Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
File:                     GJPt3vXPw41hPqqBd03jADSxnSI.mft (raw, json)
Hash identifier:          4XE1Zf0yFl3B089wkL/D9qsmklQv2W8GKDs7ZhiGtaM=
Subject key identifier:   C5:B5:7A:9F:FB:A9:84:88:6A:B3:70:25:A9:3D:93:22:F9:89:85:D6
Authority key identifier: 18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22
Certificate issuer:       /CN=1893eddef5cfc38d613eaa81774de30034b19d22
Certificate serial:       019D37896434B3EBDF2A8ED4885A02EB171E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
Manifest number:          0F53
Signing time:             Sun 29 Mar 2026 03:00:44 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:44 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:44 +0000
Files and hashes:         1: 9sB_vHUgC-_EodoFbCdcvENaK2I.roa (hash: tq6qmUHiw2q3r/kSJH5BUwG8qmtzNDhdzVo//Qk1ZPs=)
                          2: GJPt3vXPw41hPqqBd03jADSxnSI.crl (hash: njTKWnLqyMnRBmqTPRV4Fw797O3hhGC0y/MJjlLNUy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:64:34:b3:eb:df:2a:8e:d4:88:5a:02:eb:17:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1893eddef5cfc38d613eaa81774de30034b19d22
        Validity
            Not Before: Mar 29 03:00:44 2026 GMT
            Not After : Mar 30 03:00:44 2026 GMT
        Subject: CN=c5b57a9ffba984886ab37025a93d9322f98985d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:80:f4:fd:8f:26:3b:c8:68:dd:7d:5b:1a:58:
                    fe:38:6a:a1:68:c4:fd:41:48:eb:11:29:d1:f6:07:
                    ad:2d:ec:51:02:47:8f:0c:ed:35:eb:58:6c:70:95:
                    b8:1d:2c:87:9c:90:db:11:af:15:d4:ef:bf:e5:12:
                    2e:60:22:94:45:da:f2:b8:cf:ac:7c:44:b6:62:a3:
                    06:3b:6c:ca:9c:74:d3:ec:aa:a2:46:0a:ab:a2:65:
                    3a:be:af:dd:34:f9:92:f4:85:a1:ce:8f:81:55:43:
                    e3:72:89:4e:9d:d9:49:61:e5:b5:fa:b0:03:8a:34:
                    ec:90:76:28:e2:13:fc:6d:cd:40:4d:b2:68:95:f3:
                    20:66:d9:75:29:ba:e8:67:88:b7:ae:e3:1c:2f:b5:
                    e1:fa:e9:d7:24:b0:b1:6b:80:8d:f8:2a:01:f1:76:
                    c9:fc:c5:58:7e:c6:49:a7:30:9b:e6:67:45:9f:27:
                    9d:fc:1a:c0:1b:1e:ad:38:40:c2:7b:2c:73:d1:51:
                    1a:5a:4f:a7:6e:ce:81:98:2f:e9:f1:66:0d:ce:49:
                    c6:93:2a:65:bf:51:79:16:32:88:79:18:dc:3a:83:
                    a1:3e:91:16:5a:0a:08:0d:f2:d5:8e:58:0d:c1:6f:
                    a2:40:a3:95:2a:2b:a2:0b:f5:9c:4b:19:9d:d5:41:
                    d0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B5:7A:9F:FB:A9:84:88:6A:B3:70:25:A9:3D:93:22:F9:89:85:D6
            X509v3 Authority Key Identifier:
