Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
File:                     GJPt3vXPw41hPqqBd03jADSxnSI.mft (raw, json)
Hash identifier:          grLIAUFNasubxe9WDgIe0KxkFkO9DF9SgTI3s6ax2nM=
Subject key identifier:   A8:65:FC:5C:11:5B:56:43:FF:94:7B:32:A6:E1:55:3A:D5:BC:2D:24
Authority key identifier: 18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22
Certificate issuer:       /CN=1893eddef5cfc38d613eaa81774de30034b19d22
Certificate serial:       019CAE6C33803104A47332524054BB336BEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
Manifest number:          0F0C
Signing time:             Mon 02 Mar 2026 12:00:52 +0000
Manifest this update:     Mon 02 Mar 2026 12:00:52 +0000
Manifest next update:     Tue 03 Mar 2026 12:00:52 +0000
Files and hashes:         1: 9sB_vHUgC-_EodoFbCdcvENaK2I.roa (hash: tq6qmUHiw2q3r/kSJH5BUwG8qmtzNDhdzVo//Qk1ZPs=)
                          2: GJPt3vXPw41hPqqBd03jADSxnSI.crl (hash: TsUS2JFc7mGfE/D8kqUbQMTIcR3kiF1EtjYSDcHuYOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:6c:33:80:31:04:a4:73:32:52:40:54:bb:33:6b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1893eddef5cfc38d613eaa81774de30034b19d22
        Validity
            Not Before: Mar  2 12:00:52 2026 GMT
            Not After : Mar  3 12:00:52 2026 GMT
        Subject: CN=a865fc5c115b5643ff947b32a6e1553ad5bc2d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ed:28:a4:8a:a7:c2:77:62:00:5a:c7:aa:b5:
                    32:cd:e2:47:01:74:e6:7e:0e:e3:9d:da:31:3a:f0:
                    89:79:9d:86:25:d7:bb:a6:30:6f:0a:36:d3:ce:1a:
                    af:27:03:ce:1f:40:72:48:5c:bd:7e:dc:32:cd:a7:
                    60:5e:22:ce:75:b5:86:f4:97:88:b3:b3:f7:64:a1:
                    77:27:d7:8c:6f:c9:9c:76:12:61:d6:e7:b1:f0:44:
                    f6:75:0b:ca:a6:7f:a4:e2:da:93:89:a8:37:57:c1:
                    b0:1e:53:3d:06:65:52:5c:12:25:01:96:8d:de:ab:
                    5e:84:84:b6:86:a9:b9:bb:42:bc:29:af:29:3b:28:
                    2c:f0:1b:a4:12:a7:de:3b:06:d7:c6:e4:30:f8:7d:
                    eb:4e:2e:fe:b7:87:88:ee:aa:cb:8f:dc:b0:ba:16:
                    aa:18:fc:f8:61:ff:d7:7a:28:a4:71:69:ec:22:60:
                    c2:04:0f:7c:03:bd:a3:bc:3d:97:24:4d:0b:86:c7:
                    34:19:d4:da:72:35:b1:98:30:9f:27:7f:eb:36:be:
                    e6:84:be:75:3e:0c:ee:c2:d8:7d:ed:1b:b9:09:2f:
                    45:64:7b:31:22:3c:fd:0d:9f:94:47:6e:c8:0d:35:
                    fb:45:ed:17:e1:da:21:67:29:99:2a:36:18:c9:3b:
                    54:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:65:FC:5C:11:5B:56:43:FF:94:7B:32:A6:E1:55:3A:D5:BC:2D:24
            X509v3 Authority Key Identifier:
