Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
File:                     GNtfz9wY74Qh4mUfGybBZaAdU_E.mft (raw, json)
Hash identifier:          H+9rEMSr5PcQRxuKLtMHbPk+a1XleTcxzvzkHBZKOqc=
Subject key identifier:   E9:CB:B5:A2:9E:6B:CC:16:8B:5F:67:91:00:E0:88:32:7B:BD:BB:57
Authority key identifier: 18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1
Certificate issuer:       /CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
Certificate serial:       019CAC7DF5EF806B2751AD1B29BAF2750F5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
Manifest number:          1845
Signing time:             Mon 02 Mar 2026 03:01:01 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:01 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:01 +0000
Files and hashes:         1: GNtfz9wY74Qh4mUfGybBZaAdU_E.crl (hash: xCEocLjrsCVLokB4pNfrKPWSro3I16XhT/8VqZKQDjs=)
                          2: HyBfdHBu-E_xnT2LV4MR8Uj2x2g.roa (hash: ECkHLWD5o4a328xINTv5HTRD82ypaSriGLU8WBsJUfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7d:f5:ef:80:6b:27:51:ad:1b:29:ba:f2:75:0f:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
        Validity
            Not Before: Mar  2 03:01:01 2026 GMT
            Not After : Mar  3 03:01:01 2026 GMT
        Subject: CN=e9cbb5a29e6bcc168b5f679100e088327bbdbb57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:84:c6:3b:e1:18:65:79:09:75:6e:6a:87:
                    d7:e5:e3:03:09:1d:03:4f:d8:2a:9c:b1:27:7e:86:
                    29:34:0f:92:41:f5:66:c4:af:c1:87:0c:f0:b3:eb:
                    de:9b:8d:ed:b0:ad:68:3a:d8:22:a8:ab:29:b3:26:
                    1f:4c:ae:97:ca:28:f0:75:c9:1f:39:c5:3e:66:88:
                    5a:0c:cf:eb:2b:3e:bc:c0:2e:97:c6:f2:e6:de:94:
                    7f:1d:b6:28:19:56:49:d5:92:c9:c6:96:f4:71:12:
                    f1:20:da:41:11:ca:91:6d:6f:ba:9c:7f:39:af:9a:
                    7b:3b:2b:98:00:f5:1d:8d:d2:71:df:cc:84:3d:c2:
                    30:3a:36:53:82:dd:dc:9b:2e:82:4c:d5:2b:53:5c:
                    95:b2:c0:db:e6:54:2f:67:18:0c:c1:94:fd:9d:05:
                    2a:e4:f2:cf:53:b0:ad:c5:3e:60:d2:e2:bb:ec:aa:
                    e9:4c:6f:3a:3a:5d:63:4c:d8:fe:45:16:6b:9a:b4:
                    86:07:15:9a:68:7e:78:ce:4a:9d:c8:b8:e7:80:5f:
                    d2:59:da:45:58:14:22:7b:0d:44:39:7b:ec:5f:cd:
                    96:60:6b:d9:48:3a:50:96:0a:f7:db:6a:ce:58:36:
                    f4:c5:4a:9d:83:5d:5a:8d:c1:51:c9:d8:17:83:74:
                    f3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CB:B5:A2:9E:6B:CC:16:8B:5F:67:91:00:E0:88:32:7B:BD:BB:57
            X509v3 Authority Key Identifier:
                keyid:18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a1:b3:7d:10:ef:09:3a:16:f0:05:98:e2:57:5f:fb:e1:3e:
         90:19:ff:ed:44:94:d3:95:2e:c6:7b:6c:fa:0a:84:f2:d3:7e:
         aa:f0:ae:52:fc:07:b9:63:fe:4c:f3:ed:4a:c7:ff:85:d3:e8:
         fd:7c:6d:6d:27:53:d3:ad:28:2a:ed:6b:47:bc:cd:88:24:d3:
         0f:36:c7:ac:e5:1c:21:1c:e2:53:54:ab:9a:a6:92:8a:01:7b:
         67:ac:01:1d:49:a1:5e:ed:83:c0:12:06:21:bb:ab:d7:82:f9:
         11:bb:d8:97:2d:07:1e:e6:e8:44:88:cc:9c:9e:ed:b7:16:39:
         8d:8c:67:a0:a7:1c:b3:a5:a6:ed:80:67:50:4f:2d:6f:7a:c8:
         d5:33:62:f0:9a:df:05:38:06:e2:a3:93:18:04:aa:a8:82:36:
         e7:e4:ed:84:b7:97:b6:9c:55:ed:a8:91:3e:ed:47:3a:33:63:
         0b:03:6d:60:4f:34:3a:73:49:3b:ac:6a:63:33:5e:e0:83:c8:
         35:fa:6d:64:06:36:4a:bf:e9:0d:23:2d:1f:59:7b:2a:23:2a:
         01:a6:ff:3c:74:2a:9a:49:61:e6:e9:cd:74:88:d8:7c:8f:44:
         14:91:d4:b8:ec:21:0d:dc:ef:16:bf:12:b9:66:8a:72:ac:b8:
         d8:78:11:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:12 2026 by rpki-client