Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
File:                     GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft (raw, json)
Hash identifier:          3DQ5B2Hkcuye4aOX1Q4SJRHkmUE5Dq8uosdP9zoT1EA=
Subject key identifier:   09:1F:8F:1E:8A:F5:E4:91:2D:21:F4:1A:FB:E4:CA:D7:11:58:32:AC
Authority key identifier: 18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
Certificate issuer:       /CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Certificate serial:       019D389BEAAC82F04AA383D9EB79B4115B6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 08:00:35 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:35 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:35 +0000
Files and hashes:         1: BW_NoLK8bvq98NW3uQCVBILUjdc.roa (hash: Yv7HzXY6brkJdNWi4vkWfsAkacdbGVR0g6RZPDb2Wbo=)
                          2: GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl (hash: 5qlQTH+7pJdjmzUNAy72vbm7VT17Fj0Ye4kA3s9vUSA=)
                          3: UvhzMGyTfEF1hpgc3K2nc1IVHoI.roa (hash: cbsC5/gFhJ1QzmTO5tqc9Od4dJZpIwpWSVpRJbM9KoY=)
                          4: vQDrdsVKUyg3AdinxsQg6qe1Fs8.roa (hash: FsUD/qILrBqWkPuIKdZisJEsoMgHswVeHLUrDTTRgbo=)
                          5: wIewyVcuV4glOwAciJdc6xtEcA0.roa (hash: P+orYhZY32r0vN37BZW90hJsNwEYMuvTdq9aVkdcNxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:ea:ac:82:f0:4a:a3:83:d9:eb:79:b4:11:5b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
        Validity
            Not Before: Mar 29 08:00:35 2026 GMT
            Not After : Mar 30 08:00:35 2026 GMT
        Subject: CN=091f8f1e8af5e4912d21f41afbe4cad7115832ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:72:96:6a:b3:5c:62:81:55:1a:d4:b3:41:
                    aa:f1:af:2e:7d:a9:56:78:82:dc:49:11:07:f6:14:
                    c2:09:63:03:40:5d:4a:4d:0f:dc:bb:a3:c4:8f:a8:
                    65:6f:00:ec:f2:cf:1e:0e:d8:8a:d7:fc:6e:aa:4f:
                    b8:95:cb:5c:6d:e0:c3:c7:f3:3e:90:78:20:2a:3d:
                    36:5f:1e:87:67:be:0a:8a:d6:5b:6b:a0:3e:af:85:
                    4b:01:fe:f8:3c:b8:51:12:a0:74:39:96:9f:ae:a5:
                    ac:ba:a4:05:27:9b:1b:d3:56:0a:ea:40:c5:c9:8a:
                    7b:1c:3c:89:e1:1d:aa:66:45:60:73:bd:54:03:07:
                    4b:6d:c7:f1:40:53:9b:32:77:d5:69:79:b3:30:02:
                    99:95:db:51:b7:b7:e9:ad:44:7e:b8:b7:a1:80:f9:
                    93:f0:04:b2:88:8e:11:a5:8c:ec:63:0f:1b:64:40:
                    1f:dd:3c:35:eb:a4:68:6f:c5:7a:8a:d2:e6:d2:ff:
                    29:18:75:2c:ff:09:d9:f3:4d:81:6a:6b:24:1e:24:
                    d1:af:35:92:7b:4b:9f:83:91:db:47:7f:64:dd:eb:
                    28:45:02:c6:17:78:26:20:9b:6c:b7:a9:68:ad:f5:
                    b4:81:a6:32:28:07:bf:48:54:4a:5c:5c:87:3f:03:
