Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft
File:                     gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft (raw, json)
Hash identifier:          Ad3oYu7/QLRuNK8GyejeApOZ6haC6LTTxepys+KCeC8=
Subject key identifier:   67:EC:5E:C3:5E:B8:8E:32:A6:CB:1C:D0:5B:BF:48:5E:22:D0:0A:C2
Authority key identifier: 81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53
Certificate issuer:       /CN=813e051cb831d1989607bb76c0bc5693ff947b53
Certificate serial:       019D3A53977F107E992E8260C6729693A687
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft
Manifest number:          189D
Signing time:             Sun 29 Mar 2026 16:00:49 +0000
Manifest this update:     Sun 29 Mar 2026 16:00:49 +0000
Manifest next update:     Mon 30 Mar 2026 16:00:49 +0000
Files and hashes:         1: gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl (hash: EqsLEWKvtE4/wXzGw/pmo987P6WS4e9mGp2xVrq+/Oo=)
                          2: hI6blJ5kjyHb7biy4lfSirS37zs.roa (hash: mqWBp2AFnHxwb8q7BdrL6WW9+Na4SaPzQGePE+5iXFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:53:97:7f:10:7e:99:2e:82:60:c6:72:96:93:a6:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813e051cb831d1989607bb76c0bc5693ff947b53
        Validity
            Not Before: Mar 29 16:00:49 2026 GMT
            Not After : Mar 30 16:00:49 2026 GMT
        Subject: CN=67ec5ec35eb88e32a6cb1cd05bbf485e22d00ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:92:ee:73:20:44:a9:0e:e6:4f:90:a9:27:19:
                    4f:09:a7:c7:12:44:9e:b1:ff:a2:7b:08:99:f3:44:
                    ab:5c:94:ba:d6:ec:e1:44:c4:77:7c:97:22:02:0e:
                    f2:3d:49:1b:e4:a0:9f:d6:e6:05:7b:b1:16:fb:3a:
                    64:27:5d:7e:b9:16:ba:9c:44:12:78:e0:7f:7f:0e:
                    af:63:52:1a:67:ef:61:7f:7f:33:6f:f0:8d:f4:5a:
                    f4:9b:1b:48:3c:30:00:4f:09:ff:b3:3f:ed:da:fa:
                    a8:04:21:d8:23:a8:0c:61:aa:17:15:e9:45:7c:2b:
                    22:9c:50:1b:3e:5f:d7:f0:e3:42:e3:dd:cf:81:06:
                    04:44:24:a7:ca:ac:54:c8:58:0d:31:f9:3c:c5:2c:
                    7b:b3:ed:2e:e7:d2:08:bd:29:2d:13:ec:3d:ff:54:
                    f5:3b:dc:48:62:d2:34:c9:bf:b9:22:61:83:df:e1:
                    31:db:d6:1a:02:10:05:68:bb:b0:2c:19:5a:0a:c0:
                    01:03:a6:54:45:ef:03:94:f2:ac:7c:41:eb:a1:41:
                    e6:38:4c:08:93:db:ed:6a:71:16:42:7b:2c:23:ef:
                    38:37:cb:98:8c:29:68:2c:6f:d7:bc:f9:7b:05:1e:
                    5a:75:3b:71:aa:4a:91:79:bf:b4:9b:c9:fd:ff:60:
                    32:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EC:5E:C3:5E:B8:8E:32:A6:CB:1C:D0:5B:BF:48:5E:22:D0:0A:C2