                keyid:18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:c0:3e:58:fd:12:be:df:67:d2:7b:70:9f:85:99:48:d2:6c:
         8a:f9:4f:6d:d4:5a:06:f0:46:c9:4c:88:f8:4b:21:60:97:7a:
         ff:90:18:61:2c:d2:d4:e8:7b:92:e1:d6:c3:2d:fb:a6:c4:cf:
         7e:fd:53:c0:e2:07:de:30:83:4e:1e:35:0b:48:a5:06:4f:31:
         bf:33:04:49:47:2b:cd:4a:c6:8a:c1:d1:1a:59:bb:06:85:32:
         de:e5:79:a7:31:0f:34:30:b6:d6:9a:78:21:27:79:f6:80:8a:
         c4:8c:a2:f5:37:8b:8d:f7:8d:7c:16:ae:f1:1a:f1:d2:0f:d7:
         f6:e7:6c:fc:2c:0e:f9:90:c6:2a:b5:4c:e6:d6:5e:8c:be:ab:
         a2:a3:62:6e:12:59:d9:93:d1:03:a1:0c:c3:5c:45:7f:ea:b5:
         5b:36:01:b4:a2:57:98:7b:cb:f2:40:e6:69:d8:44:a6:37:e8:
         ee:bf:09:2d:84:dd:ff:e6:f9:06:9a:2e:67:74:13:60:85:8e:
         7f:38:33:4e:91:96:e5:66:e7:30:3a:2a:03:a6:34:94:9a:6b:
         7d:b5:86:8c:4f:8a:e0:91:cf:27:a1:f4:52:77:87:3d:d1:66:
         16:45:2a:37:08:d9:cd:98:f1:d7:b5:4a:d9:1b:5d:34:32:0b:
         a7:dc:af:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iWQ0s+vfKo7UiFoC6xceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OTNlZGRlZjVjZmMzOGQ2MTNlYWE4MTc3NGRlMzAwMzRi
MTlkMjIwHhcNMjYwMzI5MDMwMDQ0WhcNMjYwMzMwMDMwMDQ0WjAzMTEwLwYDVQQD
EyhjNWI1N2E5ZmZiYTk4NDg4NmFiMzcwMjVhOTNkOTMyMmY5ODk4NWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54D0/Y8mO8ho3X1bGlj+OGqhaMT9
QUjrESnR9getLexRAkePDO0161hscJW4HSyHnJDbEa8V1O+/5RIuYCKURdryuM+s
fES2YqMGO2zKnHTT7KqiRgqromU6vq/dNPmS9IWhzo+BVUPjcolOndlJYeW1+rAD
ijTskHYo4hP8bc1ATbJolfMgZtl1KbroZ4i3ruMcL7Xh+unXJLCxa4CN+CoB8XbJ
/MVYfsZJpzCb5mdFnyed/BrAGx6tOEDCeyxz0VEaWk+nbs6BmC/p8WYNzknGkypl
v1F5FjKIeRjcOoOhPpEWWgoIDfLVjlgNwW+iQKOVKiuiC/WcSxmd1UHQKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMW1ep/7qYSIarNwJak9kyL5iYXWMB8GA1UdIwQY
MBaAFBiT7d71z8ONYT6qgXdN4wA0sZ0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0pQdDN2WFB3NDFoUHFxQmQwM2pBRFN4blNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xM2Y4YzUtYWI3YS00ZjM3LWIyZDct
OGI1MTc5MmM2NjYwLzEvR0pQdDN2WFB3NDFoUHFxQmQwM2pBRFN4blNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8xM2Y4YzUtYWI3YS00ZjM3LWIyZDctOGI1MTc5MmM2NjYw
LzEvR0pQdDN2WFB3NDFoUHFxQmQwM2pBRFN4blNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcA+WP0S
vt9n0ntwn4WZSNJsivlPbdRaBvBGyUyI+EshYJd6/5AYYSzS1Oh7kuHWwy37psTP
fv1TwOIH3jCDTh41C0ilBk8xvzMESUcrzUrGisHRGlm7BoUy3uV5pzEPNDC21pp4
ISd59oCKxIyi9TeLjfeNfBau8Rrx0g/X9uds/CwO+ZDGKrVM5tZejL6roqNibhJZ
2ZPRA6EMw1xFf+q1WzYBtKJXmHvL8kDmadhEpjfo7r8JLYTd/+b5BpouZ3QTYIWO
fzgzTpGW5WbnMDoqA6Y0lJprfbWGjE+K4JHPJ6H0UneHPdFmFkUqNwjZzZjx17VK
2RtdNDILp9yvxg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:09 2026 by rpki-client