Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
File:                     GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft (raw, json)
Hash identifier:          ccyyyIN46O9Dg37Yck3Z944tsy/7JzmNoT8UlEJJfrY=
Subject key identifier:   1E:F5:D7:B0:FB:D7:B7:D2:2D:42:34:2B:BC:F1:DF:39:9E:30:9E:1E
Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
Certificate issuer:       /CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Certificate serial:       019CAE6C8CC79C952657665E8375559410F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
Manifest number:          17DA
Signing time:             Mon 02 Mar 2026 12:01:15 +0000
Manifest this update:     Mon 02 Mar 2026 12:01:15 +0000
Manifest next update:     Tue 03 Mar 2026 12:01:15 +0000
Files and hashes:         1: 6LC4FnmLLsng6HVU2xR3jbERaDc.roa (hash: LpXh0JZ4HonUdcN7azN27CT2g+jjECs6HIXpWyOrLLQ=)
                          2: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl (hash: uGH5AjCHoddAU755fiKRA7lgwBQ6ICTiMCf4z/+r8m4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:6c:8c:c7:9c:95:26:57:66:5e:83:75:55:94:10:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423
        Validity
            Not Before: Mar  2 12:01:15 2026 GMT
            Not After : Mar  3 12:01:15 2026 GMT
        Subject: CN=1ef5d7b0fbd7b7d22d42342bbcf1df399e309e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b1:b4:d7:9f:16:28:63:f7:39:62:7b:c0:38:
                    88:5a:d7:06:17:f4:be:a8:2b:e6:2c:23:5f:3f:51:
                    87:78:63:09:54:55:8a:17:91:8e:e8:71:34:f0:82:
                    77:15:21:0f:68:17:24:76:30:a8:81:d1:cb:e8:02:
                    74:5c:ca:c6:5c:51:e8:a5:fa:77:29:21:ea:bd:08:
                    68:fe:f7:9c:05:57:65:21:03:1f:b2:77:ea:ee:58:
                    e7:1d:15:e9:35:36:2b:4a:40:84:ef:e2:07:d3:e3:
                    84:09:c2:dc:05:e9:c7:8d:ed:ad:67:30:3f:8d:53:
                    3c:26:72:a2:72:78:e0:d5:70:35:c0:cf:24:d4:52:
                    ae:37:89:12:41:88:d2:40:96:85:80:e6:24:47:4a:
                    3a:8d:27:59:44:06:e4:a2:22:ef:a9:d6:97:e5:1a:
                    05:e8:65:14:6c:ce:76:17:02:63:60:e1:af:c9:78:
                    bb:f3:72:f3:df:2a:96:77:3f:c1:c8:37:58:ae:fd:
                    a9:6e:50:6d:d9:4e:7c:6e:85:86:45:2b:b3:d2:c2:
                    be:ae:f1:c2:94:07:4c:f5:bd:9d:86:fb:b6:f7:55:
                    7f:0e:57:fd:92:f2:e6:a2:84:83:23:5a:99:5b:b9:
                    6a:cc:c5:06:2d:c2:49:7d:d5:59:ad:ce:f3:63:c0:
                    7c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F5:D7:B0:FB:D7:B7:D2:2D:42:34:2B:BC:F1:DF:39:9E:30:9E:1E
            X509v3 Authority Key Identifier:
                keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:64:c2:21:dd:1f:91:4c:a5:9e:e6:8e:e6:6f:b5:a4:dc:54:
         9c:95:78:a2:f5:54:6e:28:42:9c:07:30:60:11:6c:c7:dc:5b:
         5e:61:0b:b8:65:d7:b3:dd:03:e3:44:46:e9:6a:ab:fb:f9:5b:
         7d:de:df:fd:9e:23:b4:bf:26:f7:9a:ad:3c:4f:99:ae:d3:59:
         c7:ca:4c:68:e9:f9:9b:50:10:45:a1:c9:77:31:f5:0d:ed:ed:
         8b:24:8c:98:4d:71:47:4b:bc:ef:10:ea:5c:1f:98:28:5e:5b:
         8f:e6:37:ba:36:15:45:a9:7c:a4:86:ac:ab:9a:50:9d:64:15:
         e6:0b:ab:0f:d2:d6:57:6a:43:e7:27:af:1f:38:a6:2a:a4:28:
         90:ab:ae:7d:51:58:45:70:c0:41:8d:cc:dc:7e:5e:9f:7d:f8:
         d2:7b:95:fb:e1:f2:b7:dc:37:54:85:8e:a4:8d:52:ac:dd:cc:
         ab:a3:fe:8f:db:38:79:85:0c:b1:e2:c8:07:3c:e1:a6:6d:f6:
         d3:e9:96:e6:47:5a:fc:40:d9:96:bf:cf:3e:b4:1c:d9:48:d7:
         26:c8:21:74:41:e4:58:42:68:8c:29:a3:80:0a:fb:30:f7:85:
         65:59:1a:93:0a:d3:7c:dc:7f:40:97:e2:bc:aa:f6:30:a1:df:
         59:32:92:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:54:28 2026 by rpki-client