                    e9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1F:8F:1E:8A:F5:E4:91:2D:21:F4:1A:FB:E4:CA:D7:11:58:32:AC
            X509v3 Authority Key Identifier:
                keyid:18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:d1:99:d0:cb:ae:de:e8:ac:21:d8:f5:6a:1a:98:27:09:78:
         66:02:d2:6c:35:ff:46:ee:02:21:64:bc:e4:70:84:f1:e0:13:
         7f:fc:2b:10:d8:3c:b4:21:43:65:6a:6e:5f:7b:2a:3f:1b:90:
         73:06:be:8e:10:e1:b9:97:62:03:ad:b2:89:74:3e:5d:d1:6a:
         d0:01:9d:71:65:49:e0:e4:10:40:24:7b:4d:f6:f7:46:80:35:
         b2:3e:c4:11:b0:0c:31:15:66:38:74:fa:b2:6b:14:61:d7:76:
         50:24:94:2a:13:97:46:d0:d2:33:63:2c:62:08:ed:1f:8a:77:
         7b:1d:c0:3a:96:d5:e4:04:5f:6d:83:3a:60:04:0e:c1:5d:dd:
         04:3e:0a:b9:15:c8:ba:a7:3f:1c:30:d0:4b:61:0d:e1:eb:40:
         62:21:12:b1:ee:e1:b3:24:bf:1d:9f:8e:62:a9:11:b9:ed:f0:
         cd:17:80:34:e8:78:33:b4:a2:f9:f1:7f:83:b4:9e:b0:f1:28:
         32:af:1a:2b:23:27:62:1c:c0:91:76:0b:fa:a1:72:1b:c9:59:
         16:d7:ec:c5:eb:07:9c:87:f8:55:98:23:37:39:07:a3:4b:d4:
         18:09:77:2c:16:ea:99:5e:53:a0:d9:a1:8e:90:48:26:4a:e0:
         1f:b6:99:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m+qsgvBKo4PZ63m0EVtrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4Y2FlYjE0YTAxZWUxNmQ4MzY1NjVlMTRmYTUzYjRhYjNj
M2NkMjYwHhcNMjYwMzI5MDgwMDM1WhcNMjYwMzMwMDgwMDM1WjAzMTEwLwYDVQQD
EygwOTFmOGYxZThhZjVlNDkxMmQyMWY0MWFmYmU0Y2FkNzExNTgzMmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAripylmqzXGKBVRrUs0Gq8a8ufalW
eILcSREH9hTCCWMDQF1KTQ/cu6PEj6hlbwDs8s8eDtiK1/xuqk+4lctcbeDDx/M+
kHggKj02Xx6HZ74KitZba6A+r4VLAf74PLhREqB0OZafrqWsuqQFJ5sb01YK6kDF
yYp7HDyJ4R2qZkVgc71UAwdLbcfxQFObMnfVaXmzMAKZldtRt7fprUR+uLehgPmT
8ASyiI4RpYzsYw8bZEAf3Tw166Rob8V6itLm0v8pGHUs/wnZ802BamskHiTRrzWS
e0ufg5HbR39k3esoRQLGF3gmIJtst6lorfW0gaYyKAe/SFRKXFyHPwPpmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkfjx6K9eSRLSH0GvvkytcRWDKsMB8GA1UdIwQY
MBaAFBjK6xSgHuFtg2Vl4U+lO0qzw80mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR01yckZLQWU0VzJEWldYaFQ2VTdTclBEelNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lN2IxZDctM2Q3YS00NmFiLTgxMGYt
ZWRkZjIzYzFiYTZkLzEvR01yckZLQWU0VzJEWldYaFQ2VTdTclBEelNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9lN2IxZDctM2Q3YS00NmFiLTgxMGYtZWRkZjIzYzFiYTZk
LzEvR01yckZLQWU0VzJEWldYaFQ2VTdTclBEelNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9GZ0Muu
3uisIdj1ahqYJwl4ZgLSbDX/Ru4CIWS85HCE8eATf/wrENg8tCFDZWpuX3sqPxuQ
cwa+jhDhuZdiA62yiXQ+XdFq0AGdcWVJ4OQQQCR7Tfb3RoA1sj7EEbAMMRVmOHT6
smsUYdd2UCSUKhOXRtDSM2MsYgjtH4p3ex3AOpbV5ARfbYM6YAQOwV3dBD4KuRXI
uqc/HDDQS2EN4etAYiESse7hsyS/HZ+OYqkRue3wzReANOh4M7Si+fF/g7SesPEo
Mq8aKyMnYhzAkXYL+qFyG8lZFtfsxesHnIf4VZgjNzkHo0vUGAl3LBbqmV5ToNmh
jpBIJkrgH7aZuQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:56 2026 by rpki-client