Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
File:                     GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft (raw, json)
Hash identifier:          qDeJrFQ9U1IVMs5BmekTJ+FobK9lfGPcWLO3EyKmnjs=
Subject key identifier:   CA:AF:BB:69:31:4B:22:FA:BB:42:7F:EC:6D:0F:64:3B:66:F0:9C:8E
Authority key identifier: 19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
Certificate issuer:       /CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Certificate serial:       019CAD90AABB6C1E5FB3B71D049D9F186D58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
Manifest number:          071F
Signing time:             Mon 02 Mar 2026 08:01:05 +0000
Manifest this update:     Mon 02 Mar 2026 08:01:05 +0000
Manifest next update:     Tue 03 Mar 2026 08:01:05 +0000
Files and hashes:         1: FiXFwvxiV6Y1ajHORGAWiqcT-Y4.roa (hash: Zs2NR7v6cxcECJIbaIPTJM9/Q7GTHlESDly+5o8OUyM=)
                          2: GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl (hash: b/6ujduo4OPT/PbZmkyqGBkEWxW47+5cRpViCksTtcs=)
                          3: e-bWAWxjxQJbnJGblL9z-udKDeg.roa (hash: F1tIuwxbtLRrgISklNjmuzhPscky9ofsgkm8xnxx5MU=)
                          4: oc64jGTa7tYBazn5B8iUtkhOiqA.roa (hash: RFnqxJshGlA8TNiqCYqoYq6mvbEyQL7fumOe50DNmVk=)
                          5: wv8gd6x6veIwvQ7a_hwbd5Fp7yY.roa (hash: jr55QmYCXhM/DvkRhe83vWFpOSQh5IwJlAstqBQk0S4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:aa:bb:6c:1e:5f:b3:b7:1d:04:9d:9f:18:6d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b390b62d09950d500cd6bbbd78d0390560ec42
        Validity
            Not Before: Mar  2 08:01:05 2026 GMT
            Not After : Mar  3 08:01:05 2026 GMT
        Subject: CN=caafbb69314b22fabb427fec6d0f643b66f09c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f4:54:16:b1:af:d2:41:f4:d9:d5:da:57:a8:
                    f2:50:27:b5:7f:6f:b5:9f:90:cb:8a:8d:b9:bb:48:
                    00:4f:5c:f9:de:48:c0:a2:59:b7:19:07:ad:a1:fa:
                    14:2f:57:bf:36:13:02:cd:3f:32:d2:9d:f2:ee:22:
                    1a:d2:d8:29:ab:34:cd:f5:26:89:b6:55:4d:cc:90:
                    52:01:35:e4:be:1c:29:f6:2b:aa:dc:a0:8d:17:4b:
                    f9:87:d8:61:22:45:6f:e3:3e:52:a1:f0:1b:9c:8b:
                    08:27:20:fd:e3:96:e6:64:22:c6:ae:e8:70:49:28:
                    c4:01:37:23:a0:03:e8:da:aa:11:2f:18:e8:01:42:
                    d2:f2:e5:00:12:34:e0:66:88:5e:9e:49:29:80:05:
                    a8:d4:dc:b3:e3:b5:5f:86:70:69:e4:e6:f9:d8:de:
                    50:31:bc:ec:c1:c0:ed:1c:49:ea:1b:36:d0:ec:16:
                    77:e3:5b:ac:a5:7a:b8:00:36:72:a5:f6:66:af:bc:
                    c9:8d:94:58:e8:b8:ff:e7:d8:2f:d0:92:ca:55:02:
                    b8:8d:31:4e:7e:fe:1a:58:8b:9d:a0:fc:38:b6:6d:
                    03:ee:db:99:f2:17:65:e9:41:0b:53:46:86:67:06:
                    f5:eb:6a:ec:89:2d:ef:f8:65:11:ed:f7:9e:cd:e0:
                    1b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AF:BB:69:31:4B:22:FA:BB:42:7F:EC:6D:0F:64:3B:66:F0:9C:8E
            X509v3 Authority Key Identifier:
                keyid:19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:30:6b:9b:32:37:fb:92:b8:28:a7:68:d7:9c:f7:d8:26:3f:
         35:4b:3c:42:91:7a:2a:2f:8b:59:71:ec:48:d2:9f:38:f2:a8:
         ac:4a:9b:88:e3:0e:df:2d:24:26:99:7b:ce:67:32:9d:e5:b4:
         09:0e:a7:62:5b:92:4a:7e:54:b9:07:77:e5:c3:ed:15:30:5a:
         b3:cc:00:8e:ac:3d:b2:6f:d3:d6:09:e5:73:24:f7:83:8d:36:
         9f:90:c2:02:55:e3:51:a3:2c:19:91:f4:85:36:1d:36:13:25:
         5a:48:02:c6:36:94:cb:5b:8d:4f:d2:43:ea:66:00:45:c1:3d:
         c1:01:ad:f3:e9:8f:32:31:c0:8d:f6:fb:42:d8:de:25:f3:dd:
         7b:48:77:d4:a8:24:4f:59:3f:6b:5d:20:68:e0:00:5c:64:11:
         74:88:bc:5b:08:f5:a3:23:c0:6d:79:4f:4f:36:15:80:a7:a9:
         03:5b:7e:d5:85:1e:a2:40:c2:75:f0:35:eb:9f:10:a6:8a:b7:
         17:71:57:86:91:db:31:a6:b9:b2:28:31:5f:02:bc:36:89:f3:
         fe:56:5d:e5:d0:90:e4:9f:f4:99:0d:6f:f5:88:f5:d5:a3:d2:
         4c:8a:c2:27:5c:27:a3:87:20:2a:85:c3:12:96:f8:0d:d1:03:
         46:f8:eb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:58:03 2026 by rpki-client