Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
File:                     G5gPIqWVKk75pOxKng0MNR_slFQ.mft (raw, json)
Hash identifier:          VfiLZDjyuRAYPKOjh5353CIXQhtNhyGQzr/vWboS2Mc=
Subject key identifier:   0E:8D:3A:5C:07:11:78:7B:FE:B5:2B:85:DE:AA:37:F5:DA:67:A2:E8
Authority key identifier: 1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54
Certificate issuer:       /CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454
Certificate serial:       019CE290BE9B77113DE1B1BCC33B6E1A1ACE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
Manifest number:          1862
Signing time:             Thu 12 Mar 2026 15:01:02 +0000
Manifest this update:     Thu 12 Mar 2026 15:01:02 +0000
Manifest next update:     Fri 13 Mar 2026 15:01:02 +0000
Files and hashes:         1: G5gPIqWVKk75pOxKng0MNR_slFQ.crl (hash: huW8ED/7oO68d9GzKV89Du1CDUWFEoz7Dp1xtaUTseQ=)
                          2: dKV0T8IeH_spYDt_UVR5tMQ6_PE.roa (hash: FiQzj2IJBDAdsIUNZqGewdZB+7P9vXYxqwfhvf0ZCJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 15:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e2:90:be:9b:77:11:3d:e1:b1:bc:c3:3b:6e:1a:1a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454
        Validity
            Not Before: Mar 12 15:01:02 2026 GMT
            Not After : Mar 13 15:01:02 2026 GMT
        Subject: CN=0e8d3a5c0711787bfeb52b85deaa37f5da67a2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c7:4f:e9:4b:51:25:8c:81:87:2d:d4:c7:01:
                    c4:7a:96:44:d1:5e:4a:18:9f:ef:e1:3d:66:09:23:
                    b8:4b:8a:03:a8:68:6d:1e:63:cc:9b:2d:fa:44:8d:
                    b5:66:6a:07:57:3c:da:be:cb:73:63:30:d9:2c:13:
                    20:d6:8c:df:7e:20:79:0b:f2:eb:74:77:44:81:a4:
                    48:ae:40:ca:7f:1c:c0:67:14:c6:f8:5d:85:d1:c4:
                    4c:89:30:16:72:bf:5f:76:72:4e:84:4f:cc:11:eb:
                    a1:b3:01:66:e7:1a:a2:df:2a:21:42:49:6e:ea:35:
                    f2:8c:d7:7e:af:36:c5:af:61:62:7f:e0:94:b5:76:
                    4e:62:cd:6b:2f:ef:09:64:ef:d9:9e:48:4d:85:67:
                    d6:02:3b:65:55:87:6c:e8:68:b9:fa:05:8f:21:d1:
                    e0:9d:1c:ba:2a:ff:f6:40:ec:b6:63:d6:b5:e6:0c:
                    e9:92:5a:f5:7a:f4:2d:46:2a:d9:05:e9:e0:15:55:
                    b7:47:d5:cd:e2:98:1f:4d:09:ca:f5:3a:52:b6:44:
                    a6:6b:64:6c:68:b1:79:82:2f:24:7d:e0:d7:49:15:
                    47:8f:f6:5e:42:7b:f5:94:a7:1a:fc:f7:93:86:42:
                    c7:c4:c2:04:3b:08:63:b9:a7:2b:4e:1d:df:77:54:
                    1b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8D:3A:5C:07:11:78:7B:FE:B5:2B:85:DE:AA:37:F5:DA:67:A2:E8
