Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
File:                     GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft (raw, json)
Hash identifier:          aJ9qD50IrhLbSdf5+o1KtBqqKyR4+eecQY0VX6PX5N8=
Subject key identifier:   7D:39:89:CA:B9:6F:4F:E3:DE:4C:06:CD:ED:CB:CD:D2:A3:A6:33:80
Authority key identifier: 18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC
Certificate issuer:       /CN=186590ee4a796301c422e033f944d263d6adeebc
Certificate serial:       019CAC4789ED8B3D2EF66F3F9E6406FD5A3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
Manifest number:          1376
Signing time:             Mon 02 Mar 2026 02:01:35 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:35 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:35 +0000
Files and hashes:         1: GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl (hash: E3jckKu3dJouLj8KPwM3CbV+lX8fl0Zpn4/u6OOtvwE=)
                          2: vDqQuNVASWfux49ii3xxJFfRld4.roa (hash: Ez2ZHwckh0VhggajM0dkx53jzrau9P9RypSE4OGXJCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:89:ed:8b:3d:2e:f6:6f:3f:9e:64:06:fd:5a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186590ee4a796301c422e033f944d263d6adeebc
        Validity
            Not Before: Mar  2 02:01:35 2026 GMT
            Not After : Mar  3 02:01:35 2026 GMT
        Subject: CN=7d3989cab96f4fe3de4c06cdedcbcdd2a3a63380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:85:a6:cd:eb:7c:65:29:3e:b5:8f:f5:8d:3f:
                    7a:26:7e:a2:4a:c4:7b:62:0f:ba:1f:03:0a:24:15:
                    45:16:47:84:38:ae:25:50:ae:ec:84:47:f0:e7:2a:
                    7d:65:1e:81:3f:f2:6e:fb:3d:f8:48:36:eb:91:ff:
                    db:ed:a8:9d:ef:a6:9c:12:6c:53:7e:98:4f:0d:04:
                    39:08:85:74:17:f1:f5:64:19:f7:27:19:4f:84:a7:
                    d3:e6:29:2b:6c:16:16:f1:1e:c4:00:a2:8f:d0:92:
                    53:46:11:9e:81:cf:fc:a4:ab:eb:9c:f4:7b:d6:b9:
                    01:d9:18:7e:3f:f7:e5:3d:d1:81:94:c2:1e:39:6a:
                    58:6d:ae:be:b6:d0:90:14:13:1d:32:51:0d:b5:da:
                    48:f2:3e:d0:ff:8d:07:37:c8:9e:4e:8c:3d:79:ec:
                    98:f4:4e:2e:bf:e2:73:8e:90:0c:af:cd:db:e7:11:
                    6e:df:f3:53:87:3c:b2:a9:83:33:33:74:75:99:78:
                    ef:da:f4:65:d0:58:06:d9:df:f6:91:58:e5:19:8a:
                    a2:ba:d5:fc:f7:28:5b:bd:c2:d0:a4:8a:d0:d3:37:
                    d4:4d:a9:da:24:d5:7d:52:c5:d8:f7:ec:79:fb:73:
                    7c:b5:7c:57:87:ff:4c:61:3a:34:d2:af:6e:70:c3:
                    70:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:39:89:CA:B9:6F:4F:E3:DE:4C:06:CD:ED:CB:CD:D2:A3:A6:33:80
            X509v3 Authority Key Identifier:
                keyid:18:65:90:EE:4A:79:63:01:C4:22:E0:33:F9:44:D2:63:D6:AD:EE:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGWQ7kp5YwHEIuAz-UTSY9at7rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/80b8cf-576d-4044-a624-ae72bfd3f782/1/GGWQ7kp5YwHEIuAz-UTSY9at7rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:9c:92:14:2d:40:2c:b1:e6:f1:9b:d5:08:bc:d7:25:f6:d9:
         f7:9f:af:0f:84:3f:a5:fc:a4:8b:17:76:c4:80:34:bd:a0:17:
         5a:a0:8e:1d:a3:c6:b4:22:c1:9a:4c:3b:b7:25:09:20:97:b2:
         68:c8:57:91:b5:8b:af:31:9e:c9:91:cb:17:a5:87:c6:62:63:
         14:5f:07:49:56:ee:69:c6:16:41:dd:8e:c5:00:ba:b2:87:f3:
         98:34:c3:90:47:6a:74:e9:76:0d:da:06:e5:af:39:09:94:ab:
         54:a8:c5:e5:89:4c:79:7d:bc:9f:70:74:96:bd:ce:ad:04:3a:
         19:d9:59:93:71:06:1e:3f:16:6c:28:6e:52:38:de:38:9a:27:
         de:6d:58:e8:62:d8:da:8f:9c:47:67:94:bf:3d:6a:1f:23:fd:
         f7:e9:67:15:67:c6:50:3b:1a:41:49:a0:ef:66:59:e1:b5:dd:
         89:bc:e8:86:f4:83:fe:2d:35:ea:c7:8b:94:25:37:6e:88:4c:
         11:70:c0:aa:25:27:57:ac:37:8d:78:f4:e2:34:ad:9f:1d:ac:
         4f:7e:64:1e:d5:4c:ec:b7:9d:36:40:b5:35:c4:7c:6f:79:cd:
         af:49:7e:ef:b1:30:42:3d:32:5d:1b:8d:01:50:63:43:43:cb:
         e7:b1:03:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:00 2026 by rpki-client