Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
File:                     GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft (raw, json)
Hash identifier:          mu0KmtrtSPdYhaQNSeRs0rJK77Dzy8Us1HurYxCdxkU=
Subject key identifier:   5E:49:75:57:DD:33:AE:F0:79:75:2E:16:41:B8:04:55:24:EF:E6:3A
Authority key identifier: 18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
Certificate issuer:       /CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Certificate serial:       019D1458D17447B829B7750C764872B5EDD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
Manifest number:          1883
Signing time:             Sun 22 Mar 2026 07:00:58 +0000
Manifest this update:     Sun 22 Mar 2026 07:00:58 +0000
Manifest next update:     Mon 23 Mar 2026 07:00:58 +0000
Files and hashes:         1: 4yhn0zab6G9Xm_NjzDhDVFNViNU.roa (hash: A7LqIa0Mp3Sp/NDA4NIu51kIjL901Apj0xVFgoij29k=)
                          2: 7VsPFkhM_OrYhPPIYt8jc85Ys8Y.roa (hash: x7mGZCpmu0SwOVi3OquDRZc+flnwWQDFf3B9ZxRJHaY=)
                          3: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl (hash: qXltxEiDk1ExRI9l96T6nsz1qhuzGfe6r8KUV25qAEE=)
                          4: r7rIkd3JpKTtd7ti5sQWVfcfHRc.roa (hash: BZ2IDfhsgXSEeuZ1ehS1OEbZfErOlb6+IBt9JMlf/C4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 23 Mar 2026 07:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:14:58:d1:74:47:b8:29:b7:75:0c:76:48:72:b5:ed:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
        Validity
            Not Before: Mar 22 07:00:58 2026 GMT
            Not After : Mar 23 07:00:58 2026 GMT
        Subject: CN=5e497557dd33aef079752e1641b8045524efe63a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:64:97:e9:37:e9:67:5a:f4:0e:28:d7:1c:f9:
                    23:e8:04:72:3c:a2:e0:19:36:52:15:86:22:66:03:
                    6e:29:36:27:29:55:6d:0b:05:4e:bd:10:15:44:7f:
                    f5:9f:0b:58:a2:d6:d1:77:26:4e:a9:e7:c0:eb:aa:
                    54:c8:f5:a4:10:10:1e:11:76:e4:c4:6c:39:72:19:
                    8f:0a:91:90:3c:db:03:85:27:ad:4a:67:6e:8e:e0:
                    64:90:0f:1e:b1:1b:28:5e:27:21:26:44:2a:22:34:
                    b2:36:d3:97:6a:cb:2e:4c:35:ff:d7:bb:70:0b:ac:
                    e2:86:99:8c:8d:ee:21:7c:1a:0b:15:71:75:7d:da:
                    c0:cc:a7:89:91:61:d9:44:70:82:a7:72:c3:5b:e0:
                    87:8a:68:a1:81:a7:16:fd:63:0b:6a:b9:0a:10:6c:
                    aa:14:e0:ed:5a:15:c2:f2:72:d7:82:5e:79:08:fd:
                    f7:2b:4e:98:8e:dc:cb:ad:ae:4f:65:13:75:e4:82:
                    b0:ff:8a:ed:9c:0d:5b:5c:bf:ab:8b:0e:a9:42:da:
                    00:c5:85:43:97:47:5c:97:5c:34:8f:fe:ef:68:61:
