Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
File:                     g_gpRGn7euwmAbsDdy0BVvRwt00.mft (raw, json)
Hash identifier:          fnxeZQ3VfMlOuhfimS5GvSd2H8lOgYxF3htiNEOvC38=
Subject key identifier:   53:69:FC:A8:27:DA:D1:18:D3:CB:4A:67:43:C1:07:79:84:57:61:BD
Authority key identifier: 83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D
Certificate issuer:       /CN=83f8294469fb7aec2601bb03772d0156f470b74d
Certificate serial:       019CAA8FF358D3EA04025AE3E6B785561EF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 18:01:26 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:26 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:26 +0000
Files and hashes:         1: gEd6QeiAQ932jPLYrtnGG0ZTT6w.roa (hash: RPvaNvrZcdDQu4AbrRZ97MsyJRS0F3BlThyjoqYHdHI=)
                          2: g_gpRGn7euwmAbsDdy0BVvRwt00.crl (hash: F8yIPJNl0chvGcntoQQPsKu7QWSmOOm6RePfz3a8+aE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:f3:58:d3:ea:04:02:5a:e3:e6:b7:85:56:1e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83f8294469fb7aec2601bb03772d0156f470b74d
        Validity
            Not Before: Mar  1 18:01:26 2026 GMT
            Not After : Mar  2 18:01:26 2026 GMT
        Subject: CN=5369fca827dad118d3cb4a6743c10779845761bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8f:a3:02:e7:4a:a2:e1:7d:26:f8:6f:c9:2b:
                    20:34:4e:5a:73:04:21:d0:27:64:76:3a:a7:e7:0e:
                    e8:87:d1:e9:d7:a2:90:3b:4a:a2:82:f7:38:50:ea:
                    97:94:96:1c:d5:a6:86:51:4f:60:14:fc:9e:dd:d8:
                    be:ff:66:04:08:dc:3b:d7:bc:f1:6f:c4:f1:97:22:
                    ed:08:74:df:69:ac:a1:b9:62:7f:d1:c0:c9:20:dc:
                    cd:8d:4e:fd:67:36:d5:60:6d:17:d9:30:dd:a9:22:
                    f2:f2:d8:b0:41:3c:b1:e8:f0:21:3e:41:2e:89:fd:
                    6a:e5:de:44:90:e4:8c:f9:91:a1:c8:be:e7:01:1b:
                    20:e7:80:ee:4a:d4:27:19:d7:4c:5b:89:0d:df:22:
                    46:bf:81:5d:e0:6b:c1:c8:d1:db:18:23:04:82:8f:
                    5a:56:b1:ad:03:ea:36:99:b3:79:3d:ae:7a:36:50:
                    84:94:12:ed:09:c4:24:f1:86:f5:ae:39:0f:6c:e3:
                    d4:83:25:5e:e1:32:f6:b2:60:77:81:16:04:97:03:
                    4b:2a:27:d2:18:65:cf:4a:2d:15:71:5c:09:8e:fc:
                    56:83:6e:15:5f:82:56:a3:30:00:81:5c:d8:14:b1:
                    36:1b:ce:aa:9d:75:e0:44:9a:61:71:f0:b4:7c:b1:
                    f0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:69:FC:A8:27:DA:D1:18:D3:CB:4A:67:43:C1:07:79:84:57:61:BD
            X509v3 Authority Key Identifier:
