Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft
File:                     gqo-xYuoRtJ6eXERxVhRUwANug4.mft (raw, json)
Hash identifier:          TO3H9fzyyZQOOK2lALLMzWbaMpBo4cNFfdNwmT/46gk=
Subject key identifier:   D5:76:5C:FE:58:93:FA:61:6D:1E:CC:72:C6:7F:39:B2:0E:68:E6:62
Authority key identifier: 82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E
Certificate issuer:       /CN=82aa3ec58ba846d27a797111c5585153000dba0e
Certificate serial:       019CADFE1289220E05FEC211D295571CDB9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 10:00:35 +0000
Manifest this update:     Mon 02 Mar 2026 10:00:35 +0000
Manifest next update:     Tue 03 Mar 2026 10:00:35 +0000
Files and hashes:         1: Ue5qGAdMUuZjIAkWiew3rNK7iec.roa (hash: 0R2GCImaNBlpU0Y1AJHIDWb7A+a1HMHsb4hUInCPqe8=)
                          2: gqo-xYuoRtJ6eXERxVhRUwANug4.crl (hash: rsM+jEx5ypOpXbFufhyFod3tpdSlYoZ3DICi1JNVt+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 10:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:fe:12:89:22:0e:05:fe:c2:11:d2:95:57:1c:db:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82aa3ec58ba846d27a797111c5585153000dba0e
        Validity
            Not Before: Mar  2 10:00:35 2026 GMT
            Not After : Mar  3 10:00:35 2026 GMT
        Subject: CN=d5765cfe5893fa616d1ecc72c67f39b20e68e662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c3:71:9e:dd:ee:63:61:e5:b0:2f:04:48:3a:
                    a8:62:38:52:1e:40:5a:89:cb:d5:09:b4:60:85:7a:
                    43:1b:3f:15:80:16:85:92:39:de:be:89:97:7c:46:
                    7c:ec:e8:d4:66:22:83:43:4f:07:c8:30:39:e4:58:
                    7d:86:82:57:a1:20:e9:3b:95:79:be:01:b7:4a:58:
                    11:9a:c1:11:be:77:06:92:a1:64:59:d9:98:c3:08:
                    33:9d:9d:7a:a2:fa:91:c2:21:24:db:22:47:cd:29:
                    b4:47:1d:02:87:6d:5b:19:2f:72:0d:72:71:c6:e5:
                    06:02:45:ed:a9:ff:cd:ac:14:1a:df:52:90:c6:0e:
                    20:82:02:63:7a:a4:6f:ce:63:5a:12:1f:8c:5e:f0:
                    68:67:21:d0:5e:f5:94:e1:8c:f3:ac:28:c5:e4:88:
                    45:56:8f:e7:b3:f5:38:dc:7d:56:ca:f0:87:cd:f8:
                    bd:77:f5:fd:1d:f3:f8:4d:02:f1:e8:5e:6b:37:46:
                    61:1a:e0:c3:b2:74:d1:6d:e3:29:90:a9:3a:c8:62:
                    68:e0:22:30:29:0f:7a:f6:65:00:58:8c:f4:d7:d0:
                    86:4a:00:27:9b:c4:7f:cf:95:2a:39:9c:51:29:73:
                    68:2e:0c:a8:17:71:22:0d:53:61:55:0f:76:a5:ef:
                    c7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:76:5C:FE:58:93:FA:61:6D:1E:CC:72:C6:7F:39:B2:0E:68:E6:62
            X509v3 Authority Key Identifier:
