Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
File:                     GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft (raw, json)
Hash identifier:          ouKrCYHSi8RnS3ybcKlkWXtxmXl4LK6Bmm9WUNbvVm4=
Subject key identifier:   5C:16:4B:45:B1:42:96:B4:57:25:21:C6:30:47:C1:95:1D:77:BD:50
Authority key identifier: 1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2
Certificate issuer:       /CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2
Certificate serial:       019D3752AA23536FD04C3D61F1DB452A4851
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
Manifest number:          0872
Signing time:             Sun 29 Mar 2026 02:00:57 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:57 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:57 +0000
Files and hashes:         1: GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl (hash: O3maaRCHrSnL62rBOcMQ6YDaCbakd02CWwkQW9nQCfI=)
                          2: PRWWZTPfSbsdOcFDzXqI07gWKnM.roa (hash: o3ezVQcMSQ90jhxByB5K6ib9QZEeV8XrQMqvctluruM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:aa:23:53:6f:d0:4c:3d:61:f1:db:45:2a:48:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2
        Validity
            Not Before: Mar 29 02:00:57 2026 GMT
            Not After : Mar 30 02:00:57 2026 GMT
        Subject: CN=5c164b45b14296b4572521c63047c1951d77bd50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3c:0a:f1:01:9f:c5:a9:d1:ae:b5:67:09:87:
                    a4:1e:bd:ea:3c:f6:ea:2b:f5:2d:b7:20:03:a5:17:
                    35:ef:8d:64:79:0f:86:c2:4f:48:5e:39:b7:7b:c4:
                    14:92:25:e5:5b:ff:d2:61:49:87:90:18:0f:41:a1:
                    16:aa:89:96:0c:0d:12:42:cb:c6:c8:86:4d:f4:d3:
                    4c:62:59:a7:4f:0f:8a:5d:91:ca:fb:64:b7:4f:29:
                    35:4b:88:93:73:6f:b3:f7:e0:1c:77:e4:08:aa:02:
                    e2:f2:72:6e:df:7b:91:e8:81:0c:56:a2:32:eb:4b:
                    9d:66:ea:3d:d2:52:c4:66:06:98:c9:bc:06:64:b3:
                    ea:53:89:c5:8a:62:c4:1b:65:0b:9e:f2:0a:8d:24:
                    ae:e0:fa:6b:e5:8f:9d:41:f3:09:f7:32:ec:42:86:
                    66:ca:db:d5:d3:30:fc:5d:da:59:64:76:8a:ee:d2:
                    4d:1b:75:8e:ed:c3:02:c8:04:0f:9f:3b:a0:f7:5e:
                    b6:1c:72:40:86:bd:33:07:51:b0:ee:96:de:43:6b:
                    dd:6e:80:bf:66:02:89:77:b1:0c:2e:1a:28:87:84:
                    21:15:2c:ad:9e:5b:6a:2f:dc:93:33:73:70:83:07:
                    60:64:66:0f:0e:98:9a:44:2f:5e:53:c4:74:7d:a4:
                    fb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:16:4B:45:B1:42:96:B4:57:25:21:C6:30:47:C1:95:1D:77:BD:50
            X509v3 Authority Key Identifier:
                keyid:1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:62:aa:9b:32:f9:36:67:41:ed:bf:95:a0:0c:35:a3:a2:e6:
         88:c2:59:1b:b9:fe:6f:e9:7a:95:ab:4d:19:d5:48:f3:c3:2d:
         e8:65:3f:f9:d8:21:29:cd:54:9b:45:8b:63:c7:98:d7:01:21:
         25:3b:8c:f5:2d:96:72:a4:eb:0e:84:ad:46:07:d2:73:1d:bd:
         49:b7:ac:3a:67:57:43:ba:34:96:25:c3:c1:85:16:4e:da:81:
         8a:43:16:54:63:19:f3:e5:e6:0e:c9:63:44:a3:1a:a9:9e:58:
         fb:c6:9b:34:dd:ce:16:3c:53:6a:a5:a3:65:23:48:4e:3c:9c:
         b7:84:86:b5:1d:93:fe:8a:f6:34:31:c6:2c:ef:51:ec:5f:89:
         94:64:2c:c7:fa:71:43:ec:ef:c0:7e:33:e4:a0:e3:77:fd:40:
         27:16:f7:be:62:44:fd:15:77:47:f1:b1:02:34:b4:44:ce:3b:
         96:41:5c:1b:a6:19:4a:28:53:bd:eb:c9:22:a6:29:17:05:a9:
         04:e2:3a:39:2b:03:1c:d7:cb:0a:c2:76:5a:a8:1b:37:85:3c:
         c2:64:f5:aa:cb:a4:09:4d:e9:c4:30:37:09:47:58:2e:c5:b4:
         d5:ac:88:12:d4:6a:b2:0a:b2:06:07:27:83:b8:5f:4f:d6:03:
         37:59:e5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:19 2026 by rpki-client