Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
File:                     GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft (raw, json)
Hash identifier:          xIJGNPhD/gEr9EPY7MIV/rQdXdONg9OO7MGe+cifnHU=
Subject key identifier:   C0:5E:CD:9B:0F:F8:86:BE:88:33:24:96:67:B1:19:32:92:ED:47:7D
Authority key identifier: 18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49
Certificate issuer:       /CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49
Certificate serial:       019D3A540CAB27942C1561506F85EAF5213C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
Manifest number:          188D
Signing time:             Sun 29 Mar 2026 16:01:19 +0000
Manifest this update:     Sun 29 Mar 2026 16:01:19 +0000
Manifest next update:     Mon 30 Mar 2026 16:01:19 +0000
Files and hashes:         1: GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl (hash: JPX5UP/GqD14PhUfPhcoQxB22MUufxzTa5X9Q7mAGOY=)
                          2: xehj5Em4-aZuqclVAlzpzKvC6hc.roa (hash: 6wuADDCEbwDf490Wgk0Vq7px+7XHcKgHXEBX1F0JtHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:54:0c:ab:27:94:2c:15:61:50:6f:85:ea:f5:21:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49
        Validity
            Not Before: Mar 29 16:01:19 2026 GMT
            Not After : Mar 30 16:01:19 2026 GMT
        Subject: CN=c05ecd9b0ff886be8833249667b1193292ed477d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cd:4b:5e:48:3a:dc:f1:1f:a4:38:a4:55:44:
                    e5:f7:96:89:05:a1:cc:b4:d2:3e:c1:4b:2e:80:a5:
                    ac:88:3d:1c:13:fa:b0:68:5e:26:10:3c:07:68:4d:
                    b6:b6:38:bf:49:b8:69:c0:83:22:b3:a5:31:c6:44:
                    10:a6:b6:22:dd:c6:a3:bb:38:03:c5:80:ed:a6:f9:
                    13:c5:81:96:ff:f9:6a:a4:3a:86:96:e2:b4:42:bf:
                    fe:6f:d1:30:d0:d1:92:62:44:4a:6b:37:fd:b9:69:
                    8b:99:e1:d2:1f:af:fd:0c:20:7f:40:4e:2e:71:96:
                    61:f8:85:f0:51:ca:5f:b2:a6:99:f5:b1:77:8d:24:
                    56:e0:8c:0e:9d:bf:67:9b:86:05:7b:d3:d1:22:99:
                    62:e4:cc:7f:90:ea:b8:4a:11:7c:26:67:9c:e8:60:
                    d0:c3:c9:70:36:1d:0a:3c:4b:e3:8b:78:f7:99:b1:
                    d3:d2:de:35:11:a1:49:5b:80:3e:4c:01:f1:34:9f:
                    15:58:6f:54:d7:62:d8:e4:a0:c7:9b:eb:19:0f:1a:
                    ca:25:93:7e:bf:a2:5b:57:e6:b6:c3:11:84:3f:6e:
                    9f:8a:12:21:28:fc:73:59:aa:6f:fd:f0:9d:8b:b7:
                    66:cc:8e:a2:88:8e:40:bb:3e:12:ac:5f:27:c1:aa:
                    e8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5E:CD:9B:0F:F8:86:BE:88:33:24:96:67:B1:19:32:92:ED:47:7D
            X509v3 Authority Key Identifier:
                keyid:18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:9c:e5:a9:15:ef:89:f7:06:7d:b7:e4:26:83:44:0e:c9:a2:
         65:8b:c3:5a:94:a3:8c:21:cc:fe:e9:7b:f1:6d:a8:7c:f3:fd:
         1c:88:37:08:b8:f8:de:e8:f4:8c:19:ab:0b:51:70:ad:20:a5:
         32:89:64:33:c3:9a:02:0a:74:d8:26:e4:ea:a2:d6:ea:77:cb:
         56:1c:c3:0e:12:3c:b5:a2:c6:ac:de:18:01:0e:3e:80:ea:70:
         22:5d:3c:8e:3f:b8:52:db:be:8f:5e:b5:dc:50:19:d0:98:66:
         30:2b:55:92:72:a1:3f:2c:e2:e8:8b:94:54:84:43:b5:5e:29:
         dc:25:49:be:83:6f:64:80:75:5a:a0:92:ca:95:8c:88:36:df:
         ab:d0:69:04:ac:73:a2:b1:61:ad:ec:29:3c:26:62:4b:9e:45:
         8a:bd:65:e5:52:07:2d:87:8d:fe:05:6b:fe:dd:40:95:0c:ba:
         8b:5a:e3:12:7a:03:ac:33:8c:1a:85:00:a5:28:f2:b8:fc:31:
         fb:7c:c4:ed:f6:00:0c:6e:02:e1:37:95:53:95:f3:33:cf:ad:
         63:97:79:56:44:02:20:54:13:87:6b:d4:2e:53:7b:4c:60:cc:
         78:13:6c:ea:57:bb:eb:6c:35:23:5a:15:0e:af:e0:71:ae:56:
         41:03:43:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:17:06 2026 by rpki-client