                keyid:18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f6:63:44:f1:7d:13:b4:bc:2b:e9:33:bf:66:0e:20:4d:52:
         1a:22:b4:a7:85:c1:5d:7f:5e:1b:7d:87:1b:90:cf:72:ec:fd:
         2e:af:cc:9b:7f:1a:6c:27:d7:8b:33:41:bc:b4:85:e3:37:ca:
         94:68:91:27:24:4c:6d:97:d1:86:3a:f7:ed:3b:5f:44:e7:c1:
         fe:77:24:04:13:87:81:06:8c:97:a2:56:5b:de:6f:b0:ec:5d:
         f1:e0:33:70:0b:b6:a5:79:07:a6:46:ce:62:d1:45:f3:35:d6:
         67:d8:62:b7:df:5c:06:72:c4:1b:2c:4f:f2:1a:90:96:da:e7:
         4c:39:3b:ca:12:76:0b:ab:05:5f:90:28:6d:84:ee:91:6b:e0:
         13:37:81:af:08:de:ef:73:a4:eb:7d:0d:70:3c:55:47:9d:12:
         37:74:da:77:c9:d6:f2:ce:9b:69:42:2e:85:1c:86:5f:32:a8:
         87:98:bf:69:2b:dd:3c:7b:dc:22:0a:a2:c7:81:84:7b:49:c8:
         65:92:ec:ff:20:92:15:74:f3:37:b6:63:43:28:d9:0d:21:f0:
         80:aa:18:2e:5e:a0:30:8f:2f:56:11:f5:eb:0f:eb:a3:dc:40:
         97:7c:ce:40:c2:62:91:ed:b9:0a:56:3c:1d:d4:fe:6d:8f:d3:
         48:9a:91:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyubDOAMQSkczJSQFS7M2vqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OTNlZGRlZjVjZmMzOGQ2MTNlYWE4MTc3NGRlMzAwMzRi
MTlkMjIwHhcNMjYwMzAyMTIwMDUyWhcNMjYwMzAzMTIwMDUyWjAzMTEwLwYDVQQD
EyhhODY1ZmM1YzExNWI1NjQzZmY5NDdiMzJhNmUxNTUzYWQ1YmMyZDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+0opIqnwndiAFrHqrUyzeJHAXTm
fg7jndoxOvCJeZ2GJde7pjBvCjbTzhqvJwPOH0BySFy9ftwyzadgXiLOdbWG9JeI
s7P3ZKF3J9eMb8mcdhJh1uex8ET2dQvKpn+k4tqTiag3V8GwHlM9BmVSXBIlAZaN
3qtehIS2hqm5u0K8Ka8pOygs8BukEqfeOwbXxuQw+H3rTi7+t4eI7qrLj9ywuhaq
GPz4Yf/XeiikcWnsImDCBA98A72jvD2XJE0Lhsc0GdTacjWxmDCfJ3/rNr7mhL51
Pgzuwth97Ru5CS9FZHsxIjz9DZ+UR27IDTX7Re0X4dohZymZKjYYyTtUPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhl/FwRW1ZD/5R7MqbhVTrVvC0kMB8GA1UdIwQY
MBaAFBiT7d71z8ONYT6qgXdN4wA0sZ0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0pQdDN2WFB3NDFoUHFxQmQwM2pBRFN4blNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xM2Y4YzUtYWI3YS00ZjM3LWIyZDct
OGI1MTc5MmM2NjYwLzEvR0pQdDN2WFB3NDFoUHFxQmQwM2pBRFN4blNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8xM2Y4YzUtYWI3YS00ZjM3LWIyZDctOGI1MTc5MmM2NjYw
LzEvR0pQdDN2WFB3NDFoUHFxQmQwM2pBRFN4blNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/ZjRPF9
E7S8K+kzv2YOIE1SGiK0p4XBXX9eG32HG5DPcuz9Lq/Mm38abCfXizNBvLSF4zfK
lGiRJyRMbZfRhjr37TtfROfB/nckBBOHgQaMl6JWW95vsOxd8eAzcAu2pXkHpkbO
YtFF8zXWZ9hit99cBnLEGyxP8hqQltrnTDk7yhJ2C6sFX5AobYTukWvgEzeBrwje
73Ok630NcDxVR50SN3Tad8nW8s6baUIuhRyGXzKoh5i/aSvdPHvcIgqix4GEe0nI
ZZLs/yCSFXTzN7ZjQyjZDSHwgKoYLl6gMI8vVhH16w/ro9xAl3zOQMJike25ClY8
HdT+bY/TSJqRGQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:38:33 2026 by rpki-client