Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
File:                     GNo6QLEX-yVyzPekwnLS7GklKRw.mft (raw, json)
Hash identifier:          ZNr00TaALf8UUwKe+1k5HgikVytMW7pEG6HsyIh1zCk=
Subject key identifier:   D4:DF:05:F6:B1:31:0C:AA:D2:37:96:76:93:5A:BB:5E:97:30:34:DC
Authority key identifier: 18:DA:3A:40:B1:17:FB:25:72:CC:F7:A4:C2:72:D2:EC:69:25:29:1C
Certificate issuer:       /CN=18da3a40b117fb2572ccf7a4c272d2ec6925291c
Certificate serial:       019CAED9F18B7BFB755ADFC8DE274859D0BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
Manifest number:          1845
Signing time:             Mon 02 Mar 2026 14:00:44 +0000
Manifest this update:     Mon 02 Mar 2026 14:00:44 +0000
Manifest next update:     Tue 03 Mar 2026 14:00:44 +0000
Files and hashes:         1: GNo6QLEX-yVyzPekwnLS7GklKRw.crl (hash: 9PD0FQKCOkwclu1WnaL43dltFP/iKkKixasIcMSAyKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 14:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:d9:f1:8b:7b:fb:75:5a:df:c8:de:27:48:59:d0:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18da3a40b117fb2572ccf7a4c272d2ec6925291c
        Validity
            Not Before: Mar  2 14:00:44 2026 GMT
            Not After : Mar  3 14:00:44 2026 GMT
        Subject: CN=d4df05f6b1310caad2379676935abb5e973034dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3c:5b:4f:ef:19:01:ee:82:2c:01:3a:a4:54:
                    cc:43:2d:57:78:54:72:bf:a8:7a:d5:21:6a:f3:5e:
                    d7:af:08:43:03:1d:73:f5:d5:f4:ac:45:fd:10:e3:
                    9a:44:41:ee:d7:fe:38:66:9f:3a:71:c8:5a:7b:36:
                    41:03:f1:3c:7b:0f:10:e0:99:5e:bb:83:43:d8:45:
                    c1:36:96:09:b6:d4:2a:19:ac:88:5c:fd:a6:5d:f0:
                    e4:22:41:c8:4d:78:30:4b:8f:9f:77:ea:89:99:bb:
                    e7:5f:b4:2e:55:a5:15:a9:c3:5c:16:a2:48:45:fe:
                    81:33:18:7d:2e:59:70:f7:bd:69:2c:09:03:12:45:
                    e0:e1:01:a3:0b:25:e7:dc:55:c1:fd:0c:da:4b:c0:
                    38:dc:c7:46:5f:c6:3f:1d:19:e5:78:8a:12:00:37:
                    a4:0c:d7:a8:00:fe:6c:4e:80:86:d7:e3:ac:8b:de:
                    da:56:a1:1f:1e:ad:2b:ce:31:18:80:18:16:c6:9b:
                    0b:3b:49:9f:b1:62:e0:60:54:a1:65:68:b0:c3:31:
                    b7:a0:5a:2c:47:0d:52:25:96:ed:2f:3b:c0:66:2e:
                    b9:25:62:8f:ce:33:92:5d:dd:25:b1:a3:f9:7e:91:
                    ea:8a:3c:dd:77:42:b8:c6:8b:94:d1:ad:1b:5f:17:
                    f9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DF:05:F6:B1:31:0C:AA:D2:37:96:76:93:5A:BB:5E:97:30:34:DC
            X509v3 Authority Key Identifier:
                keyid:18:DA:3A:40:B1:17:FB:25:72:CC:F7:A4:C2:72:D2:EC:69:25:29:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNo6QLEX-yVyzPekwnLS7GklKRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/28979b-0a34-4a5c-a2fe-698d912b7346/1/GNo6QLEX-yVyzPekwnLS7GklKRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c9:c4:6e:c1:de:f9:0b:21:12:48:7f:97:d6:f0:a7:f8:2e:
         9e:f7:70:ed:7a:3e:cc:0b:dd:e8:74:59:9d:c9:73:58:f8:52:
         99:89:5b:f4:32:7b:89:be:a1:e5:47:6e:29:6f:53:1e:22:f5:
         d1:ea:6c:4f:88:e2:ed:1f:20:44:54:11:0a:3b:50:59:f0:7d:
         81:6a:f6:62:64:68:1e:7a:dd:47:88:46:de:91:6a:13:71:4b:
         d5:1b:93:7e:32:82:67:38:a6:81:b5:ac:27:84:3c:17:c4:f1:
         d5:a8:92:6b:3c:89:92:65:86:ba:2c:b0:5b:5d:62:a2:95:91:
         ff:29:e7:f3:83:07:70:ae:e0:bc:0f:61:eb:cb:a0:f4:e9:87:
         7f:d6:a4:d6:d6:78:48:eb:c8:61:31:21:d5:26:17:4e:70:16:
         dd:82:4b:19:02:30:0d:3c:40:b3:94:1d:0e:8c:26:9f:9c:ac:
         0c:37:96:5a:ab:7b:42:74:54:67:c6:ec:bd:a1:63:6b:1c:7c:
         0d:8d:7e:4d:70:e7:5d:b3:00:60:ce:0b:07:62:ff:af:e8:3e:
         54:3d:f0:f6:19:dd:79:4e:5d:b6:01:4a:36:cd:8c:37:cb:77:
         1f:fd:1a:c0:3a:bc:33:8d:93:5e:f8:1b:c8:d8:a8:3f:57:04:
         20:3b:fa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:39:23 2026 by rpki-client