Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
File:                     GEe1nSHqNrMGL8qAznXBYWr1EZo.mft (raw, json)
Hash identifier:          MM1AhX6XeRmkUzthNVcfgbpPYef4XDoQVUOBqniHc1s=
Subject key identifier:   FC:C6:FB:23:B6:9F:C4:A8:63:29:D4:2E:53:85:B2:CA:1F:6D:22:5C
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Certificate issuer:       /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial:       019D382E5CBA9FA60A8D8CB00FB419BED12B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
Manifest number:          18B3
Signing time:             Sun 29 Mar 2026 06:00:55 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:55 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:55 +0000
Files and hashes:         1: GEe1nSHqNrMGL8qAznXBYWr1EZo.crl (hash: Hk20M31gvZCjy/CuXdUpc6IzNnceMz/t92KDAUr9ptY=)
                          2: Gll7cy-kn16EuQChyjd5kxJVar8.roa (hash: rAFOy1sEoOQYL6xEmxiSqkBDTDW6pzDgHlfqHYvviWQ=)
                          3: NbBpfQGsHkSsujFNmwYaCRxCh_M.roa (hash: JJcHtuXrwzjuiCppA+Z6JQDHbPH63cB9zvzIpG1UH3U=)
                          4: VG14tR93nrCtNgYNhIfw5ASK5b8.roa (hash: Tcz678dunbruTrkYTbdv98GThScQ5vNKS1fF8cX93JE=)
                          5: Xj_u5HjpxtCwXjP24QJOUfE1Eo0.roa (hash: wVYFKdr5Wp6EdJbjBn7zlklNK/TPT0xbcVbQunqvKdg=)
                          6: q9_YDIRra6aFcMc0ByB5ssvbp7c.roa (hash: Aqh+b9LnXWSFB27cNYCIor6EI4XZue2eU7FkAjMEl08=)
                          7: s7RpgA0R3vsueY42eei_AImOBO8.roa (hash: oNHuHZnEL0RPbJZPYJUj7x33aVQEtQSGkU5sfC19kPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:5c:ba:9f:a6:0a:8d:8c:b0:0f:b4:19:be:d1:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
        Validity
            Not Before: Mar 29 06:00:55 2026 GMT
            Not After : Mar 30 06:00:55 2026 GMT
        Subject: CN=fcc6fb23b69fc4a86329d42e5385b2ca1f6d225c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:63:cf:8b:4f:45:5d:60:30:2a:06:cd:c1:b0:
                    1b:44:b6:13:4f:ff:fd:cb:de:57:e9:71:58:54:48:
                    96:85:a8:df:96:06:63:29:ac:0d:33:e3:79:c2:ff:
                    1c:86:4e:ad:ee:60:fb:cc:1d:8f:5c:0d:98:5f:76:
                    e9:08:7b:9d:ff:34:16:e1:09:f4:df:bc:ac:47:65:
                    09:2c:00:0c:6a:58:79:69:47:80:8c:9c:4b:d3:42:
                    a3:a1:56:02:5e:a6:91:b9:54:bf:23:23:b9:0b:4e:
                    a6:29:81:f5:1d:b2:01:83:bb:5f:8b:f8:97:ca:7c:
                    03:f6:12:1f:3a:f4:41:0c:47:da:25:c9:64:53:23:
                    09:e7:11:c2:02:7f:9f:89:55:c8:ef:fb:a5:51:70:
                    f7:a6:e7:4e:cf:e3:f8:47:67:5c:ec:6e:65:d2:86:
                    e0:9f:df:5f:3c:73:0c:5e:ab:a2:08:e7:46:8d:ea:
                    79:7f:5c:9d:18:bf:1c:c0:6e:3a:f3:46:75:45:51:
                    91:7a:4d:ee:d9:7e:f2:d0:b7:ef:81:9a:94:9d:e6:
                    e9:85:d4:f8:43:f1:b8:b2:8e:73:cd:85:3e:6b:c4:
                    fd:d7:90:ca:17:94:bb:f0:28:a9:ac:5f:58:3d:27:
                    c9:2c:9e:c6:89:41:05:a2:8e:0b:c5:87:0c:09:23:
                    f1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C6:FB:23:B6:9F:C4:A8:63:29:D4:2E:53:85:B2:CA:1F:6D:22:5C
            X509v3 Authority Key Identifier:
                keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:6b:69:63:04:1f:b9:40:38:89:18:f2:8c:c5:43:39:a0:12:
         17:33:db:21:39:45:56:a1:e1:74:00:35:68:35:06:60:90:da:
         0a:27:f8:68:9c:61:80:25:b2:ea:d2:c5:38:1c:ad:50:74:d6:
         d3:c8:f7:d5:7f:04:b2:10:33:a8:bd:f9:70:4e:63:60:76:67:
         c9:9f:61:20:08:d5:1c:97:49:82:fe:3f:4a:1b:be:d8:cc:7d:
         94:a7:93:7e:f5:39:a5:d3:78:ca:e4:5a:39:01:5a:ea:4b:b6:
         32:cc:49:1e:f9:e4:83:37:e0:2f:ec:04:66:b8:f9:a6:74:43:
         f0:65:cf:52:20:1c:d3:96:26:88:83:ae:f9:0e:16:a7:d7:58:
         5c:f0:87:6b:7e:ac:15:cb:84:3a:64:8a:fb:ea:1f:dd:18:a7:
         c7:40:54:ba:74:2e:91:df:6b:e7:46:2b:0b:ce:64:45:47:aa:
         24:5a:8c:43:18:de:da:72:9b:08:88:fb:59:c3:aa:cd:5b:87:
         5f:c8:5b:9b:92:12:d3:b4:46:78:88:1c:fc:db:6a:63:e9:f4:
         38:85:66:fb:2d:2c:1a:3b:67:a5:14:1a:e3:d3:ed:9f:69:b8:
         af:e3:f3:64:61:31:ca:ca:80:f6:70:28:2e:38:47:e2:a1:14:
         ad:58:96:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:44 2026 by rpki-client