Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
File:                     gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft (raw, json)
Hash identifier:          pNMeWgG9R5YI5CN//QNGDH+BsQGM/NNwDI1c/PipMB0=
Subject key identifier:   33:6C:76:4B:4A:F4:F8:76:8E:74:96:2F:15:0D:1F:B0:37:CE:67:65
Authority key identifier: 82:FF:FC:FA:DD:27:16:23:C8:D5:05:5D:64:A9:3E:B3:D3:42:5D:BC
Certificate issuer:       /CN=82fffcfadd271623c8d5055d64a93eb3d3425dbc
Certificate serial:       019D38D343672B9638205BBE29574966EFD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
Manifest number:          0E81
Signing time:             Sun 29 Mar 2026 09:01:02 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:02 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:02 +0000
Files and hashes:         1: W-ufQjOcGl91afHginNv40fKWsY.roa (hash: j3ycx5Cjdts8LWV1/1jMoGk0+p0SZARujtf9Pwq3P7I=)
                          2: gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl (hash: 090yp4eZ0tTGxPcwONZpvtLRBL5o633Afq70rmgTY0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:43:67:2b:96:38:20:5b:be:29:57:49:66:ef:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82fffcfadd271623c8d5055d64a93eb3d3425dbc
        Validity
            Not Before: Mar 29 09:01:02 2026 GMT
            Not After : Mar 30 09:01:02 2026 GMT
        Subject: CN=336c764b4af4f8768e74962f150d1fb037ce6765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d6:2b:fa:5c:ea:81:9e:59:75:07:bb:6f:1a:
                    ac:b3:42:cd:6c:10:c0:26:bf:63:fc:c7:1d:a8:cd:
                    ed:25:b9:66:5b:f7:d6:d5:49:b4:00:de:c5:ef:d3:
                    d2:1b:f1:97:3a:75:01:6e:22:95:a8:3d:0b:82:d5:
                    ba:6c:00:e4:6d:1c:e3:8c:49:99:22:3b:44:7d:f6:
                    f1:d9:9a:ea:db:e3:90:7e:11:7d:cf:0c:0d:df:97:
                    09:65:8b:20:50:8a:33:25:cb:98:b4:90:b1:5e:a5:
                    ad:a5:58:3a:e2:da:7e:a1:5b:6e:6a:db:6a:1e:ca:
                    70:56:54:c0:a4:86:87:d7:1d:ec:c1:97:21:b3:43:
                    70:ca:37:da:f2:d9:2e:dc:30:23:fa:47:1a:e2:1e:
                    31:d6:66:55:41:d4:1e:13:ed:ac:62:20:77:91:1c:
                    4e:32:40:ef:e1:4a:eb:a1:ad:0a:7b:5d:23:9c:13:
                    22:a1:e1:e7:2b:72:e5:94:c6:10:04:9f:7b:ca:18:
                    11:07:22:3d:46:74:12:fc:3e:53:d9:72:d0:53:45:
                    09:b8:b8:33:9d:49:d6:98:8c:c0:18:4d:d3:bc:8f:
                    8e:62:7d:74:1f:85:d8:ac:41:7c:f2:d7:4e:a8:e1:
                    3e:a8:4b:be:6f:4f:a1:c4:51:be:ad:a9:46:0f:ec:
                    d1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6C:76:4B:4A:F4:F8:76:8E:74:96:2F:15:0D:1F:B0:37:CE:67:65
            X509v3 Authority Key Identifier:
                keyid:82:FF:FC:FA:DD:27:16:23:C8:D5:05:5D:64:A9:3E:B3:D3:42:5D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ea:39:18:53:81:2b:64:8b:07:57:c0:30:69:55:15:0a:d9:
         a8:f8:86:da:e7:0b:63:78:de:82:fe:f5:d7:82:67:4d:b7:b8:
         06:9c:aa:44:b9:b3:46:71:e4:c6:76:f5:c2:69:59:d2:4a:2f:
         c6:e5:11:48:8b:bb:64:27:81:3f:3f:25:78:c6:9f:50:55:64:
         9e:32:b4:56:f9:44:f6:77:f5:8a:c5:05:28:42:ca:ec:42:ea:
         59:67:69:8b:25:df:4f:69:58:3c:67:6d:f5:d0:73:ac:2b:da:
         93:e5:56:40:f4:64:48:8d:84:2d:af:f9:2a:2f:ce:88:ef:81:
         7c:13:32:27:03:66:b8:10:09:45:99:45:79:f1:38:45:a5:f4:
         13:7c:8c:83:09:3a:6a:ac:5d:06:2b:5a:b2:4e:5d:54:6c:c0:
         73:5b:9b:09:f9:21:98:07:50:8a:1c:8e:fa:61:0e:9b:9b:72:
         a4:aa:ea:ae:56:a5:1a:7c:5f:26:43:3e:a8:a2:7d:26:a1:ff:
         e5:15:f2:90:3e:ac:90:ba:b6:61:f6:2d:85:f6:5e:8c:0c:95:
         a9:61:0e:86:3d:d0:14:e5:2a:87:9b:a4:8c:15:32:89:da:95:
         6c:8e:37:0d:c5:fb:0f:2a:d8:f5:e4:7c:b4:cf:86:5d:6a:f0:
         2d:a4:86:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:06 2026 by rpki-client