Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
File:                     GiynpYOySXw2fp6G3rect6c3Wkc.mft (raw, json)
Hash identifier:          3uK+NFtg3qjH8BE0w1aLUe9YcToKQ29uCe29RRuq3zs=
Subject key identifier:   92:BB:D3:37:C1:65:69:50:FA:A0:CC:E1:62:96:71:9E:89:9A:45:A0
Authority key identifier: 1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
Certificate issuer:       /CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Certificate serial:       019CC2984CAE7C0E71FBD96595ECD810A59A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
Manifest number:          0EEA
Signing time:             Fri 06 Mar 2026 10:01:26 +0000
Manifest this update:     Fri 06 Mar 2026 10:01:26 +0000
Manifest next update:     Sat 07 Mar 2026 10:01:26 +0000
Files and hashes:         1: 3J-wyv1f8o7fdt2XdhBrva-Zcak.roa (hash: 86oH9Lq+HOUCzXcyWvwU28zWZtGugPgDR4jwNJr9aV8=)
                          2: DeAgFNfIORWnBfFq7D10Rej2HAU.roa (hash: uoLF8CbxN4s+EXeDSpUnzOmVweCKadVLU7SCOTJVvmI=)
                          3: GiynpYOySXw2fp6G3rect6c3Wkc.crl (hash: XbqeMNa91AyPyVivSwwi4jGP1xPSA5xsk9+Cszx+vAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Mar 2026 10:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c2:98:4c:ae:7c:0e:71:fb:d9:65:95:ec:d8:10:a5:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
        Validity
            Not Before: Mar  6 10:01:26 2026 GMT
            Not After : Mar  7 10:01:26 2026 GMT
        Subject: CN=92bbd337c1656950faa0cce16296719e899a45a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a7:91:32:e9:dd:0e:56:86:80:d0:61:df:42:
                    d9:b5:2e:80:e5:06:66:65:c3:76:e8:8f:68:a0:36:
                    ec:51:96:cb:82:3d:0d:4e:06:7f:cd:32:af:b5:2e:
                    0a:56:44:a2:41:22:0e:83:ca:25:05:cc:e3:f3:05:
                    14:1e:a7:d5:e1:6e:dd:19:38:65:89:5f:99:4f:62:
                    11:6b:8f:2f:1b:0d:f1:3c:14:7c:63:a9:7f:c0:43:
                    07:21:04:5c:b6:d4:b5:42:c9:c3:ea:73:d0:61:a6:
                    1f:67:b7:86:2b:58:12:5b:4e:3b:19:15:e1:0d:ea:
                    be:02:d8:9e:a8:4f:8d:8f:36:27:81:18:c4:9e:be:
                    b0:78:a7:3d:a4:7c:28:e5:7a:e3:9b:2d:dc:24:b9:
                    ae:2f:01:c4:9c:9d:55:b0:e6:01:78:74:81:64:5b:
                    05:96:37:ed:1b:ed:0c:c8:99:8e:14:9a:b4:4d:42:
                    d4:52:70:f2:3f:9f:4a:d4:d7:1a:98:36:b5:9f:60:
                    87:8c:86:30:5d:fe:1c:49:5c:62:b1:4e:ae:da:a7:
                    42:07:89:c5:e6:4f:61:d0:2c:ea:2a:ae:a7:d2:f2:
                    69:17:1e:06:92:ff:f5:dc:ce:b0:3e:b2:c0:2d:37:
                    ac:18:fc:81:39:42:8f:23:c4:5c:f0:40:bb:eb:ba:
                    44:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BB:D3:37:C1:65:69:50:FA:A0:CC:E1:62:96:71:9E:89:9A:45:A0
            X509v3 Authority Key Identifier:
                keyid:1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:56:11:da:93:38:41:fa:75:8a:86:e9:28:7c:7f:30:f9:55:
         42:40:0a:ed:d1:c2:2f:33:30:08:91:d5:52:7d:53:19:af:e2:
         00:43:8f:bc:b7:29:4d:e8:64:e8:e9:33:13:97:a5:df:a7:ab:
         3b:36:e8:ce:5f:68:ad:80:67:73:2d:6b:f5:af:74:da:bd:b8:
         06:74:7a:f9:57:d2:27:61:46:83:72:e2:ab:64:ab:73:70:37:
         b5:00:fa:b6:9d:df:6d:17:f0:87:32:8a:ab:86:2d:cc:e0:84:
         70:67:2b:5c:1d:47:e2:1d:97:08:d5:2d:81:9b:3c:a7:74:b5:
         8f:de:23:cc:e3:49:f6:8f:dd:6e:cd:3d:12:6f:d1:01:55:46:
         b3:3c:0e:fd:3b:57:49:bf:cb:77:a8:b5:84:91:c2:c1:3e:6a:
         96:56:45:67:da:77:c3:2f:1e:46:58:fa:19:e5:4b:9c:72:76:
         11:f1:01:b4:17:ba:3f:e6:98:71:8a:3a:f3:f4:66:41:f4:51:
         94:9d:64:8e:61:42:df:27:66:dd:d0:f3:31:5d:83:1d:3e:65:
         aa:3f:ce:25:66:ac:7a:73:ea:39:f7:50:69:67:6b:2e:d6:9c:
         22:62:ba:77:10:b9:1c:d0:b6:f2:38:ca:b5:dd:fa:d0:da:db:
         ed:e1:22:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 17:20:52 2026 by rpki-client