                    6b:2e:ae:72:75:0d:bc:03:65:38:70:1d:30:b3:be:
                    69:31:9e:e2:42:7d:ce:26:27:f9:ca:20:56:4a:a9:
                    fe:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:49:75:57:DD:33:AE:F0:79:75:2E:16:41:B8:04:55:24:EF:E6:3A
            X509v3 Authority Key Identifier:
                keyid:18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e7:4f:97:4c:1c:f8:f9:fe:a8:b6:b9:5a:8c:4b:72:a0:eb:
         1e:b4:f4:48:9e:55:f7:6b:7f:5c:a9:68:ae:d9:73:64:f7:bd:
         97:be:f8:af:a0:62:9c:96:b0:e6:eb:5e:f0:29:f7:57:25:ad:
         c4:ce:85:be:2a:2d:62:1b:f8:18:60:64:30:1e:97:d5:f6:c3:
         a2:f3:5f:c5:dc:ff:74:fc:29:2a:44:af:17:d5:7f:ee:ee:1a:
         30:f5:6d:82:12:49:7f:56:b0:9c:57:a5:cb:19:7d:1d:2c:6c:
         e8:80:0e:2a:41:e2:a2:cb:04:ac:f8:81:45:b6:7e:0f:d0:01:
         cd:20:7e:65:d3:0a:af:85:5f:46:cb:46:80:7b:2e:9e:be:f9:
         98:d9:de:cc:4a:38:68:34:74:22:5c:5c:50:85:51:19:77:ec:
         42:bb:60:26:88:fb:23:a4:92:42:5d:3f:a1:13:f8:0e:f4:16:
         0a:f9:48:d6:31:16:f6:4f:7a:bc:f4:10:37:5f:f4:6e:53:ac:
         73:e3:1d:f0:dd:e7:3f:be:54:8b:61:77:2e:3c:24:b0:7d:0c:
         e9:2c:53:7a:f5:d3:ca:2d:ee:cf:f6:77:09:e9:20:2f:fc:24:
         21:87:c9:f9:6d:9f:50:71:18:65:6f:b1:73:6d:8b:84:d8:29:
         f0:48:87:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0UWNF0R7gpt3UMdkhyte3SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MDhiZjdmZTQ4YjA1N2Y5ZjJmM2Q1ZDFhNjMxMGZkOWUx
NGM1NzEwHhcNMjYwMzIyMDcwMDU4WhcNMjYwMzIzMDcwMDU4WjAzMTEwLwYDVQQD
Eyg1ZTQ5NzU1N2RkMzNhZWYwNzk3NTJlMTY0MWI4MDQ1NTI0ZWZlNjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2SX6TfpZ1r0DijXHPkj6ARyPKLg
GTZSFYYiZgNuKTYnKVVtCwVOvRAVRH/1nwtYotbRdyZOqefA66pUyPWkEBAeEXbk
xGw5chmPCpGQPNsDhSetSmdujuBkkA8esRsoXichJkQqIjSyNtOXassuTDX/17tw
C6zihpmMje4hfBoLFXF1fdrAzKeJkWHZRHCCp3LDW+CHimihgacW/WMLarkKEGyq
FODtWhXC8nLXgl55CP33K06YjtzLra5PZRN15IKw/4rtnA1bXL+riw6pQtoAxYVD
l0dcl1w0j/7vaGFrLq5ydQ28A2U4cB0ws75pMZ7iQn3OJif5yiBWSqn+xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5JdVfdM67weXUuFkG4BFUk7+Y6MB8GA1UdIwQY
MBaAFBgIv3/kiwV/ny89XRpjEP2eFMVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMt
OWQzOTJlZWUwZjY2LzEvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMtOWQzOTJlZWUwZjY2
LzEvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARudPl0wc
+Pn+qLa5WoxLcqDrHrT0SJ5V92t/XKlortlzZPe9l774r6BinJaw5ute8Cn3VyWt
xM6FviotYhv4GGBkMB6X1fbDovNfxdz/dPwpKkSvF9V/7u4aMPVtghJJf1awnFel
yxl9HSxs6IAOKkHiossErPiBRbZ+D9ABzSB+ZdMKr4VfRstGgHsunr75mNnezEo4
aDR0IlxcUIVRGXfsQrtgJoj7I6SSQl0/oRP4DvQWCvlI1jEW9k96vPQQN1/0blOs
c+Md8N3nP75Ui2F3LjwksH0M6SxTevXTyi3uz/Z3CekgL/wkIYfJ+W2fUHEYZW+x
c22LhNgp8EiHDw==
-----END CERTIFICATE-----
Generated at Sun Mar 22 14:59:41 2026 by rpki-client