            X509v3 Authority Key Identifier:
                keyid:81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:77:c2:74:b0:02:5d:24:7a:12:01:90:b5:59:fc:20:63:3b:
         47:0c:f1:6d:7f:d1:24:df:b8:27:fd:53:5b:cc:86:d4:c6:78:
         76:0b:a2:cb:8d:e3:8c:7f:a8:e2:91:2d:18:c5:39:11:fe:94:
         81:b0:1a:80:46:4d:7d:f9:c2:cd:b2:da:6c:e1:59:4c:30:ff:
         4a:da:57:a4:30:ca:15:6c:8a:f5:fe:08:2b:d5:65:a9:48:5b:
         4e:52:b3:20:74:58:15:9c:38:11:37:35:e6:db:c8:3d:93:72:
         e3:47:79:0d:6b:05:a1:3f:2b:02:f9:6c:a7:c5:8c:10:01:34:
         67:a4:b9:dc:b2:b2:c9:59:7d:77:bb:bb:f1:74:95:8e:49:11:
         a3:8c:b6:f8:3e:c8:d5:95:d7:4f:cc:91:13:5c:06:60:19:3f:
         0b:28:28:49:51:28:ac:16:21:64:81:ec:fd:4e:77:da:cc:93:
         fb:a9:34:eb:16:8a:78:41:53:aa:44:10:f3:af:fd:de:7e:43:
         a0:33:91:b8:ba:5e:dc:54:fe:06:db:43:38:ff:4b:f7:68:8e:
         41:a7:1d:d4:e3:00:7e:9a:ad:72:12:00:ca:ef:38:42:01:98:
         b8:ae:4e:77:b2:f3:73:c1:3a:ce:aa:ce:fb:32:97:1c:7b:7a:
         0c:76:a9:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06U5d/EH6ZLoJgxnKWk6aHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxM2UwNTFjYjgzMWQxOTg5NjA3YmI3NmMwYmM1NjkzZmY5
NDdiNTMwHhcNMjYwMzI5MTYwMDQ5WhcNMjYwMzMwMTYwMDQ5WjAzMTEwLwYDVQQD
Eyg2N2VjNWVjMzVlYjg4ZTMyYTZjYjFjZDA1YmJmNDg1ZTIyZDAwYWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pLucyBEqQ7mT5CpJxlPCafHEkSe
sf+iewiZ80SrXJS61uzhRMR3fJciAg7yPUkb5KCf1uYFe7EW+zpkJ11+uRa6nEQS
eOB/fw6vY1IaZ+9hf38zb/CN9Fr0mxtIPDAATwn/sz/t2vqoBCHYI6gMYaoXFelF
fCsinFAbPl/X8ONC493PgQYERCSnyqxUyFgNMfk8xSx7s+0u59IIvSktE+w9/1T1
O9xIYtI0yb+5ImGD3+Ex29YaAhAFaLuwLBlaCsABA6ZURe8DlPKsfEHroUHmOEwI
k9vtanEWQnssI+84N8uYjCloLG/XvPl7BR5adTtxqkqReb+0m8n9/2AywwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfsXsNeuI4ypssc0Fu/SF4i0ArCMB8GA1UdIwQY
MBaAFIE+BRy4MdGYlge7dsC8VpP/lHtTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1Q0RkhMZ3gwWmlXQjd0MndMeFdrXy1VZTFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9lNDVhZDYtZTVhZS00ODE5LTlmMjQt
ZjU3N2FhNDZkZTgzLzEvZ1Q0RkhMZ3gwWmlXQjd0MndMeFdrXy1VZTFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9lNDVhZDYtZTVhZS00ODE5LTlmMjQtZjU3N2FhNDZkZTgz
LzEvZ1Q0RkhMZ3gwWmlXQjd0MndMeFdrXy1VZTFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd3fCdLAC
XSR6EgGQtVn8IGM7RwzxbX/RJN+4J/1TW8yG1MZ4dguiy43jjH+o4pEtGMU5Ef6U
gbAagEZNffnCzbLabOFZTDD/StpXpDDKFWyK9f4IK9VlqUhbTlKzIHRYFZw4ETc1
5tvIPZNy40d5DWsFoT8rAvlsp8WMEAE0Z6S53LKyyVl9d7u78XSVjkkRo4y2+D7I
1ZXXT8yRE1wGYBk/CygoSVEorBYhZIHs/U532syT+6k06xaKeEFTqkQQ86/93n5D
oDORuLpe3FT+BttDOP9L92iOQacd1OMAfpqtchIAyu84QgGYuK5Od7Lzc8E6zqrO
+zKXHHt6DHapqA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:48 2026 by rpki-client