Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
File:                     GYC7us-p483M9sDpNTYaerJ9oU0.mft (raw, json)
Hash identifier:          zxAKz9iJJggH5vsFzhS7E3npF7+2tW9CSuvsTQhbafs=
Subject key identifier:   0E:EF:65:5F:B9:2B:F8:B6:07:1F:1B:35:11:FF:70:9A:1D:C6:BD:E7
Authority key identifier: 19:80:BB:BA:CF:A9:E3:CD:CC:F6:C0:E9:35:36:1A:7A:B2:7D:A1:4D
Certificate issuer:       /CN=1980bbbacfa9e3cdccf6c0e935361a7ab27da14d
Certificate serial:       019D37C02A05C463CB4A2BA2C7CA807F7A8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
Manifest number:          188E
Signing time:             Sun 29 Mar 2026 04:00:33 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:33 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:33 +0000
Files and hashes:         1: GAgJEyeBQbINpePHsf9a-ETdBEo.roa (hash: jmElPeGw1Mnqm5X5HlhE2ARHbPrOTNT0EBsgbwDnsnA=)
                          2: GYC7us-p483M9sDpNTYaerJ9oU0.crl (hash: yF+YXspk4oSRKuS9xGpLmWXkSzpSnTmdu26LJjzT5WM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:2a:05:c4:63:cb:4a:2b:a2:c7:ca:80:7f:7a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1980bbbacfa9e3cdccf6c0e935361a7ab27da14d
        Validity
            Not Before: Mar 29 04:00:33 2026 GMT
            Not After : Mar 30 04:00:33 2026 GMT
        Subject: CN=0eef655fb92bf8b6071f1b3511ff709a1dc6bde7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:97:7d:20:1e:5d:ff:bc:ed:ac:ef:2c:5b:73:
                    35:63:42:f6:1a:67:47:e3:fe:ce:f5:15:13:e8:d0:
                    84:ca:11:20:1c:a6:09:72:8e:48:c1:7c:9b:18:61:
                    57:d5:0c:a4:fa:56:e0:aa:a8:21:84:c7:c3:d1:65:
                    c7:00:1c:53:a1:fc:68:55:79:cc:91:53:98:03:d8:
                    02:46:3f:30:72:d8:3c:98:72:a9:c7:be:f5:a8:54:
                    57:71:fb:bd:64:9f:ee:e4:ac:7e:2e:e5:c5:bd:91:
                    21:75:69:0d:a5:c2:7d:14:8a:34:cf:e6:7e:eb:9d:
                    f6:6e:1e:7a:2a:d1:0e:46:eb:8d:46:8e:35:dc:93:
                    c3:72:e6:6d:4a:22:80:8d:a2:cb:80:01:0d:43:b7:
                    71:05:f9:3f:4d:a2:54:81:61:fe:ad:e7:d0:8c:2a:
                    4c:ff:dc:b2:b9:c1:b5:06:7c:b9:4f:4f:03:b0:95:
                    1a:09:23:1f:a2:4a:a3:53:3c:66:8c:47:67:16:a5:
                    c7:ad:50:6b:c0:7f:39:8e:e5:c1:3a:73:d0:03:ff:
                    35:de:58:0d:3e:42:cd:68:41:3b:72:cc:ff:35:2d:
                    16:d7:aa:a7:94:a1:81:75:6c:9b:6e:4b:80:67:25:
                    72:f5:4b:49:48:79:ba:c1:66:9d:cc:d0:74:59:a3:
                    65:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:EF:65:5F:B9:2B:F8:B6:07:1F:1B:35:11:FF:70:9A:1D:C6:BD:E7
            X509v3 Authority Key Identifier:
