Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
File:                     GbEF0UjemWA2_fIcsgijOKFYzto.mft (raw, json)
Hash identifier:          kMVhPQsEWIK+lmTOIxEeLGqPaYQGjoT9V0Fby0rBYGg=
Subject key identifier:   14:B7:AE:55:FA:65:6B:D2:66:04:21:10:52:57:33:B0:57:60:1F:7F
Authority key identifier: 19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA
Certificate issuer:       /CN=19b105d148de996036fdf21cb208a338a158ceda
Certificate serial:       019D38D300BCCC6BFC407DAA10484A3D95BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
Manifest number:          0813
Signing time:             Sun 29 Mar 2026 09:00:45 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:45 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:45 +0000
Files and hashes:         1: GbEF0UjemWA2_fIcsgijOKFYzto.crl (hash: Z01u3nKqYms0SnPE5lwO0VlxOTSkUyPqmpTt4SiH8zg=)
                          2: dyUespYQq3mAO5ciQOI9W33sub4.roa (hash: f5ONEWQltft9lq7xj2n38xNWDCpMGTw5GICFFgsknX0=)
                          3: fSqawDgohGpuSmZo75yc0WkYeBQ.roa (hash: 8OxkTboICrI/6VG3FG9kRuzUoZMlBkjPOzPS7xwaWEU=)
                          4: nUmvBNvDTQXxBOq0CjmJmn5Dtmc.roa (hash: edmkHUr1mlIvRQnZS+9H+p7B//zDt6WSlQ6S+qA/Trg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:00:bc:cc:6b:fc:40:7d:aa:10:48:4a:3d:95:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b105d148de996036fdf21cb208a338a158ceda
        Validity
            Not Before: Mar 29 09:00:45 2026 GMT
            Not After : Mar 30 09:00:45 2026 GMT
        Subject: CN=14b7ae55fa656bd266042110525733b057601f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:17:d9:3c:50:9c:cc:8f:28:2e:1c:a1:52:51:
                    16:b7:20:52:f2:04:05:fd:b7:d3:95:3a:03:77:f0:
                    f8:ff:80:6e:f0:35:08:9c:77:2a:b1:af:7f:7b:1b:
                    66:8a:ec:08:7b:75:b5:33:2a:5e:45:62:76:c8:97:
                    7c:29:22:db:f4:81:17:d8:89:6d:ab:67:8a:03:9a:
                    0b:31:88:d8:e8:d5:86:27:db:d0:8a:50:9e:5b:75:
                    c9:ef:68:d9:f2:df:d3:f7:d2:7c:18:85:e2:dc:10:
                    02:83:2a:7c:b5:5f:f9:41:76:a5:3d:bb:dd:95:d6:
                    53:70:f2:c7:7e:a0:98:41:b0:3e:33:04:4d:01:83:
                    ba:ab:9e:f5:ad:8b:10:fb:c2:1e:31:a0:c2:95:85:
                    4e:3d:26:8b:40:b4:42:49:0a:bb:59:33:58:e2:7d:
                    7c:a5:ba:95:9a:4c:42:85:f2:fd:5e:f5:75:ca:44:
                    70:6b:73:8d:c6:b6:f1:e6:6d:36:b6:e2:15:2d:94:
                    a8:64:5b:94:06:dd:6d:ee:ab:7b:2e:cd:0f:3b:60:
                    cc:25:9f:b2:c5:bf:05:8f:11:73:f4:a5:20:af:9e:
                    98:4a:7d:f6:49:2f:f1:1a:00:41:79:92:00:f7:c6:
                    23:6d:78:09:76:e3:e5:b7:89:57:ed:ab:9e:3d:6f:
                    1e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B7:AE:55:FA:65:6B:D2:66:04:21:10:52:57:33:B0:57:60:1F:7F
            X509v3 Authority Key Identifier:
                keyid:19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:53:66:20:11:11:6b:a3:73:c0:f6:f8:d8:60:df:51:ee:35:
         e7:12:ed:9d:2b:10:1d:30:cd:9e:d3:19:95:0e:42:df:d7:95:
         40:6b:d9:29:6d:0f:b3:6e:82:97:76:6e:41:a7:99:d3:c3:97:
         da:a7:f3:86:06:3f:bd:89:0a:fa:8a:4d:f2:ba:b4:07:03:bd:
         aa:a8:ac:36:e2:3f:12:d0:62:2f:83:83:1d:88:56:ef:2f:f0:
         b1:6b:42:0b:80:3e:67:4c:cc:7f:37:09:df:43:c3:83:4a:91:
         dd:d3:7a:61:55:46:f3:5d:c1:75:2b:38:c8:a8:8b:84:34:55:
         5a:9c:09:38:c7:0c:52:a9:c6:4b:fc:27:03:e9:aa:a2:c4:95:
         4d:a2:3b:32:a7:85:d2:56:1c:9d:62:d5:fe:8b:e7:59:d3:a7:
         f6:40:5d:a0:fa:fc:c0:11:95:19:0d:bb:8b:8d:a4:48:85:40:
         bb:ab:32:7e:7d:46:23:bd:6b:a3:2c:b6:1c:4f:11:50:62:3f:
         5d:65:df:7a:65:0a:9f:09:94:8c:ea:69:af:16:a4:03:35:4b:
         8e:be:81:e1:a8:ac:63:76:c6:b6:e9:dd:73:d0:f4:d9:ab:72:
         be:e6:61:21:54:f0:87:fb:e1:6a:3c:f1:66:38:08:a2:be:74:
         1d:ee:95:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:33 2026 by rpki-client