Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File:                     GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier:          z5dXCN8N1gu84Iavwjbd1mR4oXrHn/DtGw1fFapZc18=
Subject key identifier:   98:49:46:2D:0B:95:61:3C:DF:0D:1B:C2:4A:EF:EA:E5:74:9F:AB:26
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer:       /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial:       019D08C2FB6D0388A6172711A7CB19F6FE17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number:          180A
Signing time:             Fri 20 Mar 2026 01:01:28 +0000
Manifest this update:     Fri 20 Mar 2026 01:01:28 +0000
Manifest next update:     Sat 21 Mar 2026 01:01:28 +0000
Files and hashes:         1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: im8euykVE8eg++ZbyiFOXa2fPaK/tzwMNW8qpo/i3Rc=)
                          2: Z2umXdj8rXKQHGCd4mt2FC6IjeM.roa (hash: hNS38512ED5SaAduPnnfGixmvuVAAKqHK4KB5eSeNCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Mar 2026 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:08:c2:fb:6d:03:88:a6:17:27:11:a7:cb:19:f6:fe:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
        Validity
            Not Before: Mar 20 01:01:28 2026 GMT
            Not After : Mar 21 01:01:28 2026 GMT
        Subject: CN=9849462d0b95613cdf0d1bc24aefeae5749fab26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b4:28:3c:6f:b7:e3:c8:2c:d6:a4:2a:de:09:
                    0b:98:60:33:ef:b6:19:fd:db:5b:8d:67:c6:4c:5b:
                    92:a1:7f:9c:26:cb:b3:88:5b:5c:8b:59:ae:3a:06:
                    bf:66:12:f7:1d:6e:f6:68:8c:5f:52:a7:cd:0e:11:
                    f4:e4:df:ef:08:29:9c:ff:ca:d5:d2:37:1e:e1:0e:
                    c4:c8:72:8d:6f:82:f3:03:10:55:83:53:34:68:b5:
                    f2:50:52:08:3f:5e:f1:97:eb:45:1c:09:49:1c:32:
                    2f:24:45:70:95:b8:03:f0:91:05:c9:5e:a0:97:cd:
                    06:b9:42:49:6f:76:55:b5:ac:6b:14:80:8e:aa:a3:
                    94:d0:3d:36:04:8a:72:6e:1c:9c:2b:e0:72:44:57:
                    d8:b7:ee:6b:32:36:19:66:22:d9:86:de:73:34:52:
                    6d:c2:34:4b:4b:cc:52:43:8e:cb:aa:16:c4:5f:41:
                    f0:66:53:b4:6e:16:cc:4b:c3:0e:65:e7:36:e2:51:
                    ee:37:31:7d:f9:e9:1f:ab:62:f5:38:70:32:ca:79:
                    e8:92:05:bc:d2:1c:4a:f5:c8:e5:12:f9:c7:e0:24:
                    10:9f:06:7a:b1:99:f2:f6:fb:4d:2b:8a:92:4d:f5:
                    ea:47:0b:ec:4e:59:93:b0:c9:e5:24:06:2b:aa:95:
                    45:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:49:46:2D:0B:95:61:3C:DF:0D:1B:C2:4A:EF:EA:E5:74:9F:AB:26
            X509v3 Authority Key Identifier:
                keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:dd:6b:8d:11:6e:43:a7:66:d4:0d:6f:c7:4e:d1:12:1f:a1:
         22:76:0e:1d:b0:53:70:3f:48:e9:4b:83:66:10:78:e0:b4:3a:
         97:8a:53:a4:c4:ec:86:ad:cf:24:cf:69:d4:37:a8:24:55:35:
         20:5d:db:f2:14:f6:8c:d7:bd:30:2c:13:24:04:54:59:7b:07:
         1a:f8:db:e7:21:5c:17:d1:77:0c:41:07:b4:d1:28:55:8b:10:
         de:f9:22:96:17:ab:88:3e:13:37:7f:c7:d5:20:bd:69:09:b3:
         45:50:63:3c:7d:3f:ba:ad:a4:bf:43:8a:60:ab:6a:5a:3c:c6:
         e2:f8:6e:34:ad:b9:00:d7:e8:85:02:d3:3b:80:ae:2d:9d:48:
         8b:5c:82:05:0d:b3:d0:b1:b1:e0:e3:35:14:a7:b7:c2:12:45:
         d9:06:76:7f:14:11:50:3b:83:8d:01:4e:4c:a4:a6:bd:51:4c:
         a5:15:5c:1e:1b:fd:46:8d:d8:44:cc:12:97:e2:5f:f1:bc:1a:
         7c:61:ff:d3:14:8a:78:c1:18:ce:2e:ae:05:d2:5a:31:d2:a8:
         be:ee:ff:6d:bd:21:b4:f2:67:e7:4b:f7:bc:34:6b:1d:c8:9f:
         7a:ad:bd:c2:cf:07:82:2c:2c:43:3e:b1:c0:ca:69:9a:42:d2:
         b6:0b:1c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 04:08:21 2026 by rpki-client