Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
File:                     GCJBwqTNGwi_W6VBLUkcScjrh40.mft (raw, json)
Hash identifier:          Yyxgs+uVCMucBj02CVUJ0/okJm/Uv3aFqFNJw5YX+ag=
Subject key identifier:   EA:BE:01:DB:0B:C8:1F:9E:2C:A5:37:9D:C7:DF:80:D5:42:CE:1A:D3
Authority key identifier: 18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D
Certificate issuer:       /CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
Certificate serial:       019CAD9092B558EC7A2B9409DE6BD60F5639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
Manifest number:          052D
Signing time:             Mon 02 Mar 2026 08:00:58 +0000
Manifest this update:     Mon 02 Mar 2026 08:00:58 +0000
Manifest next update:     Tue 03 Mar 2026 08:00:58 +0000
Files and hashes:         1: GCJBwqTNGwi_W6VBLUkcScjrh40.crl (hash: iOeSYE6XTj9F+e5WaPleCAFb5tiC1JCgCs4C/4OMn0U=)
                          2: PeoNHXokHMDq2XG5umTEZp1JMkI.roa (hash: knYWEfrEJBE1/OQa/3XQPBybR/ExGW5sYDHbUzsYQWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:92:b5:58:ec:7a:2b:94:09:de:6b:d6:0f:56:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
        Validity
            Not Before: Mar  2 08:00:58 2026 GMT
            Not After : Mar  3 08:00:58 2026 GMT
        Subject: CN=eabe01db0bc81f9e2ca5379dc7df80d542ce1ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fd:34:21:d3:cb:5b:b1:a9:60:cc:90:ee:a0:
                    64:c0:f9:18:ed:dd:77:ed:9d:50:ff:1a:1c:64:d6:
                    04:ce:36:ab:eb:cd:18:f5:44:56:8b:01:0a:ac:f5:
                    9f:0d:ed:63:d4:6b:e9:0f:96:43:cb:25:88:ae:c7:
                    0a:1d:3e:c4:c4:c2:30:a4:ba:98:bf:a9:8b:a2:9c:
                    9a:91:f6:42:d4:94:ab:2e:3b:a9:66:86:40:6a:14:
                    49:76:05:41:85:ff:66:d6:db:63:20:a6:d5:0e:15:
                    38:00:a8:58:bc:f2:ae:d7:c8:77:6b:d0:cd:6f:9f:
                    ee:33:27:0f:6a:fc:51:fa:53:20:8b:f1:74:63:10:
                    28:3c:d3:93:49:1f:3c:e0:45:03:49:1a:fb:b2:46:
                    aa:ab:d3:19:d7:1d:c1:13:7d:71:ca:51:15:e0:c9:
                    3e:dd:63:fb:7f:d9:3c:f4:fc:2c:ee:9f:2f:72:89:
                    04:91:ad:c5:12:5f:31:16:9a:3c:64:12:c3:ad:3c:
                    4e:cf:a6:5d:e5:37:ad:bc:68:8a:d0:c6:63:80:ba:
                    4c:2c:4b:8c:44:21:3f:1e:62:0b:03:6c:02:7f:5a:
                    3a:1a:d7:3d:05:cb:92:3c:fe:95:9f:3f:76:47:12:
                    1c:28:21:18:8f:05:0d:8f:8d:af:ac:df:e6:dd:d6:
                    b3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BE:01:DB:0B:C8:1F:9E:2C:A5:37:9D:C7:DF:80:D5:42:CE:1A:D3
            X509v3 Authority Key Identifier:
                keyid:18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:09:d7:49:5a:2e:5e:b9:29:5c:36:06:ce:0b:7e:12:a4:de:
         e3:67:79:32:8d:18:4a:2a:ad:cc:79:d6:bf:cc:00:da:50:b0:
         31:83:90:46:f2:da:00:e6:61:eb:3c:4e:ed:ca:5e:17:fd:c0:
         29:94:e0:b8:e6:64:62:fd:fa:79:e1:0f:f8:34:87:85:df:ec:
         b3:90:d3:95:bd:94:16:60:cf:e4:69:d0:71:48:dd:59:ce:28:
         c2:e3:90:ca:5b:82:c8:d4:b5:3d:1c:f6:86:a0:89:c1:85:cb:
         61:fc:b5:2d:24:b7:02:ff:a9:96:98:9d:ab:9c:95:c4:c3:3c:
         95:d3:17:90:46:6f:0e:3b:19:45:61:87:b2:ff:a1:84:77:d7:
         62:18:98:99:12:69:75:5a:f9:4e:b3:78:5d:21:93:ff:bb:3b:
         48:36:74:66:5a:86:88:50:81:cc:c8:3a:4d:a8:01:ff:b7:36:
         0b:ca:f8:a3:66:c1:fb:e4:6a:9a:47:4c:4a:ff:d2:5c:0d:66:
         c2:64:9a:11:31:45:c2:a1:16:c0:a2:de:b4:6d:33:f6:03:91:
         4b:5f:2f:33:fb:ab:02:a4:cc:b4:7f:52:de:45:9a:2b:72:de:
         48:40:02:07:0c:e3:9c:83:3a:ef:36:bf:23:65:e5:c3:e3:7c:
         7b:e3:1c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:45 2026 by rpki-client