Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
File:                     giSLXgiFiWS6K1RzFSAV_VmR_fg.mft (raw, json)
Hash identifier:          7f0QVs8TJjgonE2mP/6+kXFMltgqwGPurEl2Gb9e5UU=
Subject key identifier:   EE:17:BA:98:7A:DC:78:A4:F5:DD:AE:F3:C9:A4:7B:9B:0F:00:FB:B8
Authority key identifier: 82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8
Certificate issuer:       /CN=82248b5e08858964ba2b5473152015fd5991fdf8
Certificate serial:       019CE5C8CE847B8E78D90FA84AB00812C689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
Manifest number:          17F5
Signing time:             Fri 13 Mar 2026 06:01:08 +0000
Manifest this update:     Fri 13 Mar 2026 06:01:08 +0000
Manifest next update:     Sat 14 Mar 2026 06:01:08 +0000
Files and hashes:         1: giSLXgiFiWS6K1RzFSAV_VmR_fg.crl (hash: pdQe/mjvk+fV8HZf8tzh8kuy6DOfN6DcmhqENqIecq0=)
                          2: zYEDrEOZNFZoMdlO3DAnxS5eqJc.roa (hash: LZDUp9nuJRfFK7K/b0GgwAZrAzR3hWtlaKiCODrTlMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:c8:ce:84:7b:8e:78:d9:0f:a8:4a:b0:08:12:c6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82248b5e08858964ba2b5473152015fd5991fdf8
        Validity
            Not Before: Mar 13 06:01:08 2026 GMT
            Not After : Mar 14 06:01:08 2026 GMT
        Subject: CN=ee17ba987adc78a4f5ddaef3c9a47b9b0f00fbb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4e:9b:37:3d:da:29:c0:11:34:94:27:d2:f6:
                    d6:10:f3:be:8f:2f:92:c3:75:fc:e7:59:79:83:55:
                    20:17:e0:9b:90:75:4c:00:ae:28:4f:46:84:a3:7e:
                    c2:14:59:95:48:a2:af:7f:61:38:9c:a8:1b:5e:54:
                    b3:89:d0:40:8c:41:bb:dd:0c:fa:69:f6:6e:9a:b4:
                    e6:58:fc:d1:84:9d:45:ec:55:d1:da:32:10:9e:74:
                    b1:4d:65:91:99:ec:63:0b:6f:08:55:b7:af:c1:b5:
                    bd:f0:15:4e:0b:2c:ae:9f:ab:d1:e7:ec:5a:5d:b1:
                    b7:3c:99:13:bf:ce:ae:36:94:ae:e6:9d:2c:8e:ff:
                    58:31:46:bd:8a:e1:ff:6a:62:2c:9f:4d:b9:6a:f0:
                    8b:5f:9b:71:f2:94:3d:a5:16:51:fd:f1:05:6e:51:
                    78:a7:44:b5:83:e1:d3:0e:5c:b5:f1:e7:4f:9f:b4:
                    c0:4e:48:16:38:0d:fa:a1:a7:0a:28:36:22:be:a1:
                    9c:ee:bb:8e:6f:2f:1e:8f:5e:41:bb:ba:a7:6d:79:
                    d6:b4:9e:1f:19:73:28:42:b2:bf:4e:c2:5f:91:0a:
                    22:fc:80:02:ec:b0:14:4c:ec:fb:e3:16:3a:e9:9c:
                    35:90:d1:1a:d3:e2:17:7d:51:e2:d2:cb:f6:5f:16:
                    67:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:17:BA:98:7A:DC:78:A4:F5:DD:AE:F3:C9:A4:7B:9B:0F:00:FB:B8
            X509v3 Authority Key Identifier:
