Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft
File:                     Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft (raw, json)
Hash identifier:          TEuhCbL/kUADf9RU1yD17wh2YX4Tq7RHi/u1fMX+2WE=
Subject key identifier:   4E:D5:8B:E3:2F:44:C1:07:FE:52:78:3B:97:48:10:C9:11:58:DE:01
Authority key identifier: 1A:F9:1D:CE:DF:DE:FD:CE:59:BD:B0:50:02:B1:CB:6C:52:F0:C5:D3
Certificate issuer:       /CN=1af91dcedfdefdce59bdb05002b1cb6c52f0c5d3
Certificate serial:       019D394174CABA025747E71F4F3E92203527
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft
Manifest number:          188C
Signing time:             Sun 29 Mar 2026 11:01:24 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:24 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:24 +0000
Files and hashes:         1: Gvkdzt_e_c5ZvbBQArHLbFLwxdM.crl (hash: wRpH3mCh4Ek7NGHfCIjXEMpvPZSzmGmSbHHVWzo8e5Y=)
                          2: l97Dui8c8NGGXwj8ZGvsNrMVmQ8.roa (hash: L0nSl6w8NFmZ6xiyZGLVSsN/XXDBn3eOQidAlDJvDmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:74:ca:ba:02:57:47:e7:1f:4f:3e:92:20:35:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1af91dcedfdefdce59bdb05002b1cb6c52f0c5d3
        Validity
            Not Before: Mar 29 11:01:24 2026 GMT
            Not After : Mar 30 11:01:24 2026 GMT
        Subject: CN=4ed58be32f44c107fe52783b974810c91158de01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ce:dd:7a:15:44:5a:ae:c6:97:1b:8d:d3:37:
                    c2:7c:b0:c7:64:5b:ff:af:d1:77:1b:43:f5:7e:b7:
                    2a:74:61:83:c7:0f:75:de:51:5c:c8:42:6b:c2:65:
                    08:7e:a6:11:a3:71:5f:4e:9f:19:ee:39:09:9e:f8:
                    77:aa:ac:fa:da:a6:df:b8:31:69:d1:3e:a7:97:55:
                    8a:9b:26:4a:d1:6a:7c:e3:df:4f:19:2a:87:0e:28:
                    16:8a:f4:ef:75:8c:54:93:cd:16:15:d4:f8:2a:a9:
                    98:76:d8:61:c0:c1:12:9d:00:6a:a1:d1:36:3b:34:
                    2e:97:e3:62:46:4e:c3:0b:ed:dc:2a:c5:18:ce:82:
                    d2:42:fb:02:20:4a:93:1b:d8:c9:3b:f1:e9:ff:39:
                    3b:ef:38:49:f1:ae:81:14:70:b4:a0:0e:3d:e7:da:
                    5c:b8:82:23:65:29:27:1a:c8:52:6b:cc:b3:c9:52:
                    a1:5b:20:40:cc:41:7c:27:16:0c:6b:1d:39:83:ed:
                    fa:80:39:8d:ca:d0:de:48:26:ce:2c:fc:6d:a6:b7:
                    0c:d5:d0:7e:6e:c4:2c:3b:bb:2a:ea:e6:35:14:de:
                    60:1c:bd:4f:a3:84:ea:a5:8f:6a:bf:41:d1:90:ad:
                    69:a7:f9:c0:e1:80:7e:f6:de:9a:f5:1d:d9:89:26:
                    d7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D5:8B:E3:2F:44:C1:07:FE:52:78:3B:97:48:10:C9:11:58:DE:01
            X509v3 Authority Key Identifier:
                keyid:1A:F9:1D:CE:DF:DE:FD:CE:59:BD:B0:50:02:B1:CB:6C:52:F0:C5:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b7:49:95:54:c3:66:f2:03:66:0c:bf:29:af:63:9d:69:b1:
         8a:31:8f:7d:52:7b:53:d2:06:2c:72:c3:2e:18:83:83:c4:6f:
         a5:5c:4f:c5:e8:52:62:17:42:c9:d4:60:de:ff:fc:c2:22:24:
         76:c9:e4:f8:c2:61:51:03:f3:93:aa:4f:c0:41:66:a6:41:2e:
         33:1a:1d:4e:4e:e0:44:f7:de:4f:e5:90:d2:54:42:9e:82:89:
         e4:5b:09:db:69:54:f1:4d:07:0c:f0:06:35:f3:ca:b4:b8:79:
         19:84:de:3e:d6:3c:7f:a1:15:13:e0:e5:fd:71:ff:8a:00:2b:
         f8:ce:be:72:ac:77:5a:94:32:58:e9:0a:eb:51:f5:8d:26:79:
         79:a3:9c:8f:d6:bb:55:89:2e:6e:29:00:a2:41:3a:53:bd:4b:
         af:bf:3d:f0:d4:8f:36:f3:60:af:c7:da:ad:e0:25:89:24:47:
         d5:40:02:b8:ae:c0:0c:fa:cc:79:ef:b5:b5:12:09:20:0b:7f:
         97:2b:81:69:63:a3:e0:b3:05:27:3b:5c:96:c9:28:38:a5:4e:
         7c:58:63:c0:e2:8e:1e:8d:0b:ea:18:df:17:51:b2:bd:8f:d0:
         76:f1:29:3e:94:10:0f:d9:5c:fc:ea:c4:74:03:6d:cf:c0:02:
         b2:52:0e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:13 2026 by rpki-client