Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
File:                     Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft (raw, json)
Hash identifier:          +EGCoPWsrwBU+UmrFtjOAiU3chCH2Nt4tW9MdDD1Ak8=
Subject key identifier:   A9:81:6A:85:6C:A0:7E:EA:6B:1A:BD:A2:29:EF:EC:7B:1E:4E:E3:8B
Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
Certificate issuer:       /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Certificate serial:       019CEF39DFD96C3ADADDFB2D4623BFAFDD38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
Manifest number:          186D
Signing time:             Sun 15 Mar 2026 02:01:13 +0000
Manifest this update:     Sun 15 Mar 2026 02:01:13 +0000
Manifest next update:     Mon 16 Mar 2026 02:01:13 +0000
Files and hashes:         1: 7eQNjnQdwqflqSKNBUSkeuNmw7g.roa (hash: KDiDs9BVR3uSy9uhf7YQ+EiuhvYGlWjEWXwSqzhl/zA=)
                          2: Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl (hash: 8vRqYYna4ZKozAGcmn3JhRYu5xcjzZU5semytq1C4FM=)
                          3: HqFdFQd3mJjjEoQudvkZxqIuHF4.roa (hash: Q9RLxw/T80VOo7/+EDUnGtAF2QXxYd4cppakgqAvZwY=)
                          4: Kp3eYJ7kSiZsDu5GffXxRznucgA.roa (hash: +v7HVtK9kA/9s9DQL3HEcP41QigGiyaFVGj2AlPGBaQ=)
                          5: _YjoM5RgGEqDATh0dggO_ptSVwA.roa (hash: EvlNg6FSVXOlKLDCdTk6bjISKtxW5D9yTRIIrx19hkM=)
                          6: h4VPt_ezR6pBjF1ytqFfJk_RH_g.roa (hash: B+fnICpLokTB+5ePuFtzYa/q5V0EfzABtX3v8OW1PdQ=)
                          7: jJUpXp-wy4eDj-VTQpn033oPZ88.roa (hash: aKtKSKKKZ+/EZ2HpVdvSi+ll3PhhXXP06+cpHPYqgcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 02:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ef:39:df:d9:6c:3a:da:dd:fb:2d:46:23:bf:af:dd:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
        Validity
            Not Before: Mar 15 02:01:13 2026 GMT
            Not After : Mar 16 02:01:13 2026 GMT
        Subject: CN=a9816a856ca07eea6b1abda229efec7b1e4ee38b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:86:90:f9:84:7e:b9:b1:fc:15:cc:02:58:58:
                    67:c6:c0:a3:0c:a2:74:d2:5e:d7:b7:58:c7:96:be:
                    3f:06:5e:b4:49:c0:c4:f4:78:60:81:d4:19:26:91:
                    ab:c6:a2:22:33:02:a5:49:b7:8e:dc:6d:f8:a6:72:
                    71:9a:26:66:77:2c:2b:8f:49:a9:43:1f:bd:74:44:
                    20:ea:6d:78:58:c1:36:a2:7d:ce:6c:1b:00:57:91:
                    ef:b5:b0:47:51:60:4d:31:f1:a2:d6:56:e5:13:80:
                    33:cc:df:34:41:61:38:94:e6:d3:1d:c6:78:53:2d:
                    1a:22:55:a0:ff:96:3c:6d:25:9e:2d:57:7d:92:cd:
                    a4:fa:04:79:cf:78:66:dc:df:65:be:fc:11:f8:eb:
                    b3:59:7a:da:6c:29:1f:b0:a2:68:33:da:8b:e7:0d:
                    aa:c2:3f:22:49:d2:8f:a9:d1:0a:b8:5e:7d:05:85:
                    7d:23:f0:3c:a0:3c:62:a2:20:55:28:d4:6a:80:78:
                    b2:3c:bf:e6:1e:80:c8:dd:14:a3:65:38:be:b3:19:
                    8d:44:70:9c:31:bc:2c:00:b9:87:49:0b:0d:39:1a:
                    dc:b0:5f:b4:9b:56:b2:d9:64:ce:d7:fb:f7:8a:c0:
                    be:35:86:99:b3:2e:c7:95:a6:4f:f3:75:d4:c2:e8:
                    2e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:81:6A:85:6C:A0:7E:EA:6B:1A:BD:A2:29:EF:EC:7B:1E:4E:E3:8B
            X509v3 Authority Key Identifier:
                keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:89:a8:1f:23:80:4a:2f:95:1c:60:30:27:01:a5:b3:a0:cb:
         8d:f9:e4:a5:54:a7:c9:62:cc:28:f0:0e:5e:eb:0f:63:24:d1:
         2e:e1:27:35:d5:a7:17:a2:b3:15:63:c9:aa:46:fb:08:fc:9c:
         a9:a3:8a:ca:4f:5e:a2:f2:54:2b:1f:60:17:ee:23:55:c5:b4:
         07:f4:65:c3:4f:6e:04:05:ce:14:b8:0c:b3:be:22:23:46:b5:
         9f:49:ff:e6:f3:91:7e:42:ef:8f:cf:dd:e8:81:ef:7e:2b:91:
         f5:5f:c8:ee:96:b6:b4:14:39:61:bb:60:a3:28:e1:45:75:0d:
         20:e0:0c:08:bf:ab:12:84:4a:71:e2:e5:34:2f:97:d5:04:a3:
         df:ed:9d:41:d1:f8:75:e5:37:ce:af:d7:39:a6:9f:2c:fa:7c:
         90:2b:b2:47:6e:e6:fd:64:8e:fd:77:6a:6c:de:21:c0:00:91:
         2b:25:8d:06:b0:53:f9:72:b6:03:0c:04:73:19:5f:8d:fe:ee:
         0c:20:d7:fe:cb:14:d0:6e:93:2b:af:1d:72:4f:6b:37:88:85:
         01:02:4e:67:15:4f:ff:c3:b9:aa:06:ac:80:3f:ea:8f:b3:38:
         f4:13:0e:01:21:be:5b:99:ff:66:23:42:6c:f5:1c:f4:6f:3e:
         6d:18:02:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 08:27:04 2026 by rpki-client