Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
File:                     GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft (raw, json)
Hash identifier:          kkMABbF+5NkVbXyPaxchbyQeRfSS3Y27APGPMo9khyU=
Subject key identifier:   3E:6C:B1:B2:C3:41:AC:79:AE:DC:EE:83:1F:0A:06:ED:DA:A8:8A:16
Authority key identifier: 19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C
Certificate issuer:       /CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
Certificate serial:       019CAFEC880CE1ECF141187AE565C1AE53D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
Manifest number:          03DC
Signing time:             Mon 02 Mar 2026 19:00:39 +0000
Manifest this update:     Mon 02 Mar 2026 19:00:39 +0000
Manifest next update:     Tue 03 Mar 2026 19:00:39 +0000
Files and hashes:         1: 70J52jJueevnyZxBFCOB5w1OO_0.roa (hash: 7FPRoRZ8DnOq8+EjrJxFEg7wAYyvSOnnlxu+F1i8H/0=)
                          2: GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl (hash: 6i9QjdWqNnY01Q1cLlRqcj7uJzsqEH4HvlfgkMgAhuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:ec:88:0c:e1:ec:f1:41:18:7a:e5:65:c1:ae:53:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196523fe0d6bd9c67e0bcb0098a3c363f2f90f7c
        Validity
            Not Before: Mar  2 19:00:39 2026 GMT
            Not After : Mar  3 19:00:39 2026 GMT
        Subject: CN=3e6cb1b2c341ac79aedcee831f0a06eddaa88a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:14:45:02:ed:64:a7:cc:c6:4c:de:17:2b:2b:
                    bb:5b:21:d0:e5:92:a7:fd:5d:7c:fd:35:de:c3:9b:
                    d3:6f:86:a2:4b:e1:f6:df:d3:57:2f:bb:8c:79:e5:
                    28:82:91:95:fb:25:2f:79:70:43:e1:70:95:ed:59:
                    6e:c5:96:60:86:86:ce:a1:fc:5e:61:a4:13:05:e4:
                    0a:b1:49:ba:8e:8d:2a:6b:f4:ce:42:ed:0e:ec:59:
                    49:8c:7a:21:a4:a6:28:4b:a6:d8:0b:95:3c:b4:48:
                    f1:88:91:eb:14:2d:a9:40:78:2a:70:d8:97:21:69:
                    37:2d:07:af:f5:87:dd:da:59:10:fc:bc:54:32:53:
                    be:52:9f:59:f8:5d:7e:e0:9b:c6:c0:47:02:9c:fa:
                    e2:6a:fb:ec:63:d8:a0:34:ad:eb:60:49:4f:04:ae:
                    30:f6:b1:b1:22:4f:77:b4:d5:c0:5a:18:ab:c1:26:
                    58:bf:7e:30:21:b4:c6:e5:1c:b2:24:18:71:07:21:
                    42:00:96:d9:2f:2e:cd:53:cb:c2:1e:e6:91:40:1b:
                    45:f2:57:1c:5d:cd:1f:5b:89:f6:75:21:d3:fc:83:
                    5c:45:6d:66:10:69:c7:f6:f6:c6:dd:f8:3c:03:7d:
                    db:39:a1:13:65:9e:df:4d:70:8f:fe:29:32:5c:1a:
                    ef:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6C:B1:B2:C3:41:AC:79:AE:DC:EE:83:1F:0A:06:ED:DA:A8:8A:16
            X509v3 Authority Key Identifier:
                keyid:19:65:23:FE:0D:6B:D9:C6:7E:0B:CB:00:98:A3:C3:63:F2:F9:0F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7438dd-e362-4034-a040-de835458da8d/1/GWUj_g1r2cZ-C8sAmKPDY_L5D3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:b9:cb:22:9b:73:c7:73:17:1e:f6:b3:73:79:2e:d2:4e:69:
         9d:03:b5:5b:90:f8:f6:f2:25:5c:ad:f9:a9:f5:ee:c5:c0:96:
         f7:a6:1c:05:4b:04:ce:c9:e8:e3:16:5d:9c:d7:00:a9:c1:12:
         d6:a6:ce:85:c3:72:8b:22:43:02:7f:a4:db:0c:1e:4a:22:45:
         0d:c3:b3:3a:b8:c9:1c:d1:ab:06:da:99:62:bb:42:0c:18:8d:
         47:cc:f1:c8:a2:24:68:9b:69:ce:bf:49:02:4f:40:95:9a:34:
         bd:5c:d1:13:6d:d4:7c:be:9f:3b:b1:94:06:53:dd:61:38:04:
         6f:32:fa:11:9f:49:a7:d7:f7:05:95:06:09:ef:8c:9c:6f:4a:
         72:66:9d:1e:a2:79:02:58:dd:75:67:4e:be:67:23:ef:67:80:
         16:e5:28:5b:13:31:4d:93:3f:76:b2:1d:8b:e7:fc:3e:fb:1e:
         e1:d8:6b:26:02:c5:3f:5f:c2:fc:8f:11:c3:c3:cc:48:cd:0c:
         15:fd:20:58:39:dc:8e:68:a9:99:01:71:51:fa:23:06:65:4b:
         4b:21:8f:eb:a7:d0:4f:47:ad:df:7f:41:49:f2:b2:45:ba:85:
         98:1e:08:b4:57:9e:6e:7f:4e:1e:92:8f:0a:ab:75:f1:19:60:
         39:d3:d7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:30:34 2026 by rpki-client