Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
File:                     g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft (raw, json)
Hash identifier:          M4Y+aPSY9yzdbXy9ZWnSjHbK40rL6KxYTlsUTTIJrHc=
Subject key identifier:   08:52:B1:DC:FA:C1:00:E3:D4:17:F4:2D:04:7A:73:0B:C9:C4:09:E2
Authority key identifier: 83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
Certificate issuer:       /CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Certificate serial:       019CAC470300515618D061D4F9F574E922C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
Manifest number:          08E2
Signing time:             Mon 02 Mar 2026 02:01:00 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:00 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:00 +0000
Files and hashes:         1: 9s_JyGI1Kf_GuOE5Z1sC6UkS2T0.roa (hash: jdF/VLnuhEvQghTGVss4qBX3vWUgRXAuemcyYtGZ4io=)
                          2: g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl (hash: 63yfzJveVPF4ZHJX37CsF5SL5eyBiWaIaV+ATEcI23A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:03:00:51:56:18:d0:61:d4:f9:f5:74:e9:22:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
        Validity
            Not Before: Mar  2 02:01:00 2026 GMT
            Not After : Mar  3 02:01:00 2026 GMT
        Subject: CN=0852b1dcfac100e3d417f42d047a730bc9c409e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4a:24:70:fa:f8:b3:da:03:c0:51:2f:df:14:
                    e9:84:40:1a:5b:75:26:f4:26:34:15:f3:b1:7f:22:
                    63:c4:f0:a4:f0:39:eb:43:d3:24:10:5e:f4:c9:e4:
                    56:c1:0b:12:84:5b:93:64:60:3e:da:99:67:84:46:
                    18:05:ca:24:d8:fa:ea:27:08:ef:74:28:79:d2:e3:
                    50:13:31:d1:2b:8d:42:e3:74:c8:48:61:c9:d5:17:
                    98:6e:39:6f:95:a7:38:0b:7c:64:a5:4c:3c:a6:53:
                    70:68:f0:09:5d:73:e1:68:e4:c2:06:f2:fc:f1:59:
                    10:64:ad:7c:68:c0:0e:34:42:be:dc:c3:08:05:14:
                    3d:e8:3a:ad:5b:f9:ea:b8:b1:fc:af:10:58:9a:7f:
                    4c:9f:09:65:af:b8:4e:a0:e5:77:84:96:22:10:4b:
                    ab:1b:c7:a4:bb:dc:c2:c1:56:4b:83:9e:9a:c2:59:
                    cd:fe:49:2f:ac:8b:63:67:9e:cc:eb:7b:4a:d8:fc:
                    25:1a:f6:df:4e:9a:f5:67:11:db:bc:3c:88:83:2a:
                    f7:99:df:b5:0e:69:8d:68:75:8b:ca:71:be:72:b0:
                    8c:a5:78:eb:52:e8:1b:ee:c8:47:da:12:cf:01:04:
                    83:44:c1:d6:0b:f7:4d:2c:ff:7c:28:63:b3:55:0a:
                    f3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:52:B1:DC:FA:C1:00:E3:D4:17:F4:2D:04:7A:73:0B:C9:C4:09:E2
            X509v3 Authority Key Identifier:
                keyid:83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:7a:b1:be:ad:45:07:42:0f:0b:59:77:02:a9:e4:c5:0f:c3:
         57:81:8f:2a:ef:da:c4:7e:73:3f:24:63:68:d0:5b:c7:f9:b5:
         a2:10:19:b9:83:d8:5f:20:fc:85:e2:f4:7b:3b:65:e4:00:e9:
         15:a0:49:03:84:7d:1f:f5:b7:7b:7b:c5:ac:cb:20:1f:27:d7:
         fb:23:65:2c:71:88:fc:a5:4d:7a:3e:7f:7b:71:8c:fd:7f:5c:
         b5:c6:e8:3a:13:08:87:4e:e9:d4:38:82:4b:d6:48:fd:43:74:
         3d:74:85:35:49:e4:82:93:65:d8:ee:db:4b:b6:25:82:4c:84:
         2e:9e:eb:f8:bf:9b:c4:44:fb:c6:b0:5c:5e:e7:b4:10:1a:62:
         53:31:24:59:dd:98:8a:9c:8d:75:cb:33:8f:fb:46:cf:84:d4:
         35:89:83:10:f2:1b:af:8f:82:e6:d8:84:bd:d9:dc:26:04:2b:
         92:b1:d2:ed:ee:3e:d4:56:8f:1c:48:48:a6:ec:72:95:65:01:
         e8:54:e3:78:08:ed:f2:b2:3e:e5:b3:92:e9:f6:ee:e5:4c:e6:
         f1:8f:ac:df:dd:5a:b9:06:b3:90:7e:70:72:a9:6e:00:76:6c:
         85:b8:a7:8c:18:0b:3e:6e:f1:00:ae:06:97:b0:22:3c:df:a7:
         ce:c6:d1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:07 2026 by rpki-client