Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
File:                     gDCVaDspR93Unu6sDb2eqVSuoUQ.mft (raw, json)
Hash identifier:          9uUnL0WlwlnlPUo4V5nYmf2kz1R11p2rsP1czxVnqTs=
Subject key identifier:   48:AA:26:1B:CB:A5:62:FD:19:23:16:4B:D8:FB:EC:42:A3:DF:D5:5D
Authority key identifier: 80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44
Certificate issuer:       /CN=803095683b2947ddd49eeeac0dbd9ea954aea144
Certificate serial:       019D221549E730BDAF034E16652306B0F0B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
Manifest number:          079A
Signing time:             Tue 24 Mar 2026 23:01:53 +0000
Manifest this update:     Tue 24 Mar 2026 23:01:53 +0000
Manifest next update:     Wed 25 Mar 2026 23:01:53 +0000
Files and hashes:         1: gDCVaDspR93Unu6sDb2eqVSuoUQ.crl (hash: NA5lMDm9fP5x2KhkDkcOJSolv8lAeHtAFRQYMdTMjYU=)
                          2: vH_sEfDU81k82bCyQ3wMyP5PVWE.roa (hash: FwaLONRBNXLNCaY37uk5cOKRRSKJajQin0uHoBoCrh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 25 Mar 2026 23:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:22:15:49:e7:30:bd:af:03:4e:16:65:23:06:b0:f0:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=803095683b2947ddd49eeeac0dbd9ea954aea144
        Validity
            Not Before: Mar 24 23:01:53 2026 GMT
            Not After : Mar 25 23:01:53 2026 GMT
        Subject: CN=48aa261bcba562fd1923164bd8fbec42a3dfd55d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:41:9f:98:a5:3c:9a:4c:93:e8:ee:2b:f3:b9:
                    3f:91:d5:75:4c:87:88:91:57:26:b2:25:12:87:88:
                    e5:aa:1d:26:3e:1b:23:0b:fd:7c:20:a5:cc:32:47:
                    00:94:c7:ca:d0:5c:1d:69:c1:8d:b1:e6:bb:2f:53:
                    d3:54:51:38:7c:99:aa:77:15:bf:a3:0b:bb:fe:88:
                    a8:2f:d6:54:c0:42:f0:f9:da:01:c7:b9:6e:0c:4b:
                    44:fa:a7:c0:b3:22:01:25:e4:ae:1e:96:c2:3f:58:
                    d2:f0:ab:ae:01:23:7d:63:3a:3e:10:98:c4:b7:38:
                    df:c4:33:23:24:2e:f1:f6:1f:70:1a:fc:cd:74:d2:
                    a5:ac:e0:79:fc:58:dc:41:15:f2:a9:cc:0b:45:46:
                    b2:88:97:98:9c:07:3c:a5:46:50:aa:72:5e:f0:e2:
                    a6:50:d0:f9:24:ce:49:21:68:4d:95:d1:af:ce:87:
                    de:b3:57:80:9b:37:6c:ec:ec:cd:a6:01:cc:d1:dd:
                    1a:d1:c3:67:87:7f:44:31:62:0b:f6:8f:83:97:00:
                    82:96:69:74:b2:b9:2e:cf:20:52:6d:b5:49:14:90:
                    9b:9d:af:c0:37:d9:79:ee:cb:b8:43:5e:69:91:1d:
                    d8:ae:59:84:21:82:cb:6e:61:95:3e:20:cb:c3:fa:
                    08:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AA:26:1B:CB:A5:62:FD:19:23:16:4B:D8:FB:EC:42:A3:DF:D5:5D
            X509v3 Authority Key Identifier:
                keyid:80:30:95:68:3B:29:47:DD:D4:9E:EE:AC:0D:BD:9E:A9:54:AE:A1:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDCVaDspR93Unu6sDb2eqVSuoUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/399269-5e14-4d5e-a1bc-6bdd3478d10c/1/gDCVaDspR93Unu6sDb2eqVSuoUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ad:6e:fe:57:4c:c6:46:84:a2:de:5b:47:9a:a4:1d:ca:da:
         12:0f:58:f4:45:03:53:e9:fc:ee:31:b3:5c:e3:a4:10:29:d1:
         c8:c4:79:da:ed:22:95:14:aa:c5:0e:55:d0:bd:97:23:de:b0:
         5c:55:f5:4d:d7:44:b5:55:dc:ac:20:bd:9f:fc:24:4c:fd:20:
         1c:1d:a1:d3:72:f3:d0:8a:5c:33:ef:bb:b4:69:28:86:5f:f2:
         74:d8:3e:b7:03:70:a5:43:78:60:a9:4c:b1:85:6b:dd:b8:42:
         35:3f:6a:a7:28:6a:4a:ff:2d:37:51:ec:52:59:67:38:a0:bd:
         66:1d:48:fe:f2:55:15:13:15:99:66:bb:e5:cb:d0:ce:1a:ca:
         6d:6a:52:94:58:81:80:e8:b3:28:8d:ec:14:0c:1b:99:3d:30:
         0e:c0:d2:7e:21:a3:4f:d2:00:4f:a6:3e:d3:8a:88:1a:82:d6:
         b8:43:e1:e7:2e:11:f3:a5:e4:fc:de:3e:ab:d2:2f:dc:cd:95:
         6b:98:46:2d:79:0b:e8:77:8d:70:ae:a7:1c:c0:8b:3f:b9:74:
         56:05:81:f5:dd:36:e1:6d:7b:60:49:d0:6d:69:a2:a4:9d:40:
         59:44:56:cb:66:11:61:95:44:18:9d:29:2b:a8:e5:09:aa:d6:
         51:23:b8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 09:45:05 2026 by rpki-client