                keyid:82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:a6:13:82:57:db:51:0c:7f:d3:fe:a2:27:57:94:5a:a4:5a:
         63:01:a5:15:75:20:43:3c:38:e8:89:fb:9a:a0:9f:0e:40:e2:
         72:01:4a:51:3e:5f:05:15:07:79:df:50:ed:1a:49:25:c5:4c:
         08:15:3a:3f:01:5d:de:7f:a6:bc:7b:0b:29:ba:78:d1:c2:3e:
         16:0d:62:35:63:75:21:fc:17:56:e5:74:fb:95:64:09:9e:6c:
         6a:cd:08:74:19:59:1e:b6:18:0a:4e:c3:c9:d6:96:35:d5:2c:
         cc:b3:90:b5:5b:79:d6:cb:2d:a4:4b:99:2a:74:89:a6:dd:47:
         d0:9d:ee:02:2c:7f:6b:c8:8f:17:fb:0b:c3:bc:2a:17:a0:f2:
         38:a4:10:77:4a:8f:35:3d:58:97:89:d8:24:2d:96:f9:5d:75:
         a5:b4:cb:e9:f2:fc:ca:f4:be:43:0b:a5:83:5b:a4:6d:c8:ba:
         2c:08:c8:51:4f:c2:64:c2:71:a2:29:fe:85:58:94:31:5a:42:
         3b:d0:1c:bb:a8:cb:25:f8:58:ff:ad:ed:a4:4c:5c:3f:c6:a7:
         e6:e3:44:73:4f:ce:b8:d4:b3:12:51:72:62:cd:68:27:c5:b0:
         80:c4:e8:69:ee:ed:0f:26:b0:09:70:87:f2:e7:fa:22:96:d8:
         f1:a4:fc:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/hKJIg4F/sIR0pVXHNucMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYWEzZWM1OGJhODQ2ZDI3YTc5NzExMWM1NTg1MTUzMDAw
ZGJhMGUwHhcNMjYwMzAyMTAwMDM1WhcNMjYwMzAzMTAwMDM1WjAzMTEwLwYDVQQD
EyhkNTc2NWNmZTU4OTNmYTYxNmQxZWNjNzJjNjdmMzliMjBlNjhlNjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8Nxnt3uY2HlsC8ESDqoYjhSHkBa
icvVCbRghXpDGz8VgBaFkjnevomXfEZ87OjUZiKDQ08HyDA55Fh9hoJXoSDpO5V5
vgG3SlgRmsERvncGkqFkWdmYwwgznZ16ovqRwiEk2yJHzSm0Rx0Ch21bGS9yDXJx
xuUGAkXtqf/NrBQa31KQxg4gggJjeqRvzmNaEh+MXvBoZyHQXvWU4YzzrCjF5IhF
Vo/ns/U43H1WyvCHzfi9d/X9HfP4TQLx6F5rN0ZhGuDDsnTRbeMpkKk6yGJo4CIw
KQ969mUAWIz019CGSgAnm8R/z5UqOZxRKXNoLgyoF3EiDVNhVQ92pe/HGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNV2XP5Yk/phbR7McsZ/ObIOaOZiMB8GA1UdIwQY
MBaAFIKqPsWLqEbSenlxEcVYUVMADboOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3FvLXhZdW9SdEo2ZVhFUnhWaFJVd0FOdWc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iMWM3ZjktYWQ5Yy00YmI3LWFjNDct
OTI3ZGQ0NTlhYzVjLzEvZ3FvLXhZdW9SdEo2ZVhFUnhWaFJVd0FOdWc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iMWM3ZjktYWQ5Yy00YmI3LWFjNDctOTI3ZGQ0NTlhYzVj
LzEvZ3FvLXhZdW9SdEo2ZVhFUnhWaFJVd0FOdWc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqYTglfb
UQx/0/6iJ1eUWqRaYwGlFXUgQzw46In7mqCfDkDicgFKUT5fBRUHed9Q7RpJJcVM
CBU6PwFd3n+mvHsLKbp40cI+Fg1iNWN1IfwXVuV0+5VkCZ5sas0IdBlZHrYYCk7D
ydaWNdUszLOQtVt51sstpEuZKnSJpt1H0J3uAix/a8iPF/sLw7wqF6DyOKQQd0qP
NT1Yl4nYJC2W+V11pbTL6fL8yvS+Qwulg1ukbci6LAjIUU/CZMJxoin+hViUMVpC
O9Acu6jLJfhY/63tpExcP8an5uNEc0/OuNSzElFyYs1oJ8WwgMToae7tDyawCXCH
8uf6IpbY8aT8gA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:43:21 2026 by rpki-client