Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
File:                     GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft (raw, json)
Hash identifier:          N45Z+5ZTASJpu+rIko/GHuU43rDmLeC/GOBOqIrW7AQ=
Subject key identifier:   6D:CE:39:E4:4D:57:2D:02:06:4C:80:98:30:AC:AC:A9:59:D6:AC:E8
Authority key identifier: 19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74
Certificate issuer:       /CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
Certificate serial:       019D37BFF5AFD2653EE4BE75BCB5B948F516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
Manifest number:          0D3A
Signing time:             Sun 29 Mar 2026 04:00:20 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:20 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:20 +0000
Files and hashes:         1: GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl (hash: Fv7YKD1mOVv/CNF+uMaPobdruR2AlNwq5lZqdth+SGY=)
                          2: bsIvknt5fmmAnWdhXsBu-Ue2-v0.roa (hash: n3XIzhJt5VMAiTGqI1g3v5Vdsn00DFS2DY6O4jjQGxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:bf:f5:af:d2:65:3e:e4:be:75:bc:b5:b9:48:f5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
        Validity
            Not Before: Mar 29 04:00:20 2026 GMT
            Not After : Mar 30 04:00:20 2026 GMT
        Subject: CN=6dce39e44d572d02064c809830acaca959d6ace8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b1:ed:c1:31:4c:ac:2f:09:9c:a0:74:80:45:
                    da:5c:35:cd:6c:f0:0d:3c:1b:8a:a7:6a:34:f9:8f:
                    ee:bd:e6:bb:f0:cb:9b:01:dd:0b:5e:74:af:1a:b8:
                    b6:a3:0b:e8:9e:52:b9:23:b4:d3:ef:61:fe:81:c6:
                    51:85:12:81:3a:fe:1e:54:ba:a3:25:dc:97:5c:5a:
                    70:5a:2e:37:ce:57:94:a9:56:30:2a:d0:fe:07:f2:
                    71:52:9d:59:fb:5d:c9:7c:2a:b6:26:28:6d:5f:a8:
                    ea:43:cd:80:31:80:13:d1:4c:6c:51:8d:29:15:9a:
                    fc:c8:88:c4:cc:0a:2d:e9:64:06:06:cf:d7:08:1d:
                    67:d3:67:97:c5:71:34:ee:8d:31:55:09:c9:8e:99:
                    1b:81:c4:6d:52:b6:af:66:e0:3b:6d:2e:44:dd:e9:
                    cb:c7:5f:13:5c:6b:45:31:2b:3d:b7:d5:0b:ab:02:
                    7e:58:c7:5f:9d:cc:b4:c5:fd:4b:02:d5:f7:21:60:
                    4a:bd:db:28:25:a1:a0:16:04:c2:f8:63:36:b9:3d:
                    d8:ec:3e:2f:7a:56:54:5a:ec:5a:95:c6:a7:e3:72:
                    b4:ec:0a:e7:02:c1:6c:18:25:c7:a9:7b:37:12:ee:
                    ff:09:39:ef:7f:16:cc:fb:11:c7:26:2d:78:80:78:
                    ec:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CE:39:E4:4D:57:2D:02:06:4C:80:98:30:AC:AC:A9:59:D6:AC:E8
