Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
File:                     1-GSAgviI1Al6xM26hGYLkw91A18.mft (raw, json)
Hash identifier:          vapiBpTTmlRXjNJQwUbpbxkB6oq5jMvlflx7+ZHW1Bw=
Subject key identifier:   0B:2B:F7:A2:80:B7:5E:38:E6:7E:CF:2A:58:94:F2:99:C7:3D:F3:E2
Authority key identifier: F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F
Certificate issuer:       /CN=f8648082f888d4097ac4cdba84660b930f75035f
Certificate serial:       019CB4A5879EA73B8793B2BADB0804AB21EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
Manifest number:          0101
Signing time:             Tue 03 Mar 2026 17:01:12 +0000
Manifest this update:     Tue 03 Mar 2026 17:01:12 +0000
Manifest next update:     Wed 04 Mar 2026 17:01:12 +0000
Files and hashes:         1: 1-GSAgviI1Al6xM26hGYLkw91A18.crl (hash: SExPJFhch17YUfWaSiOkfih6ECBJCz7Xm6yS3eSvACA=)
                          2: Ld1IptB75UF1wrERs5D-utW7pW8.roa (hash: qkhGZ0ztjC9ORXPQw0r6Rit5ibpjpCY4xiHV/vyohFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Mar 2026 15:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b4:a5:87:9e:a7:3b:87:93:b2:ba:db:08:04:ab:21:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8648082f888d4097ac4cdba84660b930f75035f
        Validity
            Not Before: Mar  3 17:01:12 2026 GMT
            Not After : Mar  4 17:01:12 2026 GMT
        Subject: CN=0b2bf7a280b75e38e67ecf2a5894f299c73df3e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:31:0b:64:89:42:df:2e:d5:17:9e:a4:d3:29:
                    38:fd:69:69:f3:60:4d:7b:7c:b0:96:b2:34:e7:1e:
                    e6:17:a2:8e:f1:03:63:69:f2:5d:45:83:6a:db:4c:
                    db:c8:50:68:cd:26:e7:dd:7d:1a:28:f4:9f:cf:5d:
                    6b:61:56:b2:9c:57:19:f4:71:f1:5d:29:e0:61:de:
                    42:55:03:73:75:9f:f0:99:69:37:60:be:ab:3f:fa:
                    ab:2b:da:78:b6:72:d1:75:76:d7:7c:1e:e4:27:54:
                    95:6f:36:f9:35:03:5e:4b:85:c5:e5:b4:ab:cf:a8:
                    5e:27:09:16:55:49:6c:6d:89:eb:bf:6f:73:a5:d3:
                    8c:73:90:cc:79:5b:4e:6e:4b:a0:4e:2c:62:f3:19:
                    b3:a5:97:41:34:b3:c5:ea:e6:f2:47:9e:58:fa:21:
                    99:91:91:40:1e:33:c5:45:51:fc:01:0c:d3:c6:d8:
                    0e:59:af:f7:9a:25:21:d9:0a:c6:35:5a:24:85:0e:
                    67:dd:e9:45:f6:f4:ba:ee:4e:31:83:e1:de:d5:64:
                    7c:6a:10:bd:11:18:3b:3a:df:ec:57:34:01:1e:f6:
                    69:a4:ae:ab:d7:1c:50:8e:20:ad:d2:c2:6a:3d:79:
                    7d:fb:5b:67:5e:3c:47:22:32:1c:1c:59:c6:6d:4e:
                    1f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2B:F7:A2:80:B7:5E:38:E6:7E:CF:2A:58:94:F2:99:C7:3D:F3:E2
