Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
File:                     gwn4FzfW8X58GtWISa_3HFAGTwQ.mft (raw, json)
Hash identifier:          GwQK0h3MPbE1N6/GX97N+lT3d85Xb7IE7CQFfyWkW3k=
Subject key identifier:   0C:93:88:F4:26:43:49:68:36:8A:0A:F8:89:67:8D:F8:F8:6D:D9:04
Authority key identifier: 83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04
Certificate issuer:       /CN=8309f81737d6f17e7c1ad58849aff71c50064f04
Certificate serial:       019CAC7DE967CD530C1B91FFD02534BCBF9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
Manifest number:          162E
Signing time:             Mon 02 Mar 2026 03:00:58 +0000
Manifest this update:     Mon 02 Mar 2026 03:00:58 +0000
Manifest next update:     Tue 03 Mar 2026 03:00:58 +0000
Files and hashes:         1: b5oUI_QaX4CIrD9gVfpSglG-l0g.roa (hash: yb9qoXzX3+CuYySvgkHy2fr0k4HAjW35z3hNaIhuEm8=)
                          2: gwn4FzfW8X58GtWISa_3HFAGTwQ.crl (hash: oEAF42F/UnhBmFEM3zpmHTCoExT188md4bNuveqanfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7d:e9:67:cd:53:0c:1b:91:ff:d0:25:34:bc:bf:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8309f81737d6f17e7c1ad58849aff71c50064f04
        Validity
            Not Before: Mar  2 03:00:58 2026 GMT
            Not After : Mar  3 03:00:58 2026 GMT
        Subject: CN=0c9388f426434968368a0af889678df8f86dd904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:db:97:4a:42:f9:fa:d1:a7:68:de:9c:f1:fa:
                    27:f6:3f:f3:9e:c4:b5:2c:cd:e3:e6:6d:ec:15:51:
                    a1:73:4b:67:9c:a8:b3:e2:f7:ff:6e:c6:99:74:54:
                    f3:aa:bc:8c:12:12:a6:22:b8:16:aa:ef:71:3e:bf:
                    e0:cd:36:e2:5c:0e:09:20:48:9d:65:24:ac:0a:68:
                    d7:f2:22:9c:03:c1:50:9a:ed:3e:29:39:38:80:8d:
                    0b:5a:3b:39:b3:ca:5e:bb:e9:48:5a:96:26:75:41:
                    aa:28:e9:46:d7:b9:6d:4c:20:d7:d3:97:b9:00:1c:
                    df:1c:79:1c:89:63:34:b6:7a:57:f7:8f:8e:da:b8:
                    76:2c:30:2d:21:bd:a5:b7:2d:4f:b1:c0:80:e4:f7:
                    2b:82:bc:3a:e7:19:95:ee:ab:d7:36:98:5c:50:11:
                    a5:10:01:3e:e5:3c:93:88:4f:52:71:3a:e9:f1:e4:
                    29:ba:61:18:ff:69:e5:24:2e:0f:64:89:58:14:bd:
                    cc:87:21:09:3f:1d:ff:b7:23:4b:31:87:9d:a5:9f:
                    9a:1a:f2:13:6a:3b:11:ce:19:55:cf:58:a9:ba:ae:
                    64:1b:d6:ba:94:99:75:24:48:4c:94:9f:f9:7e:f1:
                    3d:a1:9b:07:8c:b8:f1:5c:75:ad:01:7f:6c:0c:b0:
                    fe:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:93:88:F4:26:43:49:68:36:8A:0A:F8:89:67:8D:F8:F8:6D:D9:04
            X509v3 Authority Key Identifier:
                keyid:83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:55:06:7d:02:b5:cd:f5:be:e1:b0:92:21:57:7d:1a:ab:cf:
         91:03:49:14:d8:59:67:42:af:c1:89:13:d0:98:ab:1c:7f:ed:
         8a:5d:37:f5:04:0b:fc:a3:ed:90:71:b5:86:6d:b5:28:f8:06:
         eb:d7:bd:38:31:f2:5c:d2:d6:b7:2f:08:4e:1e:0c:3a:c5:93:
         e9:f0:26:13:98:7d:77:ac:41:fd:2f:6f:6b:07:e8:f8:54:ce:
         3e:d1:4f:fe:77:10:10:68:3a:1c:ac:16:35:91:be:7f:3a:de:
         67:31:7e:ba:50:29:fb:f0:9d:69:01:37:b3:24:ab:d6:5d:80:
         79:a8:83:e0:ca:1d:42:18:b6:df:fe:fa:2e:73:1e:57:7f:a1:
         18:00:0f:c7:a1:a5:89:3e:26:c3:98:6e:e8:7c:9e:6f:f7:bd:
         5d:9b:4c:70:5a:12:d2:79:48:15:2b:e4:c7:df:98:15:10:36:
         f2:63:be:9f:b4:61:f7:02:69:a7:bd:f5:78:f7:06:44:7f:ab:
         fd:e5:8c:a2:03:da:62:97:00:c7:63:aa:19:67:e5:26:38:1a:
         68:d6:3e:ac:79:49:59:0b:cc:c0:3f:82:65:0f:5e:17:82:b0:
         a0:68:00:60:c1:4c:64:1a:18:4f:a7:7c:c9:e3:ed:fa:f7:58:
         99:5e:65:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:00 2026 by rpki-client