                keyid:83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:3b:09:b3:5b:d8:8c:65:88:8d:2c:e6:7d:68:bf:bb:d1:9c:
         e2:20:9c:9e:80:08:63:e2:6e:85:fa:06:57:33:15:fb:ef:f5:
         87:b9:fb:ec:b7:d9:db:cb:76:c2:5c:c6:51:28:a6:dc:c2:e1:
         d3:4f:cd:61:cc:b2:38:b1:0e:82:e3:22:c7:8d:b1:27:46:9b:
         62:3f:4f:68:af:43:97:c8:0d:70:4f:dc:b3:c6:97:00:6e:e4:
         98:ba:6e:5f:b0:7a:5c:ae:a9:04:bc:f5:f2:e8:a3:8d:4f:17:
         16:1c:b5:23:bb:a9:a3:23:fb:61:30:c4:9d:e2:19:da:0a:ba:
         f1:d5:52:2e:3e:0f:66:c7:95:42:a1:fc:13:72:93:4e:64:15:
         7e:2e:b0:c7:98:ab:cd:d0:45:5c:33:97:aa:08:bd:5a:e5:90:
         24:f5:2d:41:17:d3:8b:39:11:ab:f0:28:6c:4b:3b:a4:ef:1e:
         fb:f0:35:a4:f0:b4:12:fc:2d:c6:08:86:3d:9a:4c:4f:83:d5:
         ac:42:4a:43:9e:08:df:71:84:19:f2:48:63:be:5c:f2:76:09:
         cb:9f:df:d4:98:f4:8b:33:c0:61:b0:4d:08:c1:7d:3e:e6:a6:
         04:46:01:31:ac:75:41:8c:83:cd:f9:d7:d2:5d:e1:e2:2c:ee:
         c2:d8:93:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj/NY0+oEAlrj5reFVh7xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZjgyOTQ0NjlmYjdhZWMyNjAxYmIwMzc3MmQwMTU2ZjQ3
MGI3NGQwHhcNMjYwMzAxMTgwMTI2WhcNMjYwMzAyMTgwMTI2WjAzMTEwLwYDVQQD
Eyg1MzY5ZmNhODI3ZGFkMTE4ZDNjYjRhNjc0M2MxMDc3OTg0NTc2MWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o+jAudKouF9JvhvySsgNE5acwQh
0Cdkdjqn5w7oh9Hp16KQO0qigvc4UOqXlJYc1aaGUU9gFPye3di+/2YECNw717zx
b8TxlyLtCHTfaayhuWJ/0cDJINzNjU79ZzbVYG0X2TDdqSLy8tiwQTyx6PAhPkEu
if1q5d5EkOSM+ZGhyL7nARsg54DuStQnGddMW4kN3yJGv4Fd4GvByNHbGCMEgo9a
VrGtA+o2mbN5Pa56NlCElBLtCcQk8Yb1rjkPbOPUgyVe4TL2smB3gRYElwNLKifS
GGXPSi0VcVwJjvxWg24VX4JWozAAgVzYFLE2G86qnXXgRJphcfC0fLHwMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNp/Kgn2tEY08tKZ0PBB3mEV2G9MB8GA1UdIwQY
MBaAFIP4KURp+3rsJgG7A3ctAVb0cLdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ19ncFJHbjdldXdtQWJzRGR5MEJWdlJ3dDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My84NjFmMzItODFmNC00ZDY0LTg2MTAt
NTRkZTdhNmNiM2IxLzEvZ19ncFJHbjdldXdtQWJzRGR5MEJWdlJ3dDAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My84NjFmMzItODFmNC00ZDY0LTg2MTAtNTRkZTdhNmNiM2Ix
LzEvZ19ncFJHbjdldXdtQWJzRGR5MEJWdlJ3dDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDsJs1vY
jGWIjSzmfWi/u9Gc4iCcnoAIY+JuhfoGVzMV++/1h7n77LfZ28t2wlzGUSim3MLh
00/NYcyyOLEOguMix42xJ0abYj9PaK9Dl8gNcE/cs8aXAG7kmLpuX7B6XK6pBLz1
8uijjU8XFhy1I7upoyP7YTDEneIZ2gq68dVSLj4PZseVQqH8E3KTTmQVfi6wx5ir
zdBFXDOXqgi9WuWQJPUtQRfTizkRq/AobEs7pO8e+/A1pPC0EvwtxgiGPZpMT4PV
rEJKQ54I33GEGfJIY75c8nYJy5/f1Jj0izPAYbBNCMF9PuamBEYBMax1QYyDzfnX
0l3h4izuwtiTRw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:52 2026 by rpki-client