Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
File:                     GfGp3RJvNyN84gD7hhb_k3vKlmw.mft (raw, json)
Hash identifier:          UK9MEXKhUPH+BbssjM7rhJKAwF87TSbkvEBvmSjirgY=
Subject key identifier:   4A:04:1D:A5:DE:9E:BC:5E:4D:40:8B:27:46:3E:98:4B:6C:29:55:F7
Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
Certificate issuer:       /CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Certificate serial:       019CE523F8F86777DCBBC5D9BEA278BE992F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
Manifest number:          1862
Signing time:             Fri 13 Mar 2026 03:01:05 +0000
Manifest this update:     Fri 13 Mar 2026 03:01:05 +0000
Manifest next update:     Sat 14 Mar 2026 03:01:05 +0000
Files and hashes:         1: 7owqXESGy_RXh39I2zXYrOmIRmY.roa (hash: uD/kXqY4+DVU4PEvK0O92LooxshLndRFHktHnH9fzjs=)
                          2: FhTqn0nI2AOefAde-zGtbwEbRRY.roa (hash: pvmj7N2aWwyL4DhPFHc9oWpCfcCMtoks7zjIuX/XA3M=)
                          3: GfGp3RJvNyN84gD7hhb_k3vKlmw.crl (hash: sGPgYszrL7OmNn9cY13bDi6SRNhdWET4mjXjWYVQ+G4=)
                          4: IjVQWwZv9EJg_zhL2dYrs3DlkR4.roa (hash: 9Z9gCW1kabV4H10WypJ+CcaUnOFek5gLKpjj5o/RjC0=)
                          5: nnLZ_anjPSOLRayVOL-RzewgHwI.roa (hash: 2WaAIYb59kGhe6tvXHb5ioUayH6vLhFoDq8NRlocKJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:23:f8:f8:67:77:dc:bb:c5:d9:be:a2:78:be:99:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c
        Validity
            Not Before: Mar 13 03:01:05 2026 GMT
            Not After : Mar 14 03:01:05 2026 GMT
        Subject: CN=4a041da5de9ebc5e4d408b27463e984b6c2955f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b7:23:71:4c:78:db:88:44:b5:b6:dc:5a:e3:
                    6f:10:cc:0f:10:c5:44:20:2e:8c:46:55:f2:8c:d4:
                    97:da:2e:57:6a:50:ba:fa:8a:e7:f7:04:b6:c7:f8:
                    21:07:4c:e0:a5:e8:4c:6d:15:4c:f0:ef:25:c1:19:
                    fc:fa:cf:6d:89:bc:36:9b:6a:70:92:43:b3:34:64:
                    bd:33:20:2a:10:1c:e9:90:b0:b9:8d:96:7b:6c:76:
                    86:83:97:a1:d4:bb:a9:9e:ce:d7:9d:53:ee:c4:9b:
                    5a:96:ca:cc:f6:af:e3:65:a9:b2:19:b3:6c:95:4c:
                    34:3b:70:bc:a2:28:e7:08:a1:e6:fc:60:7e:80:7c:
                    8f:98:16:2c:e7:76:f4:d3:3e:1a:a1:68:64:12:67:
                    df:d7:48:f1:3b:38:20:fd:db:2d:0a:3a:db:85:b1:
                    42:02:2d:06:8a:ac:27:8f:51:ae:5c:8e:bd:d0:b3:
                    31:a5:c9:37:c6:fa:bc:1e:fd:14:bd:f0:38:d1:ca:
                    22:97:84:f8:06:eb:a6:c0:80:90:7d:df:46:98:64:
                    0c:bb:87:63:3b:e4:a1:17:dd:5e:37:9d:2a:d2:5e:
                    d2:d9:9d:b6:06:61:9a:1e:cd:79:79:67:17:04:21:
