Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
File:                     GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft (raw, json)
Hash identifier:          CjI8zMpPJh3XfX0siwHwcJY+2avFiYf+XZTvTrd2fIk=
Subject key identifier:   4F:C5:81:59:3F:56:F2:00:F0:66:93:30:79:76:AA:CA:65:88:B1:9F
Authority key identifier: 19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
Certificate issuer:       /CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Certificate serial:       019CAD908FD12D1BF3FF700ACAACECC3161C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 08:00:58 +0000
Manifest this update:     Mon 02 Mar 2026 08:00:58 +0000
Manifest next update:     Tue 03 Mar 2026 08:00:58 +0000
Files and hashes:         1: GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl (hash: ltU8TUdp92iVjz3FQkdRmzukrnPZor+k2h7uiouz+bc=)
                          2: i2X0mHk6bAtPNecvn2NA6zmZj9U.roa (hash: mQLU4VLoVcMKqVZZfsB2FdV3V92h7zVuv01+LCyktYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:8f:d1:2d:1b:f3:ff:70:0a:ca:ac:ec:c3:16:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
        Validity
            Not Before: Mar  2 08:00:58 2026 GMT
            Not After : Mar  3 08:00:58 2026 GMT
        Subject: CN=4fc581593f56f200f06693307976aaca6588b19f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:04:14:1f:17:af:19:cb:10:a6:b4:eb:6e:d9:
                    2f:37:eb:08:e0:e1:35:17:58:7c:31:17:5a:97:12:
                    d9:07:b5:9d:31:be:44:3e:fb:06:76:a9:67:f5:92:
                    e9:3f:ec:b7:03:e3:b2:0a:89:7e:f7:6e:64:be:58:
                    c4:bc:87:fe:57:56:54:9d:0b:82:07:d3:36:78:db:
                    b5:67:aa:35:97:00:ad:c5:57:35:99:5a:e6:df:dd:
                    8b:a3:c8:cb:23:08:11:64:df:54:7e:c6:da:97:fd:
                    9e:98:82:05:54:47:d3:3f:0f:ae:e6:1f:08:f6:8c:
                    ec:30:0f:34:5e:2b:e9:f4:dc:b6:22:e1:11:d7:89:
                    5c:7d:8f:d9:ab:97:51:c7:75:e3:41:1a:d0:fc:7d:
                    fa:5a:2c:1b:f6:20:72:f2:4c:cc:e0:64:da:46:50:
                    f6:37:ce:40:b5:1b:fa:fd:3e:b4:b8:1c:12:8b:2f:
                    00:9e:9c:ec:8f:a8:1a:f3:ea:f7:e9:ef:68:53:2c:
                    f5:5d:13:3b:95:06:29:ee:1c:d4:ac:ba:88:aa:10:
                    8f:3b:45:03:4e:86:11:59:b4:53:49:6a:ea:8d:38:
                    93:4b:ff:30:b7:b3:4d:6f:6b:02:48:77:7d:77:ed:
                    4c:2b:94:81:ee:b1:ec:4b:7a:66:7e:31:24:9d:18:
                    fe:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C5:81:59:3F:56:F2:00:F0:66:93:30:79:76:AA:CA:65:88:B1:9F
            X509v3 Authority Key Identifier:
                keyid:19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:60:48:37:95:2c:ed:23:37:29:87:66:7e:09:0f:88:ac:66:
         38:6e:11:4c:e5:c3:14:f5:eb:61:76:e1:76:ea:c9:74:ba:dd:
         26:52:6e:16:9b:96:e6:34:6d:f3:53:a6:0d:12:f1:1f:1d:c2:
         0a:26:0a:c8:61:7d:d0:c9:f9:de:de:81:83:c3:8a:33:5b:e7:
         09:ed:14:3f:21:4d:da:7e:81:c1:37:4b:8b:0b:d2:c9:f9:e4:
         b4:b5:be:ed:eb:db:3a:9b:94:5e:54:06:59:61:dd:43:52:e8:
         bb:a5:8d:4f:8c:cf:8e:26:cd:bc:68:d4:43:f7:91:35:99:ac:
         10:61:a7:8f:5c:cc:3e:76:ac:e1:4f:24:8f:38:c0:7d:4a:8a:
         18:25:7a:87:84:b7:e8:e5:f3:63:1d:1a:de:23:45:3a:77:a0:
         2d:91:5b:2c:e3:2b:a1:97:04:bc:d9:a8:d5:4f:17:07:2c:be:
         d7:a1:b5:82:21:6d:15:8c:73:94:a2:38:55:2b:d7:ff:bf:47:
         4c:02:1c:e3:4f:bb:f0:d8:43:a6:a3:e2:6f:60:b6:1c:70:da:
         31:28:9d:a7:4c:8c:ae:cc:93:91:b5:bf:af:e6:6f:13:5a:4c:
         db:38:a7:35:e7:37:26:0f:75:fc:08:55:5a:0e:24:91:34:86:
         9d:be:2d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:25 2026 by rpki-client