Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
File:                     Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft (raw, json)
Hash identifier:          8srNp+lK5YaanT7Mm/nobd+CUuJYqOo3TaABWsuIJm8=
Subject key identifier:   F9:B7:72:CE:22:BB:E6:FA:71:34:54:00:68:B3:93:20:53:A5:3D:64
Authority key identifier: 19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
Certificate issuer:       /CN=19ca39890f97f728152bcd85c236d8e5ff460429
Certificate serial:       019CEE94AF5AB46B21E75C5C1393E012D5AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
Manifest number:          186A
Signing time:             Sat 14 Mar 2026 23:00:47 +0000
Manifest this update:     Sat 14 Mar 2026 23:00:47 +0000
Manifest next update:     Sun 15 Mar 2026 23:00:47 +0000
Files and hashes:         1: 9U9GJ2gIPT5fQlwrS_PORXQ8IEw.roa (hash: Ew3sgvXIFSVbIaXejNH5mh4KuqPNbuNRT+236zCj8P8=)
                          2: Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl (hash: Xbm+H5r79ZkQdlm5yU+G3Y5b3hZSPIp7jfPbOA/lFf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 23:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ee:94:af:5a:b4:6b:21:e7:5c:5c:13:93:e0:12:d5:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ca39890f97f728152bcd85c236d8e5ff460429
        Validity
            Not Before: Mar 14 23:00:47 2026 GMT
            Not After : Mar 15 23:00:47 2026 GMT
        Subject: CN=f9b772ce22bbe6fa7134540068b3932053a53d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:05:d2:e9:66:32:ee:69:6e:bd:9e:b9:91:da:
                    f1:f2:9e:48:ca:03:a6:5e:57:52:51:8a:ca:86:a7:
                    60:d0:03:33:a0:0f:b2:1d:ec:c5:b0:e7:d7:17:66:
                    0e:04:a7:a4:4b:92:29:5b:ed:70:f2:f8:bf:1e:1c:
                    0d:4e:92:7d:bb:88:2d:aa:2d:ac:15:29:6f:86:2a:
                    e5:9b:3d:10:75:31:9d:cc:17:7d:c1:3c:4e:d0:10:
                    81:f9:9d:5d:4d:01:b8:ac:d0:6b:5d:9f:9e:b9:8f:
                    74:72:c1:b6:28:8f:1a:f9:d4:9b:41:9d:0e:d1:73:
                    2e:22:10:f6:9b:11:36:db:d1:16:bc:df:c1:37:a1:
                    56:6f:a5:19:40:81:ce:68:7f:78:8b:7b:bc:f3:49:
                    8e:cd:78:83:87:04:34:11:03:60:d2:0a:bf:a4:21:
                    d9:3c:71:49:ae:d9:46:ff:46:4b:89:5d:2d:99:a3:
                    cc:fa:24:8f:81:94:04:5d:96:d0:08:e7:a4:1f:58:
                    64:d5:1c:7f:e6:34:89:2d:c4:5a:d8:ae:6f:ad:46:
                    c5:74:43:10:4a:fd:4e:d0:cd:1e:8d:62:e8:09:82:
                    8b:2d:02:0d:b8:12:56:ad:79:75:81:2c:0d:96:51:
                    53:48:6a:27:89:03:90:72:52:c9:a8:6c:34:e8:37:
                    67:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B7:72:CE:22:BB:E6:FA:71:34:54:00:68:B3:93:20:53:A5:3D:64
