Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
File:                     GGDjbiWx26EXgHXIA8KaBEzs_eE.mft (raw, json)
Hash identifier:          H5VWbG6U4oVwC4Exkky0L9BD1Pvh0ugcWV3YgGUviwk=
Subject key identifier:   59:EC:93:7C:BC:AA:24:5D:F4:00:32:F6:DB:8D:26:42:46:65:31:21
Authority key identifier: 18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1
Certificate issuer:       /CN=1860e36e25b1dba1178075c803c29a044cecfde1
Certificate serial:       019D389C203A29A2429FAF36236A1F9DFC12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
Manifest number:          0BB4
Signing time:             Sun 29 Mar 2026 08:00:48 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:48 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:48 +0000
Files and hashes:         1: GGDjbiWx26EXgHXIA8KaBEzs_eE.crl (hash: 79zfgidvTDI5e8UY6/n78CbFzhsWFZgb5zZsViiS8aM=)
                          2: HMpfD8yWZ0j1ouvG1EDM2ZSSE8c.roa (hash: SGGQvvIcUh55SsmT9zcE0INbCSKqRJfWxR5dRHBgMA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:20:3a:29:a2:42:9f:af:36:23:6a:1f:9d:fc:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1860e36e25b1dba1178075c803c29a044cecfde1
        Validity
            Not Before: Mar 29 08:00:48 2026 GMT
            Not After : Mar 30 08:00:48 2026 GMT
        Subject: CN=59ec937cbcaa245df40032f6db8d264246653121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4f:32:fa:d4:36:c0:e0:7a:f0:f5:ab:ee:cd:
                    ed:b0:aa:2a:bf:27:f2:f3:76:13:15:d1:bb:d4:5c:
                    cb:cf:e6:6f:4c:b0:49:15:0c:d3:ec:d8:a7:4e:52:
                    58:1a:d5:c1:93:7b:9f:47:ef:11:66:b5:fc:04:27:
                    e8:86:72:19:df:12:ef:3e:f3:ae:2c:33:10:6e:3d:
                    84:10:94:e5:e0:40:8c:d0:bb:78:d5:16:77:2d:f2:
                    56:0a:09:0b:58:a9:8a:db:91:bd:54:68:3f:97:98:
                    9a:06:43:9c:ae:dc:60:20:cd:ac:62:a7:12:bc:cf:
                    b2:bf:66:8f:98:5b:e5:c5:f8:8d:8d:49:32:1c:67:
                    8e:b8:78:7c:49:1a:f3:a5:f9:dd:20:ad:dc:1a:11:
                    c1:42:e8:08:bb:a2:46:02:f1:21:99:36:b7:9f:5e:
                    c1:86:fb:59:a8:f3:67:ce:0a:49:af:17:29:e1:76:
                    c0:5f:8b:97:57:7a:89:90:b9:a0:94:c3:30:01:97:
                    c7:39:b8:ce:7e:79:1d:88:44:1b:cd:57:91:58:cb:
                    4b:06:c8:e4:9e:d6:5c:7a:88:ed:94:e5:d9:6a:e3:
                    be:1f:c1:f6:52:a9:da:af:71:dd:a8:a1:42:53:3a:
                    64:bc:27:f5:eb:eb:8e:68:2e:b3:e6:b0:8a:11:e1:
                    74:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EC:93:7C:BC:AA:24:5D:F4:00:32:F6:DB:8D:26:42:46:65:31:21
            X509v3 Authority Key Identifier:
                keyid:18:60:E3:6E:25:B1:DB:A1:17:80:75:C8:03:C2:9A:04:4C:EC:FD:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGDjbiWx26EXgHXIA8KaBEzs_eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0566be-f832-4e74-8966-f26adff40cc1/1/GGDjbiWx26EXgHXIA8KaBEzs_eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:31:0b:61:4b:18:ad:73:80:46:0c:dc:e7:21:27:64:70:2a:
         56:28:4c:6f:08:a9:25:df:d9:d5:8d:fc:f4:6e:f3:65:ba:ae:
         b9:2a:dd:45:ff:bb:f2:45:06:27:6c:09:d8:89:d8:7a:29:d7:
         90:2a:f6:2f:77:8d:6c:f8:08:32:b2:85:96:21:a5:4c:74:c2:
         b0:79:f9:2b:21:eb:fe:ac:6b:d0:8a:2c:5f:e2:81:d2:71:37:
         5b:22:ff:a6:c5:c8:dd:fd:ff:5e:e9:ae:50:53:6d:d8:6a:84:
         cf:e4:29:4e:a7:eb:fb:a8:ac:18:fe:77:3e:86:a8:69:31:a4:
         2a:d8:44:94:c7:1c:ad:f6:26:15:51:9e:e5:e8:69:47:8e:17:
         77:72:81:43:75:1c:99:9a:05:34:20:e1:22:e6:b7:4a:21:06:
         79:34:95:ae:5a:8f:0b:a6:e1:e2:d3:05:55:04:bb:b5:6c:ec:
         19:5e:b3:03:da:1b:e9:f8:6d:eb:76:63:a5:37:6b:8e:1a:ba:
         1f:07:9c:7c:72:82:8d:5e:81:5b:81:8f:fb:fe:21:5f:8b:fb:
         3a:8e:5a:30:fc:34:4e:73:f7:2a:87:0d:6c:37:a4:43:09:c4:
         db:59:78:ef:8c:05:93:ff:e7:d4:dc:c0:9d:63:b3:4f:fc:42:
         fc:7c:1e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:55:23 2026 by rpki-client