Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
File:                     GB5NYIFS_CRK__ui3HK4UbGbJSc.mft (raw, json)
Hash identifier:          pPUBFCS0ZI7Il/oDbtTO0iIGAXKfSpUotiySNUO+5gs=
Subject key identifier:   BD:A1:61:44:0A:12:ED:3F:B0:76:9C:1E:24:EF:5E:76:BB:03:33:60
Authority key identifier: 18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27
Certificate issuer:       /CN=181e4d608152fc244afffba2dc72b851b19b2527
Certificate serial:       019D39AEA423AD6728A8687A3152BA8687FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
Manifest number:          1891
Signing time:             Sun 29 Mar 2026 13:00:39 +0000
Manifest this update:     Sun 29 Mar 2026 13:00:39 +0000
Manifest next update:     Mon 30 Mar 2026 13:00:39 +0000
Files and hashes:         1: GB5NYIFS_CRK__ui3HK4UbGbJSc.crl (hash: HrAiOeujSFMSmZO2uU7JTCu9P5uzPYySvp2RLERYLJI=)
                          2: PYWzmSYOo9ATNgcN3fRPebwQl3Q.roa (hash: 3u1bgAPgKfqAWtSr7rEwYv5yaXX4xTFybsPUpcBsSug=)
                          3: SBfXG2HCIyRLSR8L8Bb1OYjrk-4.roa (hash: iLlK4LPvVZZcpk8oXFX0Dv4WoTJ656cEevpkzzhvsnQ=)
                          4: UHHaFvrfMRRKl6SdkTimFutAhHg.asa (hash: Gja3YVvc1JUAVXo+oW3zdTWz0nnwxnzNtIFJKRhxfmc=)
                          5: t1Oq1k2ngy6Y47_6p9fhHoB3Y30.roa (hash: 2yB1RVbVshYDwGp3FbOHVNpPPI0M4XBWfcWStep9+5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:a4:23:ad:67:28:a8:68:7a:31:52:ba:86:87:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=181e4d608152fc244afffba2dc72b851b19b2527
        Validity
            Not Before: Mar 29 13:00:39 2026 GMT
            Not After : Mar 30 13:00:39 2026 GMT
        Subject: CN=bda161440a12ed3fb0769c1e24ef5e76bb033360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2f:4d:95:bb:9d:89:5f:f9:b5:fa:b1:47:27:
                    1b:7f:0c:e1:58:0c:d2:3c:e3:90:09:98:65:77:d4:
                    1f:68:95:d0:03:df:e8:23:c4:ed:67:06:6a:46:31:
                    6a:5c:81:40:69:14:b8:87:b7:56:c9:a3:17:f5:fd:
                    f2:11:40:11:62:3e:97:0b:6c:2d:7a:bb:44:22:c7:
                    5b:96:14:e3:7b:f3:df:4c:df:8f:47:4f:bf:f9:36:
                    0d:47:87:3c:f0:bb:7a:c1:ed:a0:87:36:da:9f:5f:
                    72:53:c4:d7:d9:d8:fe:10:a5:90:37:bc:17:c0:02:
                    b9:04:10:e0:53:84:5c:6e:4f:7e:e5:eb:1e:1d:e5:
                    75:a8:04:2e:16:24:25:3d:52:6e:bd:5b:15:14:6c:
                    d8:ce:f8:6a:68:df:39:5b:97:b8:1c:c5:30:2b:f8:
                    31:13:9b:b3:5b:4d:e4:f9:72:18:03:ae:b8:e4:af:
                    13:24:b6:35:59:62:70:de:e5:23:f9:ed:20:60:80:
                    5a:d1:a8:3c:5d:f1:71:55:0c:81:b1:d0:42:ff:31:
                    4e:c4:ba:9d:9f:da:e4:41:62:2d:00:8c:ac:21:a4:
                    93:ac:5d:57:ee:84:7b:95:b9:eb:4d:8a:86:13:21:
                    cd:58:b4:bf:83:98:6e:42:eb:41:af:dc:9a:22:32:
                    96:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A1:61:44:0A:12:ED:3F:B0:76:9C:1E:24:EF:5E:76:BB:03:33:60
            X509v3 Authority Key Identifier:
                keyid:18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:02:4b:e7:a5:b7:8b:4c:20:d2:be:af:a4:17:5f:01:10:ac:
         32:73:ba:05:34:e5:26:fa:cc:23:61:ad:50:49:00:6e:a7:85:
         b2:c1:68:59:12:9b:fd:c8:e8:f2:4b:93:48:27:4b:07:6f:92:
         f3:20:0b:f7:fc:e5:c4:b9:95:24:c5:47:f1:96:ab:a8:84:60:
         9b:5a:d2:29:bd:c7:8b:03:0d:fc:92:fb:50:56:dd:18:4f:6c:
         5f:63:22:3a:a0:40:18:35:18:72:f0:92:04:db:7d:b8:92:a1:
         70:b3:6d:c1:9c:dc:23:b4:3c:fb:10:ad:17:bc:4a:9a:d8:eb:
         b7:64:e5:24:f4:ae:3c:a4:16:76:bf:69:7b:81:f6:c5:ca:41:
         e9:20:69:c0:77:19:16:1c:6e:48:f3:ca:e5:75:71:ac:2d:d7:
         19:69:32:83:e2:5c:6c:ab:36:b5:af:32:7f:9d:ee:6a:33:f7:
         a4:75:00:ce:23:b5:e1:5c:02:9a:dd:81:7d:c5:3f:72:9d:94:
         79:04:ec:5d:79:24:90:5f:04:2b:51:68:cf:b6:3d:c1:04:8f:
         9f:99:a5:25:23:3d:6a:eb:fd:54:7e:e6:58:07:b3:62:59:76:
         49:ae:4a:0e:6d:76:fe:71:96:89:e0:d4:0b:98:cb:72:89:dc:
         4a:03:0b:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rqQjrWcoqGh6MVK6hof+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MWU0ZDYwODE1MmZjMjQ0YWZmZmJhMmRjNzJiODUxYjE5
YjI1MjcwHhcNMjYwMzI5MTMwMDM5WhcNMjYwMzMwMTMwMDM5WjAzMTEwLwYDVQQD
EyhiZGExNjE0NDBhMTJlZDNmYjA3NjljMWUyNGVmNWU3NmJiMDMzMzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC9NlbudiV/5tfqxRycbfwzhWAzS
POOQCZhld9QfaJXQA9/oI8TtZwZqRjFqXIFAaRS4h7dWyaMX9f3yEUARYj6XC2wt
ertEIsdblhTje/PfTN+PR0+/+TYNR4c88Lt6we2ghzban19yU8TX2dj+EKWQN7wX
wAK5BBDgU4Rcbk9+5eseHeV1qAQuFiQlPVJuvVsVFGzYzvhqaN85W5e4HMUwK/gx
E5uzW03k+XIYA6645K8TJLY1WWJw3uUj+e0gYIBa0ag8XfFxVQyBsdBC/zFOxLqd
n9rkQWItAIysIaSTrF1X7oR7lbnrTYqGEyHNWLS/g5huQutBr9yaIjKWfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2hYUQKEu0/sHacHiTvXna7AzNgMB8GA1UdIwQY
MBaAFBgeTWCBUvwkSv/7otxyuFGxmyUnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0I1TllJRlNfQ1JLX191aTNISzRVYkdiSlNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85MjE3ZjktODEzZC00N2FmLWFkNjIt
MzIyMDhkNTQ0YTg0LzEvR0I1TllJRlNfQ1JLX191aTNISzRVYkdiSlNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85MjE3ZjktODEzZC00N2FmLWFkNjItMzIyMDhkNTQ0YTg0
LzEvR0I1TllJRlNfQ1JLX191aTNISzRVYkdiSlNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACAJL56W3
i0wg0r6vpBdfARCsMnO6BTTlJvrMI2GtUEkAbqeFssFoWRKb/cjo8kuTSCdLB2+S
8yAL9/zlxLmVJMVH8ZarqIRgm1rSKb3HiwMN/JL7UFbdGE9sX2MiOqBAGDUYcvCS
BNt9uJKhcLNtwZzcI7Q8+xCtF7xKmtjrt2TlJPSuPKQWdr9pe4H2xcpB6SBpwHcZ
FhxuSPPK5XVxrC3XGWkyg+JcbKs2ta8yf53uajP3pHUAziO14VwCmt2BfcU/cp2U
eQTsXXkkkF8EK1Foz7Y9wQSPn5mlJSM9auv9VH7mWAezYll2Sa5KDm12/nGWieDU
C5jLconcSgMLOA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:38:23 2026 by rpki-client