                keyid:19:80:BB:BA:CF:A9:E3:CD:CC:F6:C0:E9:35:36:1A:7A:B2:7D:A1:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:fb:f9:89:a2:51:3a:b5:4a:0a:a1:d8:76:82:7f:71:3a:0b:
         18:33:58:0f:c8:21:a8:5a:0c:f6:53:28:fb:2a:95:85:a0:d3:
         7e:58:c4:ba:a6:77:0d:61:7e:e7:fa:af:39:15:f5:62:56:cc:
         37:4c:92:17:ed:fa:ac:38:c6:8f:4e:21:7d:83:8f:d7:f0:56:
         dd:f6:a9:2e:be:27:4b:53:be:cc:6f:05:9a:bf:23:63:d3:f0:
         49:97:aa:bc:58:8d:2f:95:16:88:7b:9e:d9:c1:18:9a:30:06:
         34:b2:f1:c2:dc:f1:4f:01:df:52:9b:b7:3d:81:3e:b6:fa:fe:
         d0:4a:ca:7f:61:cd:5f:b2:56:5f:a3:47:e2:d0:71:b2:6e:c6:
         16:33:d9:9e:7f:b0:2a:aa:92:9a:18:bb:a3:3d:00:d5:a9:2e:
         6e:e2:fa:1f:46:97:c9:2d:34:f9:89:d6:8f:2d:02:92:4b:51:
         b2:01:fd:c2:cc:03:de:aa:3f:9b:3b:00:8e:44:9e:27:98:e5:
         ac:40:0f:09:1b:c0:6e:47:6e:f6:51:b7:9f:01:5f:d5:1e:3c:
         66:29:85:4e:3f:4f:d8:40:18:80:cd:75:2a:bc:91:50:f2:09:
         e7:09:2a:ec:12:e8:e6:10:92:d6:0f:7a:d9:77:f3:9f:64:12:
         20:6b:25:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wCoFxGPLSiuix8qAf3qNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ODBiYmJhY2ZhOWUzY2RjY2Y2YzBlOTM1MzYxYTdhYjI3
ZGExNGQwHhcNMjYwMzI5MDQwMDMzWhcNMjYwMzMwMDQwMDMzWjAzMTEwLwYDVQQD
EygwZWVmNjU1ZmI5MmJmOGI2MDcxZjFiMzUxMWZmNzA5YTFkYzZiZGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pd9IB5d/7ztrO8sW3M1Y0L2GmdH
4/7O9RUT6NCEyhEgHKYJco5IwXybGGFX1Qyk+lbgqqghhMfD0WXHABxTofxoVXnM
kVOYA9gCRj8wctg8mHKpx771qFRXcfu9ZJ/u5Kx+LuXFvZEhdWkNpcJ9FIo0z+Z+
6532bh56KtEORuuNRo413JPDcuZtSiKAjaLLgAENQ7dxBfk/TaJUgWH+refQjCpM
/9yyucG1Bny5T08DsJUaCSMfokqjUzxmjEdnFqXHrVBrwH85juXBOnPQA/813lgN
PkLNaEE7csz/NS0W16qnlKGBdWybbkuAZyVy9UtJSHm6wWadzNB0WaNlgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7vZV+5K/i2Bx8bNRH/cJodxr3nMB8GA1UdIwQY
MBaAFBmAu7rPqePNzPbA6TU2GnqyfaFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1lDN3VzLXA0ODNNOXNEcE5UWWFlcko5b1UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80NzY1ZTgtNjFiOC00MGM3LTg0N2Yt
ZGNjZTBjOWY0ZDk0LzEvR1lDN3VzLXA0ODNNOXNEcE5UWWFlcko5b1UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny80NzY1ZTgtNjFiOC00MGM3LTg0N2YtZGNjZTBjOWY0ZDk0
LzEvR1lDN3VzLXA0ODNNOXNEcE5UWWFlcko5b1UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavv5iaJR
OrVKCqHYdoJ/cToLGDNYD8ghqFoM9lMo+yqVhaDTfljEuqZ3DWF+5/qvORX1YlbM
N0ySF+36rDjGj04hfYOP1/BW3fapLr4nS1O+zG8Fmr8jY9PwSZeqvFiNL5UWiHue
2cEYmjAGNLLxwtzxTwHfUpu3PYE+tvr+0ErKf2HNX7JWX6NH4tBxsm7GFjPZnn+w
KqqSmhi7oz0A1akubuL6H0aXyS00+YnWjy0CkktRsgH9wswD3qo/mzsAjkSeJ5jl
rEAPCRvAbkdu9lG3nwFf1R48ZimFTj9P2EAYgM11KryRUPIJ5wkq7BLo5hCS1g96
2Xfzn2QSIGsljg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:44 2026 by rpki-client