Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft
File:                     gRAUn9EhMLPNzzWGKw3NuYqUcck.mft (raw, json)
Hash identifier:          Xvlp2SUhzTwaO+30cRfeXG2f7RWe/k60X2XF4+ANaJA=
Subject key identifier:   05:B9:D5:3D:D0:84:4E:A1:AB:B3:2B:E7:34:88:23:BD:CB:0E:42:50
Authority key identifier: 81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9
Certificate issuer:       /CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9
Certificate serial:       019CE96E6BCCC79C4270C3F58A99C52569EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft
Manifest number:          12A5
Signing time:             Fri 13 Mar 2026 23:00:53 +0000
Manifest this update:     Fri 13 Mar 2026 23:00:53 +0000
Manifest next update:     Sat 14 Mar 2026 23:00:53 +0000
Files and hashes:         1: 8SQmgdkK0KsfXA0AaqFVFyW45As.roa (hash: fxN83lzpsUSm7eGjIimHE3kwgJziubYYBHi6/BB/u4I=)
                          2: A6iNMP0GraSgW6_j4orJfWQjE0o.roa (hash: lSRG12LN2giLsE/xo290FIB2nk9ZuI4BSXvCilXtaZM=)
                          3: Pq02UuVgPsEQJnxfmqHmAw9ZrRY.roa (hash: Z4q0gZP6TZCVbicLemekk+usml+xCUXFfIPrfXm7A+k=)
                          4: gRAUn9EhMLPNzzWGKw3NuYqUcck.crl (hash: GsOH4tX20vVAxngdmgwcuJpTVZwKzEFAWlAABN3G798=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 18:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e9:6e:6b:cc:c7:9c:42:70:c3:f5:8a:99:c5:25:69:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9
        Validity
            Not Before: Mar 13 23:00:53 2026 GMT
            Not After : Mar 14 23:00:53 2026 GMT
        Subject: CN=05b9d53dd0844ea1abb32be7348823bdcb0e4250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:17:5d:1c:54:11:8c:1c:17:be:82:bc:ad:5d:
                    12:11:0c:57:ba:7b:9f:52:0c:da:d2:1d:fa:e3:da:
                    d4:5d:2e:3b:87:ed:28:81:f6:93:b8:43:f7:73:be:
                    d5:2a:4e:48:6c:cd:8a:22:83:49:c2:6f:f7:87:75:
                    20:6b:45:ab:f8:df:59:56:22:24:3e:1d:f1:f0:b3:
                    35:41:a6:bf:fe:80:a6:38:ac:25:39:03:38:cd:58:
                    53:c4:ce:cb:73:1b:71:b1:05:05:b8:01:05:83:ad:
                    af:7c:e6:e1:e0:eb:80:4e:28:a6:b2:18:cc:52:49:
                    75:1c:81:e2:1f:53:78:eb:2c:ea:bc:2f:88:d1:69:
                    3d:92:93:76:e0:0a:1b:04:97:ca:5d:ed:3a:92:40:
                    23:df:eb:ad:c3:91:80:b4:85:f2:26:6d:90:15:8a:
                    ba:9f:89:c6:c6:13:5f:4d:c7:4e:09:85:bc:3c:bd:
                    40:a1:18:27:2a:38:d8:73:a7:6f:6b:ea:94:9e:af:
                    6e:8d:04:d7:b6:f5:f9:ce:ab:5a:eb:af:1e:47:fd:
                    1e:32:7b:aa:a2:53:21:67:be:2c:47:67:1e:ff:5b:
                    b0:3f:c8:70:6f:d5:4c:1f:5a:09:a9:f4:d6:df:d0:
                    ec:f0:09:2a:ff:5d:5f:31:8b:b4:13:aa:ac:0a:f8:
                    45:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B9:D5:3D:D0:84:4E:A1:AB:B3:2B:E7:34:88:23:BD:CB:0E:42:50
            X509v3 Authority Key Identifier:
                keyid:81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:5c:93:60:0c:f3:68:50:5e:9f:f4:82:9e:db:7c:e4:de:94:
         db:db:01:87:c4:ee:45:66:dc:84:50:3e:13:79:09:76:c3:17:
         8c:dd:33:2c:1c:8d:f2:50:f1:ff:26:3b:30:17:6b:c2:b4:db:
         b6:f0:09:00:49:87:df:89:45:e5:73:85:b6:f1:4d:1c:88:58:
         74:48:7b:d6:17:35:ca:d9:32:30:31:66:ef:23:de:76:58:2d:
         14:44:9e:68:b3:93:35:4c:30:a7:ef:cd:63:1e:79:91:59:e1:
         04:f8:5e:2d:e3:de:3e:aa:bd:21:cf:eb:65:3e:9b:75:1f:32:
         b0:80:bd:e7:a6:af:ca:83:f6:a8:4e:b2:85:33:f9:ff:96:af:
         5d:bc:4e:6e:b9:ab:37:0a:be:0c:7a:68:ca:a1:62:3f:5c:94:
         a6:1a:7b:6b:81:ed:f6:b2:ce:21:45:ff:48:1d:b6:d0:29:96:
         c7:f1:ad:e2:73:7b:ae:7f:cf:5f:47:5f:ca:07:c1:dd:b0:86:
         2c:fb:2c:a9:e4:df:7d:04:09:d1:69:c2:d9:7d:0b:9e:19:89:
         d1:8f:67:0a:0e:53:6e:6b:86:6b:61:cf:a4:fa:dd:0e:85:cd:
         87:7c:55:b0:ae:80:78:bc:4a:ac:95:c0:33:ad:f1:35:25:94:
         2d:7d:b4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 03:25:48 2026 by rpki-client