Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
File:                     GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft (raw, json)
Hash identifier:          mHY50JISeUMxuhby8DgtrbA4JOf+MzxvdZ683E2QgHc=
Subject key identifier:   07:99:83:C9:8A:D2:2A:55:0D:BB:9F:BE:30:5C:F9:6C:08:10:2A:EE
Authority key identifier: 1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12
Certificate issuer:       /CN=1a228183490ac6b2523dbfcc087c13816f9c2612
Certificate serial:       019CAD905D6B9F0B6C4FB60705EDAFC8A040
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 08:00:45 +0000
Manifest this update:     Mon 02 Mar 2026 08:00:45 +0000
Manifest next update:     Tue 03 Mar 2026 08:00:45 +0000
Files and hashes:         1: 2gMkKbJA554Yq2voG-iU3zjpglc.roa (hash: wMFCnORiTnuilB2AGLAPYKYN/hd+vlQrA8D8lSugV4Y=)
                          2: GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl (hash: DBrk1NU95exLOtFYHcWmdsBxDoDO5ZoWVtKJgiNr+FQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:5d:6b:9f:0b:6c:4f:b6:07:05:ed:af:c8:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a228183490ac6b2523dbfcc087c13816f9c2612
        Validity
            Not Before: Mar  2 08:00:45 2026 GMT
            Not After : Mar  3 08:00:45 2026 GMT
        Subject: CN=079983c98ad22a550dbb9fbe305cf96c08102aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ab:25:9b:e4:25:31:0b:71:b8:f0:11:60:f1:
                    5b:42:69:b5:b6:d0:4a:e2:25:51:23:d2:a8:9b:44:
                    4b:f7:fd:03:20:f4:f8:51:25:df:fd:2f:7e:72:b4:
                    ea:be:0b:92:79:53:e3:06:2b:39:17:93:2d:99:a8:
                    34:2d:69:3d:79:72:73:50:97:2f:50:2a:4f:73:9e:
                    fd:72:d0:3f:2d:b2:59:60:21:38:d3:05:ed:3e:c4:
                    60:b0:f0:e0:65:38:bf:f0:a6:0e:bb:08:2f:5f:52:
                    fc:21:95:54:21:67:11:8c:26:0d:da:39:f0:f1:4a:
                    93:49:f4:d1:94:c7:6c:b1:c8:bf:3a:20:9a:f9:2f:
                    d0:a8:ae:ef:a4:e5:02:18:7c:b6:a2:81:b9:87:ba:
                    da:b3:1b:81:1b:f7:b4:4c:14:21:7e:ff:42:f6:a7:
                    18:57:53:b4:7a:2c:9c:c3:26:19:c0:75:d3:c0:c3:
                    b6:06:34:5c:a3:6f:e2:85:55:f0:5a:8a:b0:fa:ca:
                    80:5b:c3:fd:af:8f:e7:79:13:9e:18:e2:67:96:9f:
                    a4:60:6c:4b:89:90:3d:c2:b6:0e:7e:f5:a1:4e:1a:
                    58:2a:2c:13:92:0a:1c:fe:62:0e:12:ca:d9:4e:0f:
                    1e:9d:02:37:a1:5f:38:60:5e:05:08:ba:c4:11:52:
                    17:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:99:83:C9:8A:D2:2A:55:0D:BB:9F:BE:30:5C:F9:6C:08:10:2A:EE
            X509v3 Authority Key Identifier:
                keyid:1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:6b:8f:b5:f3:f5:36:4d:14:2a:ad:08:14:61:60:c0:c0:80:
         39:ae:92:ad:8d:32:ac:eb:0d:3a:0a:95:5f:03:2a:42:a1:6c:
         e0:1d:43:dc:f8:29:be:12:a4:a4:84:ea:b2:8e:7e:15:b9:da:
         ea:5e:59:e2:56:ab:e9:4e:fb:87:f4:0e:e9:9e:3e:00:5c:c7:
         10:4f:c1:98:b7:c9:08:33:7f:79:74:2a:26:c9:1f:2c:9c:0b:
         7a:1b:ea:75:91:1d:52:fe:75:cb:4f:2d:3f:d0:a6:71:25:6a:
         d6:41:81:ac:31:5a:a5:aa:be:79:5c:14:7d:d1:db:ef:e8:6c:
         c9:7b:15:3a:3d:26:0b:9e:9f:98:99:8e:4e:cc:ef:bd:7f:06:
         f7:29:dc:e7:fb:e8:6c:17:c3:e2:69:76:b2:00:ce:b8:a6:aa:
         40:14:e1:65:13:47:8b:6b:a0:1c:fd:27:9b:89:63:82:e1:15:
         74:b2:65:92:8b:fa:19:72:d3:a2:73:bb:49:6b:46:f4:54:8b:
         02:06:1e:b0:58:f2:c2:3d:25:87:67:ee:2c:46:18:04:06:e8:
         7a:22:e4:6d:d6:42:7a:a8:20:0b:63:b7:52:2c:d7:d8:6d:08:
         4a:b7:c0:e4:aa:d5:31:72:c9:80:d0:55:78:0d:23:0d:25:ca:
         0f:92:d5:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkF1rnwtsT7YHBe2vyKBAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMjI4MTgzNDkwYWM2YjI1MjNkYmZjYzA4N2MxMzgxNmY5
YzI2MTIwHhcNMjYwMzAyMDgwMDQ1WhcNMjYwMzAzMDgwMDQ1WjAzMTEwLwYDVQQD
EygwNzk5ODNjOThhZDIyYTU1MGRiYjlmYmUzMDVjZjk2YzA4MTAyYWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaslm+QlMQtxuPARYPFbQmm1ttBK
4iVRI9Kom0RL9/0DIPT4USXf/S9+crTqvguSeVPjBis5F5Mtmag0LWk9eXJzUJcv
UCpPc579ctA/LbJZYCE40wXtPsRgsPDgZTi/8KYOuwgvX1L8IZVUIWcRjCYN2jnw
8UqTSfTRlMdssci/OiCa+S/QqK7vpOUCGHy2ooG5h7rasxuBG/e0TBQhfv9C9qcY
V1O0eiycwyYZwHXTwMO2BjRco2/ihVXwWoqw+sqAW8P9r4/neROeGOJnlp+kYGxL
iZA9wrYOfvWhThpYKiwTkgoc/mIOEsrZTg8enQI3oV84YF4FCLrEEVIXSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAeZg8mK0ipVDbufvjBc+WwIECruMB8GA1UdIwQY
MBaAFBoigYNJCsayUj2/zAh8E4FvnCYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2lLQmcwa0t4ckpTUGJfTUNId1RnVy1jSmhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85NjEwNmYtM2RhMy00YTY3LWJiM2Mt
NjljNGU4NTMzNTIxLzEvR2lLQmcwa0t4ckpTUGJfTUNId1RnVy1jSmhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi85NjEwNmYtM2RhMy00YTY3LWJiM2MtNjljNGU4NTMzNTIx
LzEvR2lLQmcwa0t4ckpTUGJfTUNId1RnVy1jSmhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmuPtfP1
Nk0UKq0IFGFgwMCAOa6SrY0yrOsNOgqVXwMqQqFs4B1D3PgpvhKkpITqso5+Fbna
6l5Z4lar6U77h/QO6Z4+AFzHEE/BmLfJCDN/eXQqJskfLJwLehvqdZEdUv51y08t
P9CmcSVq1kGBrDFapaq+eVwUfdHb7+hsyXsVOj0mC56fmJmOTszvvX8G9ync5/vo
bBfD4ml2sgDOuKaqQBThZRNHi2ugHP0nm4ljguEVdLJlkov6GXLTonO7SWtG9FSL
AgYesFjywj0lh2fuLEYYBAboeiLkbdZCeqggC2O3UizX2G0ISrfA5KrVMXLJgNBV
eA0jDSXKD5LVwQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:00:39 2026 by rpki-client