            X509v3 Authority Key Identifier:
                keyid:1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:34:6b:7b:ef:22:8d:a3:71:44:90:81:dd:fc:ad:8b:b5:dd:
         79:d9:aa:53:d6:87:1f:01:21:aa:e2:d6:0d:ee:24:d6:c9:4b:
         28:75:26:32:c5:4a:50:87:0c:c7:ff:a9:e3:c9:a3:99:46:25:
         30:fa:6d:94:a2:42:95:c9:f1:c5:c1:81:c0:3a:d6:e3:b2:3b:
         1d:d6:bf:41:d5:bc:3d:e3:76:15:67:45:7d:76:2b:b5:ef:26:
         69:06:68:7e:52:55:bc:ae:38:d4:3c:0b:fa:4d:10:47:5a:22:
         2a:3c:3d:9a:b0:00:28:ce:77:c9:bf:41:f0:8c:06:39:fb:d8:
         15:71:b2:0d:c6:cf:2e:1d:92:2a:64:3a:07:73:06:63:29:b7:
         12:87:84:01:b2:b1:ef:1a:87:1a:f0:6a:42:7d:6a:79:e3:88:
         cc:b1:ec:26:89:8c:32:97:ae:b2:e1:ca:5a:05:21:a3:5c:68:
         a6:18:77:44:e3:70:61:38:4e:dc:75:9f:22:08:ba:38:c6:0f:
         3d:ce:8a:4a:dc:dc:7b:cf:eb:e9:33:d8:39:eb:bd:56:ad:80:
         52:c6:55:6d:6b:c3:b5:13:2a:94:e1:29:bb:5c:2b:64:f5:fb:
         ac:ce:52:a5:16:36:7b:a9:ab:4f:55:8a:01:61:60:97:85:3f:
         c1:56:8d:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzikL6bdxE94bG8wztuGhrOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOTgwZjIyYTU5NTJhNGVmOWE0ZWM0YTllMGQwYzM1MWZl
Yzk0NTQwHhcNMjYwMzEyMTUwMTAyWhcNMjYwMzEzMTUwMTAyWjAzMTEwLwYDVQQD
EygwZThkM2E1YzA3MTE3ODdiZmViNTJiODVkZWFhMzdmNWRhNjdhMmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysdP6UtRJYyBhy3UxwHEepZE0V5K
GJ/v4T1mCSO4S4oDqGhtHmPMmy36RI21ZmoHVzzavstzYzDZLBMg1ozffiB5C/Lr
dHdEgaRIrkDKfxzAZxTG+F2F0cRMiTAWcr9fdnJOhE/MEeuhswFm5xqi3yohQklu
6jXyjNd+rzbFr2Fif+CUtXZOYs1rL+8JZO/ZnkhNhWfWAjtlVYds6Gi5+gWPIdHg
nRy6Kv/2QOy2Y9a15gzpklr1evQtRirZBengFVW3R9XN4pgfTQnK9TpStkSma2Rs
aLF5gi8kfeDXSRVHj/ZeQnv1lKca/PeThkLHxMIEOwhjuacrTh3fd1Qb8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6NOlwHEXh7/rUrhd6qN/XaZ6LoMB8GA1UdIwQY
MBaAFBuYDyKllSpO+aTsSp4NDDUf7JRUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzVnUElxV1ZLazc1cE94S25nME1OUl9zbEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83NzRlMjYtZDA4Zi00NmQzLWFkMDYt
MzQ3YjU2NmRkYmQxLzEvRzVnUElxV1ZLazc1cE94S25nME1OUl9zbEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny83NzRlMjYtZDA4Zi00NmQzLWFkMDYtMzQ3YjU2NmRkYmQx
LzEvRzVnUElxV1ZLazc1cE94S25nME1OUl9zbEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTRre+8i
jaNxRJCB3fyti7XdedmqU9aHHwEhquLWDe4k1slLKHUmMsVKUIcMx/+p48mjmUYl
MPptlKJClcnxxcGBwDrW47I7Hda/QdW8PeN2FWdFfXYrte8maQZoflJVvK441DwL
+k0QR1oiKjw9mrAAKM53yb9B8IwGOfvYFXGyDcbPLh2SKmQ6B3MGYym3EoeEAbKx
7xqHGvBqQn1qeeOIzLHsJomMMpeusuHKWgUho1xophh3RONwYThO3HWfIgi6OMYP
Pc6KStzce8/r6TPYOeu9Vq2AUsZVbWvDtRMqlOEpu1wrZPX7rM5SpRY2e6mrT1WK
AWFgl4U/wVaNTw==
-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:52 2026 by rpki-client