Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
File:                     GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft (raw, json)
Hash identifier:          wAC27My35fjoytqMXX3z4+YZIUz2SZb7iVSN5+EoUNo=
Subject key identifier:   AF:BE:B4:4D:D6:1B:DF:FD:4F:62:10:03:5B:FA:90:26:5C:DF:0A:BA
Authority key identifier: 19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF
Certificate issuer:       /CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf
Certificate serial:       019D38D34A472EE9AC841095120BFCEC2A80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
Manifest number:          076F
Signing time:             Sun 29 Mar 2026 09:01:04 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:04 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:04 +0000
Files and hashes:         1: 0S1p6i0Cw3qVWxZGiLbWP8XnpU0.roa (hash: 4FhowhSJ5qi8dCHQSc2oLoPhWB0tu8x+SmhucQmQc60=)
                          2: GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl (hash: bmx/JoafbOsVvLB+pX4ZHyM/BeCrm2/t3MZq5tm9/eQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:4a:47:2e:e9:ac:84:10:95:12:0b:fc:ec:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf
        Validity
            Not Before: Mar 29 09:01:04 2026 GMT
            Not After : Mar 30 09:01:04 2026 GMT
        Subject: CN=afbeb44dd61bdffd4f6210035bfa90265cdf0aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:19:7b:e8:ce:cf:ee:9b:f9:5a:48:e0:2c:20:
                    d2:38:06:bf:d5:7e:56:66:c3:2a:6f:62:6a:ad:bc:
                    bf:86:06:5e:66:14:cc:98:f8:21:35:53:f3:df:0a:
                    73:89:75:6f:b0:59:2c:0e:eb:92:cd:7a:30:98:00:
                    9c:b6:42:6f:4e:1e:05:aa:21:1a:a7:91:87:90:1d:
                    21:ed:68:35:f2:b1:52:97:e6:cc:70:2e:a5:da:28:
                    cf:e3:3c:17:f0:cc:9b:98:80:d1:33:91:a8:55:87:
                    e4:44:73:cd:2c:65:8e:90:7a:11:e8:8d:51:d1:5a:
                    97:57:c5:a1:a3:45:91:22:30:90:7e:83:3b:03:7b:
                    44:0b:57:23:45:20:3a:12:79:49:d2:52:c7:c1:ee:
                    0e:0a:cd:f7:b5:15:0a:66:f6:de:75:a0:63:eb:91:
                    be:52:1e:c4:3f:ad:5f:7a:84:5d:9a:23:1c:1e:b6:
                    31:dd:77:f1:f3:6d:65:17:3e:39:dc:14:d8:ef:60:
                    d0:a5:d0:0a:60:6a:4b:8b:b6:5f:bb:d4:ea:59:03:
                    39:ab:1b:7b:15:26:67:51:26:b0:ea:60:85:e3:e3:
                    20:57:5a:87:b4:2c:c4:d4:22:ef:74:63:92:fc:3e:
                    f3:b8:7d:d5:0c:e6:ea:a1:f6:70:20:eb:cf:71:82:
                    b6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BE:B4:4D:D6:1B:DF:FD:4F:62:10:03:5B:FA:90:26:5C:DF:0A:BA
            X509v3 Authority Key Identifier:
                keyid:19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:6c:fa:c4:7b:86:8d:2b:d1:31:60:64:18:42:96:4c:a1:10:
         16:b6:b7:da:99:6f:82:7b:ab:14:9b:fa:3e:f7:53:1e:01:81:
         32:d3:70:5e:46:35:da:82:75:c2:ba:f9:09:49:d3:ec:14:fb:
         14:3a:a0:16:74:39:0d:e0:22:66:98:86:45:7e:cb:ac:dd:c4:
         c7:46:db:a5:83:79:3b:15:ba:c3:8c:1b:9a:6f:47:6b:32:5e:
         ef:90:a1:f8:ba:c3:8c:4c:64:48:ab:36:95:ea:ba:ee:4e:54:
         6a:e1:bc:c4:50:e9:ad:88:89:3a:cb:d7:63:bb:31:27:dd:21:
         d4:2e:7f:82:bd:ff:44:74:18:f5:69:47:bf:41:46:61:b7:7f:
         1e:69:aa:01:9f:da:7c:5e:8d:8e:cc:d6:0f:b4:34:93:fb:63:
         05:5b:23:3a:7f:3d:7d:4e:9a:d9:89:2e:e0:d1:77:29:fd:d8:
         3a:47:af:46:b5:30:c8:af:22:91:1d:71:49:19:03:0b:91:6a:
         1b:66:93:8f:37:4b:ef:9e:78:2c:c9:9f:08:e0:d2:06:9f:01:
         55:f6:82:5d:3b:82:70:22:60:97:f1:03:8e:6b:18:64:e1:8c:
         6b:df:f1:b1:e8:20:1b:aa:00:60:6c:e2:1a:e6:c4:f5:af:fa:
         59:d3:af:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:53 2026 by rpki-client