Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
File:                     gPPzEUyqjpJigXJfcn1gjZM5URg.mft (raw, json)
Hash identifier:          w7fyVeiJpfWYJv7PFqh9d4JbcSbnJFRT48IU3gIxXTE=
Subject key identifier:   14:37:44:BE:8D:EA:8E:47:2B:51:8D:CD:A9:9A:4F:4E:6E:F9:84:80
Authority key identifier: 80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
Certificate issuer:       /CN=80f3f3114caa8e926281725f727d608d93395118
Certificate serial:       019CACEBA8D16C9DB9B6A87FE2BFE07E911F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
Manifest number:          0492
Signing time:             Mon 02 Mar 2026 05:00:51 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:51 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:51 +0000
Files and hashes:         1: 9VgFj1U5AyYKHqnm3AK0iZ8EyZY.roa (hash: y0d6gj7QyX83YX1GU3wakz/LTeS7oSLMM+wcVlzLLQc=)
                          2: gPPzEUyqjpJigXJfcn1gjZM5URg.crl (hash: nWq0LvwIwkaOiutu6I0YVY1BcLcFOuR8arI4yfNHYTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 05:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:a8:d1:6c:9d:b9:b6:a8:7f:e2:bf:e0:7e:91:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f3f3114caa8e926281725f727d608d93395118
        Validity
            Not Before: Mar  2 05:00:51 2026 GMT
            Not After : Mar  3 05:00:51 2026 GMT
        Subject: CN=143744be8dea8e472b518dcda99a4f4e6ef98480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:44:0a:58:24:d4:e3:11:46:30:39:17:98:f5:
                    74:bf:c0:3d:1d:e8:ae:c8:46:a3:1b:3f:6a:22:4f:
                    f2:a4:df:52:52:89:17:56:ab:43:fa:8a:9c:9b:88:
                    c7:a7:8d:52:9d:39:ca:a4:7f:a1:fb:a5:24:16:1e:
                    7b:5a:cd:88:2d:0d:30:2f:12:3f:d3:70:e0:ac:2e:
                    c5:d5:22:49:db:b2:c0:1a:bb:93:b6:87:c2:1b:52:
                    fb:3c:0b:0b:a1:da:79:3e:42:c6:b7:45:ba:f1:4b:
                    d4:7e:8f:88:63:07:77:c9:da:46:f0:6c:44:16:7a:
                    d5:7a:d9:98:a4:d5:5d:dc:bd:74:6d:44:b7:52:9f:
                    6e:ba:f2:e0:be:0c:5b:09:a7:21:ee:16:71:aa:7e:
                    9a:d6:23:24:e8:e0:fd:e0:66:32:f5:bd:f2:39:9a:
                    88:53:ca:37:be:5d:d9:93:dc:aa:ca:91:f0:40:fc:
                    6b:5d:35:e0:ab:de:88:75:e1:37:e0:e4:d2:77:d9:
                    5c:1c:a9:67:6a:d1:52:6d:57:6c:8c:58:f5:71:8b:
                    f1:60:18:43:71:dd:95:15:70:67:10:8c:a1:8b:86:
                    4c:c9:17:f0:f6:79:78:53:2a:1b:3a:49:1a:e7:05:
                    88:e8:1e:54:02:dd:b6:dd:cd:18:1c:56:c2:a8:b5:
                    62:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:37:44:BE:8D:EA:8E:47:2B:51:8D:CD:A9:9A:4F:4E:6E:F9:84:80
            X509v3 Authority Key Identifier:
                keyid:80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:6c:33:13:56:9c:90:4f:6a:f6:c8:61:07:77:07:55:44:d4:
         a4:fa:0f:65:61:93:15:f8:b1:6f:44:a4:b6:fb:9b:fb:3f:c2:
         7b:f1:77:f3:06:8d:54:dc:b2:91:f5:dc:36:fc:fa:b1:a6:17:
         1c:7f:b1:50:67:f5:93:6e:8e:11:b8:af:1a:7a:43:3d:b8:ae:
         f9:cf:de:04:5b:43:ea:3f:2a:e7:cf:25:01:dc:8d:d7:7f:46:
         80:d6:4f:6a:26:76:a3:31:fc:02:45:67:18:85:ea:55:32:1b:
         9d:39:62:e8:40:3a:e5:56:4b:2a:97:e5:62:a5:19:96:b6:25:
         bc:a2:bf:ca:e4:4a:6d:13:0c:f1:19:58:e9:13:96:90:7c:bb:
         11:6f:df:a2:1a:2e:49:84:ea:97:24:fc:b9:3b:40:00:89:3c:
         2a:ca:15:67:50:ba:eb:40:06:d5:be:e7:5e:ee:a5:67:23:71:
         8a:85:c5:d2:3f:19:88:67:88:0a:6e:73:39:c7:71:11:b9:98:
         94:0b:9d:03:d7:d9:d3:a7:cf:5b:88:8b:34:da:34:0b:8b:b2:
         29:5b:0c:2d:78:31:13:89:f0:31:6c:51:a1:e6:cb:ce:2c:37:
         35:cf:e0:67:a8:4c:7e:7c:84:0e:53:00:2d:10:27:f7:1a:45:
         46:43:fc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:03:07 2026 by rpki-client