                    07:47:47:01:af:9a:d7:c0:1a:91:fc:cd:d6:14:ce:
                    f9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:04:1D:A5:DE:9E:BC:5E:4D:40:8B:27:46:3E:98:4B:6C:29:55:F7
            X509v3 Authority Key Identifier:
                keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:b9:a5:40:ca:c1:c1:9d:dc:18:59:ad:53:ba:59:70:84:fa:
         23:0c:42:4b:03:24:8e:7e:84:bc:0b:0a:c1:4d:04:0d:27:1a:
         a2:fe:ce:5c:e4:d7:08:64:39:09:20:eb:ba:24:f8:81:8e:f3:
         75:98:68:b0:78:e9:8b:0c:12:a2:5b:6b:57:59:60:71:3d:40:
         46:ca:29:29:76:3e:9a:bd:c2:1d:3f:30:c3:9c:30:94:e8:75:
         27:cd:c6:5b:f4:d6:88:65:87:f6:40:42:8a:8b:9f:8b:47:68:
         ef:af:a1:f2:16:a2:b5:7a:a1:71:8a:ba:4e:04:c7:3e:3a:6a:
         4d:3c:f1:0a:70:f3:88:2a:22:fd:fb:55:6f:41:df:08:14:ce:
         42:7a:7a:28:ce:8c:1f:b4:94:bc:0c:c3:ce:50:1b:f1:32:56:
         77:c0:de:15:52:d3:78:bd:1a:57:02:e3:f8:30:50:a1:0c:d5:
         88:69:da:35:fe:9d:c4:e9:09:e2:14:00:d6:15:54:c5:d6:ae:
         f8:47:29:b3:51:45:51:d0:01:85:6f:95:d2:56:ca:cd:16:ec:
         10:ed:23:4c:75:d3:92:97:c5:4a:5b:e4:de:64:f2:11:a9:99:
         c0:42:ba:1b:30:40:39:61:8b:87:e5:c6:26:13:5b:e7:d4:9a:
         56:40:65:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlI/j4Z3fcu8XZvqJ4vpkvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZjFhOWRkMTI2ZjM3MjM3Y2UyMDBmYjg2MTZmZjkzN2Jj
YTk2NmMwHhcNMjYwMzEzMDMwMTA1WhcNMjYwMzE0MDMwMTA1WjAzMTEwLwYDVQQD
Eyg0YTA0MWRhNWRlOWViYzVlNGQ0MDhiMjc0NjNlOTg0YjZjMjk1NWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbcjcUx424hEtbbcWuNvEMwPEMVE
IC6MRlXyjNSX2i5XalC6+orn9wS2x/ghB0zgpehMbRVM8O8lwRn8+s9tibw2m2pw
kkOzNGS9MyAqEBzpkLC5jZZ7bHaGg5eh1Lupns7XnVPuxJtalsrM9q/jZamyGbNs
lUw0O3C8oijnCKHm/GB+gHyPmBYs53b00z4aoWhkEmff10jxOzgg/dstCjrbhbFC
Ai0Giqwnj1GuXI690LMxpck3xvq8Hv0UvfA40coil4T4BuumwICQfd9GmGQMu4dj
O+ShF91eN50q0l7S2Z22BmGaHs15eWcXBCEHR0cBr5rXwBqR/M3WFM75owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoEHaXenrxeTUCLJ0Y+mEtsKVX3MB8GA1UdIwQY
MBaAFBnxqd0SbzcjfOIA+4YW/5N7ypZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE2M2QtMTczMC00ZDg4LWFiMzgt
M2ZkMzA5ODhmNjc3LzEvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9mOGE2M2QtMTczMC00ZDg4LWFiMzgtM2ZkMzA5ODhmNjc3
LzEvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULmlQMrB
wZ3cGFmtU7pZcIT6IwxCSwMkjn6EvAsKwU0EDScaov7OXOTXCGQ5CSDruiT4gY7z
dZhosHjpiwwSoltrV1lgcT1ARsopKXY+mr3CHT8ww5wwlOh1J83GW/TWiGWH9kBC
ioufi0do76+h8haitXqhcYq6TgTHPjpqTTzxCnDziCoi/ftVb0HfCBTOQnp6KM6M
H7SUvAzDzlAb8TJWd8DeFVLTeL0aVwLj+DBQoQzViGnaNf6dxOkJ4hQA1hVUxdau
+Ecps1FFUdABhW+V0lbKzRbsEO0jTHXTkpfFSlvk3mTyEamZwEK6GzBAOWGLh+XG
JhNb59SaVkBlMg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 07:45:36 2026 by rpki-client