Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
File:                     GVD3RTAkOmSxG7IywDjVdOf8TSA.mft (raw, json)
Hash identifier:          P68TWVE+ts8C046Rjn3w2Eg6epR/QbXoddgA2CDGAIo=
Subject key identifier:   F2:78:86:11:F1:72:F7:F9:26:DE:97:F1:B6:37:09:F7:F9:8C:54:86
Authority key identifier: 19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20
Certificate issuer:       /CN=1950f74530243a64b11bb232c038d574e7fc4d20
Certificate serial:       019D36E535144D80A9EEEECEBE2F49836A57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
Manifest number:          0B75
Signing time:             Sun 29 Mar 2026 00:01:24 +0000
Manifest this update:     Sun 29 Mar 2026 00:01:24 +0000
Manifest next update:     Mon 30 Mar 2026 00:01:24 +0000
Files and hashes:         1: GVD3RTAkOmSxG7IywDjVdOf8TSA.crl (hash: 2En4lHO1Bh85VQqp96EzxK+LiW6TbV/ElT+PgBYf1Uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 00:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:36:e5:35:14:4d:80:a9:ee:ee:ce:be:2f:49:83:6a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1950f74530243a64b11bb232c038d574e7fc4d20
        Validity
            Not Before: Mar 29 00:01:24 2026 GMT
            Not After : Mar 30 00:01:24 2026 GMT
        Subject: CN=f2788611f172f7f926de97f1b63709f7f98c5486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:62:c0:b5:8b:bc:e2:42:f1:c3:55:1f:ef:56:
                    39:9d:83:7e:cd:cf:6a:09:f3:bd:02:f6:67:fd:dc:
                    80:82:bb:5f:58:92:d1:72:5b:ab:c5:94:60:03:d2:
                    ba:02:7a:80:09:a0:f5:56:d0:99:55:e6:40:25:64:
                    6e:86:1d:63:21:60:35:55:a5:58:d0:40:92:e3:05:
                    a4:f8:af:c5:16:24:22:79:f0:c1:0d:ea:3e:fa:fb:
                    15:c5:86:ff:a1:aa:bc:ea:18:a6:43:1b:bc:40:cb:
                    86:67:e2:b5:9e:1d:49:1e:24:96:46:0d:ee:c5:99:
                    7d:a1:4b:3f:f5:cb:d7:33:00:f4:5f:45:02:2f:8b:
                    61:5d:79:67:3f:54:65:75:8f:57:7f:fa:a6:e2:14:
                    72:a4:8e:60:64:44:1e:71:3e:e7:36:da:9b:49:e9:
                    35:d7:67:fb:d8:e7:57:65:bf:75:5a:39:56:a4:15:
                    68:1f:b5:ba:45:aa:04:96:c4:70:91:03:39:d1:9b:
                    25:6d:85:83:82:6e:75:af:c9:f2:3a:7d:0d:01:de:
                    56:ec:7b:e9:37:2e:f7:3b:98:ab:11:19:a8:3e:f6:
                    4e:99:19:5e:9d:38:11:85:5f:50:73:b1:ec:57:7a:
                    3f:4b:f9:b1:04:c0:18:49:3d:0d:5c:83:a3:65:e6:
                    d3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:78:86:11:F1:72:F7:F9:26:DE:97:F1:B6:37:09:F7:F9:8C:54:86
            X509v3 Authority Key Identifier:
                keyid:19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:8e:ac:36:8e:6a:1e:d8:6d:ad:6f:b6:8d:68:6f:fc:fe:da:
         04:45:7b:27:8e:81:3c:dd:c0:47:cc:cf:7e:c9:fc:c6:f2:88:
         20:0b:64:08:bf:78:60:40:2d:2d:1d:11:70:00:78:96:51:1f:
         da:34:86:9b:47:52:c0:d2:c5:5c:a0:ba:9c:58:7b:81:e4:19:
         3b:7b:e8:af:c9:ba:9f:1a:bd:8c:cb:75:b1:26:c9:3f:ef:6c:
         5d:41:ae:f9:39:78:4a:b5:2a:61:3a:b8:bd:21:b1:98:c0:ce:
         71:83:cd:9a:b1:7e:2f:39:5b:03:06:ed:9f:a2:aa:3b:c5:15:
         34:0b:ac:d5:44:6a:0c:1e:c7:5f:12:02:84:51:95:ef:ab:f4:
         b6:57:69:96:b8:68:02:50:6a:5c:fa:ef:bd:5d:99:9a:f1:f4:
         ec:39:2f:d7:73:b8:7a:f0:03:0f:c8:73:21:74:34:e8:c6:38:
         d6:99:eb:d9:ff:22:7e:42:1b:29:d1:a7:87:35:88:10:8c:28:
         9b:dc:32:66:ff:12:0b:0d:35:6f:f0:ea:3e:8f:87:35:d2:ae:
         82:22:05:b2:89:55:39:e6:0c:88:ce:6e:63:ae:79:ed:74:01:
         23:e9:13:06:a6:88:31:9e:a7:db:84:d2:bd:7c:42:df:b3:a0:
         ff:1d:92:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:28 2026 by rpki-client