                keyid:82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:bb:b7:a8:2f:07:e4:55:fb:9a:1d:0d:3f:f5:f9:8b:8d:fe:
         e7:01:8c:76:b5:b8:60:73:9d:fe:e3:a4:83:ce:37:e1:2f:fc:
         b2:f9:9b:7c:41:31:00:13:b9:5f:d3:73:87:3f:c1:72:0c:d3:
         a3:37:cf:a3:1e:45:81:0a:89:e1:f6:6a:42:ca:e9:cb:6d:aa:
         e3:40:01:a9:04:c2:a1:11:ff:14:a6:e5:25:c0:fb:db:04:51:
         71:b4:d1:98:a9:05:04:86:92:1b:16:95:96:86:c9:47:3e:c4:
         25:1c:2e:1e:83:3c:74:2d:72:78:59:5e:56:a3:ab:00:69:be:
         5f:67:4e:b6:9d:ae:76:82:0b:fe:90:0e:0f:6d:9b:b2:3c:f3:
         ca:9c:75:ef:56:6c:98:51:d0:21:6a:d5:3f:fc:b0:b5:14:37:
         0e:a4:dd:be:18:a0:3a:69:c5:20:d6:be:53:ec:a1:41:0a:dc:
         d4:06:34:13:85:75:3a:32:04:09:76:4f:6a:05:93:90:c1:4a:
         37:13:4d:0b:1f:45:9a:8a:ca:cd:b4:5a:d7:a2:02:d6:09:26:
         8d:fb:09:d1:cd:68:ea:21:86:4f:73:1f:fc:39:51:e1:57:ee:
         95:68:1c:5b:39:99:cd:0e:05:69:80:21:42:25:19:78:59:3f:
         78:f5:c5:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlyM6Ee4542Q+oSrAIEsaJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMjQ4YjVlMDg4NTg5NjRiYTJiNTQ3MzE1MjAxNWZkNTk5
MWZkZjgwHhcNMjYwMzEzMDYwMTA4WhcNMjYwMzE0MDYwMTA4WjAzMTEwLwYDVQQD
EyhlZTE3YmE5ODdhZGM3OGE0ZjVkZGFlZjNjOWE0N2I5YjBmMDBmYmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv06bNz3aKcARNJQn0vbWEPO+jy+S
w3X851l5g1UgF+CbkHVMAK4oT0aEo37CFFmVSKKvf2E4nKgbXlSzidBAjEG73Qz6
afZumrTmWPzRhJ1F7FXR2jIQnnSxTWWRmexjC28IVbevwbW98BVOCyyun6vR5+xa
XbG3PJkTv86uNpSu5p0sjv9YMUa9iuH/amIsn025avCLX5tx8pQ9pRZR/fEFblF4
p0S1g+HTDly18edPn7TATkgWOA36oacKKDYivqGc7ruOby8ej15Bu7qnbXnWtJ4f
GXMoQrK/TsJfkQoi/IAC7LAUTOz74xY66Zw1kNEa0+IXfVHi0sv2XxZnvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4Xuph63Hik9d2u88mke5sPAPu4MB8GA1UdIwQY
MBaAFIIki14IhYlkuitUcxUgFf1Zkf34MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2lTTFhnaUZpV1M2SzFSekZTQVZfVm1SX2ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9jOTAzZjMtODI0Ni00YzRiLWFhNGYt
YWU2NDY5YWIzZjQwLzEvZ2lTTFhnaUZpV1M2SzFSekZTQVZfVm1SX2ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9jOTAzZjMtODI0Ni00YzRiLWFhNGYtYWU2NDY5YWIzZjQw
LzEvZ2lTTFhnaUZpV1M2SzFSekZTQVZfVm1SX2ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbu3qC8H
5FX7mh0NP/X5i43+5wGMdrW4YHOd/uOkg8434S/8svmbfEExABO5X9Nzhz/BcgzT
ozfPox5FgQqJ4fZqQsrpy22q40ABqQTCoRH/FKblJcD72wRRcbTRmKkFBIaSGxaV
lobJRz7EJRwuHoM8dC1yeFleVqOrAGm+X2dOtp2udoIL/pAOD22bsjzzypx171Zs
mFHQIWrVP/ywtRQ3DqTdvhigOmnFINa+U+yhQQrc1AY0E4V1OjIECXZPagWTkMFK
NxNNCx9FmorKzbRa16IC1gkmjfsJ0c1o6iGGT3Mf/DlR4VfulWgcWzmZzQ4FaYAh
QiUZeFk/ePXF4w==
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:17:12 2026 by rpki-client