes8o6rsRN7gdbW9BJfI1iZIARSoIBFzdxGJs7//hheaqfebVN+1IX71O7X
0QkKU98QA1MDeQX56DpMIqrIanpGpk0p5gwav1imJr+Qk5MZKU9kryxDzr31eA9F
9/K2RvaaVpNJ6g==
-----END CERTIFICATE-----
Generated at Fri Mar 13 15:57:25 2026 by rpki-client