            X509v3 Authority Key Identifier:
                keyid:F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:dd:28:28:09:ae:4c:46:55:15:11:42:3f:9a:8f:10:cd:67:
         e3:3d:0a:87:fc:48:58:62:53:e5:d7:2d:7a:57:1e:47:09:6a:
         e0:20:35:c5:a5:13:af:ed:05:1f:0b:f5:35:c7:21:32:83:0e:
         19:93:6c:d8:7d:6c:31:2d:27:89:73:b7:56:a1:72:98:6f:a2:
         d9:9e:e4:45:4c:79:0a:95:e1:69:bd:21:af:e3:f0:09:e7:20:
         97:88:81:6e:73:b4:89:33:cb:c3:fe:09:4f:f8:d0:2e:87:1e:
         94:c9:97:1c:fd:fb:b1:2c:0c:11:18:cb:f9:83:de:69:b0:21:
         70:cb:a4:68:a0:eb:4f:18:4a:32:2d:d9:ac:18:b8:a5:7e:5a:
         e7:2d:3a:81:83:9d:91:8d:db:a0:38:1b:fa:d8:e2:cb:01:67:
         d0:00:8e:8f:cd:f3:8d:4f:29:ab:b1:47:15:6c:0a:df:f2:0f:
         ad:7e:10:4f:f6:3a:7c:a3:4e:ad:48:30:8a:a8:71:e3:50:2c:
         1b:57:66:0b:0e:43:7c:93:88:d6:c6:37:f9:d2:5e:df:71:08:
         e9:62:91:db:2e:3c:91:ff:e7:69:68:11:16:2b:42:23:92:61:
         8d:16:33:19:18:5c:4a:72:0a:ef:a9:23:e6:9a:8b:88:e4:0e:
         c3:60:e4:88
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZy0pYeepzuHk7K62wgEqyHqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NjQ4MDgyZjg4OGQ0MDk3YWM0Y2RiYTg0NjYwYjkzMGY3
NTAzNWYwHhcNMjYwMzAzMTcwMTEyWhcNMjYwMzA0MTcwMTEyWjAzMTEwLwYDVQQD
EygwYjJiZjdhMjgwYjc1ZTM4ZTY3ZWNmMmE1ODk0ZjI5OWM3M2RmM2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjELZIlC3y7VF56k0yk4/Wlp82BN
e3ywlrI05x7mF6KO8QNjafJdRYNq20zbyFBozSbn3X0aKPSfz11rYVaynFcZ9HHx
XSngYd5CVQNzdZ/wmWk3YL6rP/qrK9p4tnLRdXbXfB7kJ1SVbzb5NQNeS4XF5bSr
z6heJwkWVUlsbYnrv29zpdOMc5DMeVtObkugTixi8xmzpZdBNLPF6ubyR55Y+iGZ
kZFAHjPFRVH8AQzTxtgOWa/3miUh2QrGNVokhQ5n3elF9vS67k4xg+He1WR8ahC9
ERg7Ot/sVzQBHvZppK6r1xxQjiCt0sJqPXl9+1tnXjxHIjIcHFnGbU4ffQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAsr96KAt1445n7PKliU8pnHPfPiMB8GA1UdIwQY
MBaAFPhkgIL4iNQJesTNuoRmC5MPdQNfMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1HU0FndmlJMUFsNnhNMjZoR1lMa3c5MUExOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvYjY2MTJiLTk1M2UtNGM2Yy1hYWQw
LTNhZjlhNGIwYTg3My8xLzEtR1NBZ3ZpSTFBbDZ4TTI2aEdZTGt3OTFBMTgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRmL2I2NjEyYi05NTNlLTRjNmMtYWFkMC0zYWY5YTRiMGE4
NzMvMS8xLUdTQWd2aUkxQWw2eE0yNmhHWUxrdzkxQTE4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZt0o
KAmuTEZVFRFCP5qPEM1n4z0Kh/xIWGJT5dctelceRwlq4CA1xaUTr+0FHwv1Ncch
MoMOGZNs2H1sMS0niXO3VqFymG+i2Z7kRUx5CpXhab0hr+PwCecgl4iBbnO0iTPL
w/4JT/jQLocelMmXHP37sSwMERjL+YPeabAhcMukaKDrTxhKMi3ZrBi4pX5a5y06
gYOdkY3boDgb+tjiywFn0ACOj83zjU8pq7FHFWwK3/IPrX4QT/Y6fKNOrUgwiqhx
41AsG1dmCw5DfJOI1sY3+dJe33EI6WKR2y48kf/naWgRFitCI5JhjRYzGRhcSnIK
76kj5pqLiOQOw2DkiA==
-----END CERTIFICATE-----
Generated at Tue Mar 3 18:24:25 2026 by rpki-client