            X509v3 Authority Key Identifier:
                keyid:19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:82:d1:bf:ee:98:d1:50:90:f6:17:55:81:d0:fb:c9:a0:5b:
         13:c1:8e:0c:1d:68:a6:2a:4d:4c:c4:08:e4:a4:c6:63:8c:9f:
         d0:21:cd:a4:3c:2c:09:93:79:b1:a1:e6:c5:d5:73:10:49:c1:
         51:fb:f8:9f:be:a7:55:17:b1:c0:9f:30:49:5f:59:7f:b4:e7:
         2a:80:ed:0e:c6:5c:c2:bd:9e:2c:61:93:69:df:71:b6:c5:8a:
         10:a0:65:1d:01:8c:54:8e:4c:80:ef:5d:4b:c0:83:02:9c:3e:
         15:f7:18:01:56:1f:9c:2c:98:59:fb:4e:df:d2:b1:bd:d2:ca:
         73:2d:0d:3c:af:37:45:22:35:dd:ee:5c:e3:02:43:6f:84:2c:
         bb:b6:9f:38:0a:6b:97:f3:37:60:1f:c4:2b:66:2f:d9:81:c7:
         f7:6c:81:1d:da:ec:5f:25:be:23:6b:16:c4:9f:c5:5d:6a:19:
         18:75:fd:51:7f:6b:f1:f7:0a:cd:34:1f:60:3f:67:74:90:72:
         4c:9d:47:1f:d0:3d:9b:02:ca:95:83:2e:16:b8:24:aa:f4:42:
         4f:01:43:96:fe:e7:87:48:a5:c0:6f:94:ac:e4:ff:c1:65:6c:
         98:2b:73:be:33:09:b6:07:55:55:f1:bf:e7:0a:c5:e1:9e:88:
         51:4c:c6:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzulK9atGsh51xcE5PgEtWvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5Y2EzOTg5MGY5N2Y3MjgxNTJiY2Q4NWMyMzZkOGU1ZmY0
NjA0MjkwHhcNMjYwMzE0MjMwMDQ3WhcNMjYwMzE1MjMwMDQ3WjAzMTEwLwYDVQQD
EyhmOWI3NzJjZTIyYmJlNmZhNzEzNDU0MDA2OGIzOTMyMDUzYTUzZDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwXS6WYy7mluvZ65kdrx8p5IygOm
XldSUYrKhqdg0AMzoA+yHezFsOfXF2YOBKekS5IpW+1w8vi/HhwNTpJ9u4gtqi2s
FSlvhirlmz0QdTGdzBd9wTxO0BCB+Z1dTQG4rNBrXZ+euY90csG2KI8a+dSbQZ0O
0XMuIhD2mxE229EWvN/BN6FWb6UZQIHOaH94i3u880mOzXiDhwQ0EQNg0gq/pCHZ
PHFJrtlG/0ZLiV0tmaPM+iSPgZQEXZbQCOekH1hk1Rx/5jSJLcRa2K5vrUbFdEMQ
Sv1O0M0ejWLoCYKLLQINuBJWrXl1gSwNllFTSGoniQOQclLJqGw06DdnGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPm3cs4iu+b6cTRUAGizkyBTpT1kMB8GA1UdIwQY
MBaAFBnKOYkPl/coFSvNhcI22OX/RgQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2NvNWlRLVg5eWdWSzgyRndqYlk1ZjlHQkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xNjFkYWYtMjQ4Zi00ZTNhLThiZWIt
NzdlZmJjMzYyNTAzLzEvR2NvNWlRLVg5eWdWSzgyRndqYlk1ZjlHQkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8xNjFkYWYtMjQ4Zi00ZTNhLThiZWItNzdlZmJjMzYyNTAz
LzEvR2NvNWlRLVg5eWdWSzgyRndqYlk1ZjlHQkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJoLRv+6Y
0VCQ9hdVgdD7yaBbE8GODB1opipNTMQI5KTGY4yf0CHNpDwsCZN5saHmxdVzEEnB
Ufv4n76nVRexwJ8wSV9Zf7TnKoDtDsZcwr2eLGGTad9xtsWKEKBlHQGMVI5MgO9d
S8CDApw+FfcYAVYfnCyYWftO39KxvdLKcy0NPK83RSI13e5c4wJDb4Qsu7afOApr
l/M3YB/EK2Yv2YHH92yBHdrsXyW+I2sWxJ/FXWoZGHX9UX9r8fcKzTQfYD9ndJBy
TJ1HH9A9mwLKlYMuFrgkqvRCTwFDlv7nh0ilwG+UrOT/wWVsmCtzvjMJtgdVVfG/
5wrF4Z6IUUzGnQ==
-----END CERTIFICATE-----
Generated at Sun Mar 15 08:24:00 2026 by rpki-client