Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft
File:                     gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft (raw, json)
Hash identifier:          lo5tfe4hbclyJhf0MCWS7O9xAXClU9hR1TJzVU2c/F0=
Subject key identifier:   34:66:17:F1:2C:FB:0A:A3:CC:79:FA:AB:45:93:E8:F0:A8:5C:74:83
Authority key identifier: 80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C
Certificate issuer:       /CN=80e506fcf1d7cf649d388e975ca26252e219fc7c
Certificate serial:       019D382E51BACFB882B7A42A095FE4DB1686
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft
Manifest number:          142F
Signing time:             Sun 29 Mar 2026 06:00:52 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:52 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:52 +0000
Files and hashes:         1: gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl (hash: 0AlgfqdqpfPNO2OJWZy3hdnknr2bKUrsMELhIxNZrlE=)
                          2: mot890KLKonsvKEqcWKSQTfnOuw.roa (hash: TEigGd0FQjToJ1w8bcpu4A5x/fikb79rKfpx2867fcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:51:ba:cf:b8:82:b7:a4:2a:09:5f:e4:db:16:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e506fcf1d7cf649d388e975ca26252e219fc7c
        Validity
            Not Before: Mar 29 06:00:52 2026 GMT
            Not After : Mar 30 06:00:52 2026 GMT
        Subject: CN=346617f12cfb0aa3cc79faab4593e8f0a85c7483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5d:aa:94:9a:a4:2e:56:f9:27:cd:28:05:86:
                    b1:e2:b8:a1:7e:df:be:ea:61:88:0d:d2:56:8c:7d:
                    23:9c:86:2e:92:14:9b:93:1d:3c:e1:d2:89:bd:d7:
                    79:63:94:49:a3:db:2e:45:80:7d:b1:b4:46:99:48:
                    b0:69:96:5e:fb:0d:c9:88:15:c0:a4:f9:4c:4a:bf:
                    2f:15:bd:07:eb:ba:70:1d:5a:a4:17:39:e7:78:fe:
                    c7:69:02:6a:8c:59:8e:79:c7:3e:1a:17:af:77:2c:
                    cf:ea:fb:20:df:49:6d:ea:b9:55:bc:f0:55:72:b8:
                    6e:a0:a6:5e:45:62:b0:79:45:85:16:75:31:33:7e:
                    6a:5d:fd:0f:01:20:50:91:81:ea:1b:39:3a:97:40:
                    62:a9:59:8b:8b:8a:8e:89:b7:1f:4c:ff:38:bb:94:
                    67:45:0f:70:28:b9:a6:61:96:62:36:3a:7b:ac:1e:
                    3a:24:12:be:88:4d:a9:ad:95:f0:c5:59:c1:1f:8a:
                    fc:cd:17:11:45:0a:d8:2e:0e:22:53:64:5f:8d:ee:
                    b5:6d:b7:f6:b9:e5:6e:ac:70:c9:63:1c:72:a6:71:
                    df:05:26:58:87:e5:61:4d:41:67:78:8a:99:19:14:
                    3b:07:68:b7:ee:b0:ed:62:1d:96:e1:74:bd:f6:23:
                    c1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:66:17:F1:2C:FB:0A:A3:CC:79:FA:AB:45:93:E8:F0:A8:5C:74:83
            X509v3 Authority Key Identifier:
                keyid:80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:22:29:f1:78:b0:52:03:79:b2:be:3f:67:1a:da:57:6b:1d:
         c9:cf:ae:fe:87:8f:91:bf:f5:d0:79:90:12:26:b8:98:39:0e:
         d2:8f:ce:8b:ed:af:74:2f:5b:d9:34:62:b9:cf:a7:65:6b:d6:
         b0:b3:f7:00:81:73:03:89:aa:4c:a5:d4:3d:cc:fb:74:6d:8a:
         f1:c3:0b:80:7e:33:b4:a6:07:19:74:85:aa:fa:2d:6d:c3:12:
         f8:3c:44:04:e4:3f:e5:3d:fb:1a:fb:f5:68:90:20:7b:d9:d2:
         fd:c4:b2:7f:6e:01:2e:f3:c9:e6:4c:7e:6d:92:01:38:a2:da:
         e2:9b:0f:7c:7f:a6:d3:74:67:8d:29:58:37:95:e8:89:c9:b4:
         76:06:ac:e8:10:91:98:20:89:8f:ad:06:b3:3f:b3:2a:e7:46:
         14:61:b4:2a:4b:6c:75:9b:69:0d:5d:2c:2f:b8:d2:28:1c:64:
         26:4f:e1:6a:1a:5a:c5:e8:ca:4b:43:0a:06:d0:8b:1d:83:e7:
         be:d7:b8:d8:87:2a:15:4c:50:be:4d:2e:0b:d7:e2:29:9a:a8:
         13:57:f4:2f:58:2d:f5:48:71:4b:62:dd:54:6a:b0:07:5e:d6:
         bc:44:03:82:2d:05:35:6f:9d:6d:26:30:34:89:72:3e:f1:e7:
         f7:aa:b6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:47 2026 by rpki-client