Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
File:                     GtwAk8WviUz1ILWTbjCyFQkN6fg.mft (raw, json)
Hash identifier:          UBZshxwmBTEDIkybY3/MGNwHTxjnxlXpoxUf+yxN92U=
Subject key identifier:   CC:82:9F:FE:9C:B1:4B:ED:5B:BE:48:9B:97:DE:AE:5F:C4:8A:B4:75
Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
Certificate issuer:       /CN=1adc0093c5af894cf520b5936e30b215090de9f8
Certificate serial:       019CAC7DD77E37C4DE3B6D711CEDB2E83605
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
Manifest number:          100C
Signing time:             Mon 02 Mar 2026 03:00:53 +0000
Manifest this update:     Mon 02 Mar 2026 03:00:53 +0000
Manifest next update:     Tue 03 Mar 2026 03:00:53 +0000
Files and hashes:         1: 22DYdmOvCLM948EoyfkUAxlACZo.roa (hash: kciKnNjBgHwlkB4sn576VFqmz6xPQ5AioU9khsx436M=)
                          2: GtwAk8WviUz1ILWTbjCyFQkN6fg.crl (hash: 5zmA6OV6d9Ql1agffgvQIWq4SM6LUBlmOgvRkk7cNmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 03:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7d:d7:7e:37:c4:de:3b:6d:71:1c:ed:b2:e8:36:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8
        Validity
            Not Before: Mar  2 03:00:53 2026 GMT
            Not After : Mar  3 03:00:53 2026 GMT
        Subject: CN=cc829ffe9cb14bed5bbe489b97deae5fc48ab475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:88:ae:56:00:82:fd:a4:0f:12:ef:d1:13:16:
                    23:38:ff:da:e6:93:41:52:07:99:2d:d1:8a:5b:5a:
                    62:e2:8b:aa:38:c6:13:82:e4:3f:aa:22:24:d6:3d:
                    a3:39:c3:e5:ea:c1:24:2b:46:c4:c0:b5:67:9c:93:
                    ad:f4:18:ef:5c:d6:67:d7:a4:bd:27:7f:20:1e:08:
                    01:e8:b7:43:5a:01:f5:1a:90:da:45:ec:02:92:56:
                    29:13:0e:fb:49:38:ce:a9:82:af:45:9b:1c:97:96:
                    d6:db:e1:c1:bc:d4:9c:41:38:63:5d:b7:37:7b:54:
                    f0:a4:62:b8:f3:cc:a3:43:9e:60:f4:6c:5d:ab:a1:
                    04:ed:ad:c0:ba:5a:c9:e8:01:70:06:a0:40:d7:63:
                    b7:7b:c8:80:73:70:fa:3f:5a:7c:2b:73:3d:29:98:
                    3a:ad:00:37:5c:ed:38:f5:b5:59:04:f1:c8:50:58:
                    d1:f7:93:fa:ac:f4:23:3a:6c:68:2f:3c:85:c3:a0:
                    74:e6:be:8b:22:09:ae:e7:6e:8e:65:15:2a:1d:2a:
                    64:b1:8b:6c:74:d4:6b:2a:0e:6c:b4:3d:08:ac:6f:
                    fe:c1:47:30:1c:e4:6a:39:73:e6:0c:ea:d5:8e:c1:
                    d2:4b:4d:3a:fc:74:22:4a:f1:21:fd:8c:5f:28:e2:
                    c9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:82:9F:FE:9C:B1:4B:ED:5B:BE:48:9B:97:DE:AE:5F:C4:8A:B4:75
            X509v3 Authority Key Identifier:
                keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:92:80:b1:ea:f4:18:22:05:a7:b8:ef:86:12:b2:16:59:b3:
         7b:5f:5e:ad:38:26:c1:e5:3a:09:76:48:3e:aa:d4:48:6d:ea:
         b7:21:c7:fd:e6:22:9c:5f:dc:80:ff:12:94:da:46:bd:9b:d1:
         6b:4d:81:ec:49:5a:78:f2:3b:35:b7:4f:ac:b1:2f:2d:39:8e:
         e4:3f:ec:65:ab:03:15:c4:66:f3:ce:df:03:e6:6c:4c:8f:c5:
         c5:13:f0:f4:6b:dc:de:8e:04:9f:8d:df:09:8c:d8:1d:ba:42:
         99:5e:5b:94:c5:d5:ab:c5:25:c6:67:2e:1f:a8:ca:57:9f:b1:
         c9:09:c3:4c:2e:23:16:a4:3f:00:de:ae:c9:b2:88:d4:24:93:
         43:1c:c3:b7:d8:34:8d:93:3c:f8:c4:57:8f:78:bc:d2:ac:8f:
         df:69:28:3a:5d:75:39:dc:e7:77:c9:43:3f:97:b4:c4:65:e4:
         d9:1d:ba:f0:b1:f8:43:08:76:08:ec:c2:9e:2e:ea:62:b1:d8:
         8c:f5:e8:e1:be:90:93:90:3b:da:98:df:62:4a:6e:15:ac:f9:
         d2:85:c7:ab:74:cc:60:83:59:c9:c6:5e:2c:ea:d0:88:93:2f:
         85:3b:01:38:93:ce:c5:cd:57:e2:0c:06:f4:56:12:0b:4e:a1:
         d9:fa:de:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:05:04 2026 by rpki-client