            X509v3 Authority Key Identifier:
                keyid:19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e4:d6:8c:46:91:e0:f3:79:57:d1:db:9a:46:c7:8d:b7:dd:
         8e:2c:28:98:8d:da:b5:e2:9b:13:7e:0f:c8:e4:6f:41:76:8f:
         2c:f6:d5:31:06:5f:f0:e8:55:11:8b:4e:a7:15:89:dd:0c:4b:
         41:70:5f:c1:7f:80:61:3d:25:5e:7c:b2:f7:b3:a2:e4:a8:98:
         0c:a7:b4:1c:10:31:49:45:31:71:84:05:09:f7:97:86:d5:3f:
         fd:18:3a:57:12:d6:c6:2b:49:e7:44:71:b3:4c:09:6f:b8:a3:
         0a:fb:4e:4c:ea:cc:26:02:24:a2:46:3a:43:be:49:f5:44:09:
         d3:5b:73:d5:92:36:e7:f1:22:05:70:b9:22:db:b7:40:9f:dd:
         e4:ce:3c:83:27:88:9f:ab:18:cf:75:19:31:74:92:4b:a2:45:
         4c:b6:ff:b6:8a:70:d4:ef:b8:b6:af:30:d4:f1:d9:bd:55:ee:
         74:17:38:60:0b:15:b3:6e:15:7f:45:98:07:33:7e:86:c8:eb:
         ee:f3:29:df:56:ac:dd:9c:08:44:23:5a:3f:aa:07:89:31:22:
         5d:83:7d:e5:07:da:b8:36:46:dc:33:ad:ae:6f:48:8a:de:1b:
         2f:89:f4:94:07:2c:a2:7c:25:2a:14:fb:c6:33:ee:aa:4e:a7:
         88:33:55:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03v/Wv0mU+5L51vLW5SPUWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YzFiYjNmYjEzNmFiZjQwN2EwYTUxYTRhMDc2NTE3NGZm
ZGY0NzQwHhcNMjYwMzI5MDQwMDIwWhcNMjYwMzMwMDQwMDIwWjAzMTEwLwYDVQQD
Eyg2ZGNlMzllNDRkNTcyZDAyMDY0YzgwOTgzMGFjYWNhOTU5ZDZhY2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7HtwTFMrC8JnKB0gEXaXDXNbPAN
PBuKp2o0+Y/uvea78MubAd0LXnSvGri2owvonlK5I7TT72H+gcZRhRKBOv4eVLqj
JdyXXFpwWi43zleUqVYwKtD+B/JxUp1Z+13JfCq2JihtX6jqQ82AMYAT0UxsUY0p
FZr8yIjEzAot6WQGBs/XCB1n02eXxXE07o0xVQnJjpkbgcRtUravZuA7bS5E3enL
x18TXGtFMSs9t9ULqwJ+WMdfncy0xf1LAtX3IWBKvdsoJaGgFgTC+GM2uT3Y7D4v
elZUWuxalcan43K07ArnAsFsGCXHqXs3Eu7/CTnvfxbM+xHHJi14gHjsJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3OOeRNVy0CBkyAmDCsrKlZ1qzoMB8GA1UdIwQY
MBaAFBnBuz+xNqv0B6ClGkoHZRdP/fR0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2NHN1A3RTJxX1FIb0tVYVNnZGxGMF85OUhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iNTgyYzEtZjljMi00YzU4LWEyMDEt
ZGFkMThkNWIyYTNjLzEvR2NHN1A3RTJxX1FIb0tVYVNnZGxGMF85OUhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9iNTgyYzEtZjljMi00YzU4LWEyMDEtZGFkMThkNWIyYTNj
LzEvR2NHN1A3RTJxX1FIb0tVYVNnZGxGMF85OUhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOTWjEaR
4PN5V9HbmkbHjbfdjiwomI3ateKbE34PyORvQXaPLPbVMQZf8OhVEYtOpxWJ3QxL
QXBfwX+AYT0lXnyy97Oi5KiYDKe0HBAxSUUxcYQFCfeXhtU//Rg6VxLWxitJ50Rx
s0wJb7ijCvtOTOrMJgIkokY6Q75J9UQJ01tz1ZI25/EiBXC5Itu3QJ/d5M48gyeI
n6sYz3UZMXSSS6JFTLb/topw1O+4tq8w1PHZvVXudBc4YAsVs24Vf0WYBzN+hsjr
7vMp31as3ZwIRCNaP6oHiTEiXYN95QfauDZG3DOtrm9Iit4bL4n0lAcsonwlKhT7
xjPuqk6niDNVXg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:24 2026 by rpki-client