Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
File:                     GQAdVXoGmNrXfEs-3fKn02tyqwA.mft (raw, json)
Hash identifier:          uRH92dXTvLGAnGUtxkTl8hfvec3lFoj1EnjzNndL8Vs=
Subject key identifier:   D4:E9:36:98:A3:89:EA:0E:0B:F9:18:C9:45:72:55:86:97:10:3C:F7
Authority key identifier: 19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
Certificate issuer:       /CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Certificate serial:       019CAF112EB58719A641A5B3CA0C65385AF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
Manifest number:          0789
Signing time:             Mon 02 Mar 2026 15:01:04 +0000
Manifest this update:     Mon 02 Mar 2026 15:01:04 +0000
Manifest next update:     Tue 03 Mar 2026 15:01:04 +0000
Files and hashes:         1: FblgizDhqR052b7Rb7HxWYg2JDU.roa (hash: ukjre2pKx9ZsNQN9DOZTFUoYV7Iqwog22EFIjKbpS9Y=)
                          2: GQAdVXoGmNrXfEs-3fKn02tyqwA.crl (hash: wWg1j0C4WwR8tkU5nwswHvxQEn+gnKqA7bhGE2LMQcw=)
                          3: N64gyRV3fyLEotYnOGpZXANVQTY.roa (hash: usaMJ60NvDnxkMJGfw4/sj/B9kuu+SgaBjkVvUD8MA4=)
                          4: ZhZfvojxtl0-1Vh8VOJ7rtKsO9U.roa (hash: rjeMgEmIzmO/qtzh5+aQsiRfqkpS/wbdwFYJRmTLpUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:11:2e:b5:87:19:a6:41:a5:b3:ca:0c:65:38:5a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
        Validity
            Not Before: Mar  2 15:01:04 2026 GMT
            Not After : Mar  3 15:01:04 2026 GMT
        Subject: CN=d4e93698a389ea0e0bf918c94572558697103cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:52:aa:5b:f2:17:38:ca:3f:00:20:ba:f0:45:
                    15:05:53:b0:00:35:bd:55:3b:91:c2:2d:d6:af:af:
                    59:e2:c0:7b:0c:15:c0:f8:b9:2a:11:41:81:d8:7e:
                    4c:85:41:64:d1:a1:8b:f7:02:8d:0f:78:5d:24:69:
                    c9:9e:45:91:9c:17:73:98:a5:20:9c:7b:b2:b5:0d:
                    4e:18:2b:6c:2b:e3:77:fa:0e:37:b2:74:22:ac:fe:
                    1c:67:dd:06:42:1d:24:2c:3b:49:66:59:8c:55:42:
                    0a:c7:90:28:75:a5:a3:94:d2:f4:39:d3:6b:e8:3b:
                    a6:7a:ba:17:a4:d4:e2:11:42:61:9f:30:40:4c:50:
                    c0:11:4d:12:44:ea:5b:f2:02:24:51:d1:b4:fc:93:
                    f5:ac:20:2f:3a:a6:95:7b:69:83:ef:79:21:e4:08:
                    85:99:91:97:a8:5a:b7:05:4d:64:2e:d9:d9:9d:dd:
                    84:75:b6:4d:45:db:19:f4:7b:c6:96:76:44:f7:37:
                    4f:8b:68:93:6b:cb:80:04:fc:07:6b:9f:2e:a5:ba:
                    04:88:77:e2:7b:7e:12:2d:7f:f3:4d:db:a5:18:10:
                    fd:3b:74:b8:d3:5a:de:c9:40:71:ba:ea:2d:4c:83:
                    ef:4a:0b:34:c6:e4:69:2c:fa:9a:f7:1d:26:ac:1d:
                    32:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E9:36:98:A3:89:EA:0E:0B:F9:18:C9:45:72:55:86:97:10:3C:F7
            X509v3 Authority Key Identifier:
                keyid:19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:de:68:f0:2a:6a:0e:2a:85:fb:73:27:78:92:0f:4e:d8:74:
         db:e8:5d:f0:ec:d6:40:56:a1:47:48:8a:cb:4b:04:ec:19:13:
         58:54:86:38:37:be:0d:52:8e:1e:c5:da:db:1b:57:2f:eb:2f:
         e8:3d:a6:fb:08:39:fc:15:e0:5f:1f:5f:dc:06:77:a4:d6:d8:
         7d:97:81:ec:0a:ce:05:3c:02:47:9d:d9:c8:42:1f:68:40:11:
         85:ed:2c:e7:5b:cb:c5:cd:42:d5:96:c9:2b:50:12:e1:e5:ba:
         91:8f:f7:af:b9:7f:91:c5:61:c4:9b:cb:1a:82:75:4e:82:62:
         df:5a:a4:fa:c3:47:e0:42:8a:07:61:44:84:17:32:04:b3:2c:
         e5:52:75:13:18:e0:8f:37:40:df:44:97:98:3b:ef:d1:f6:32:
         9e:72:9f:17:d6:30:86:f6:aa:0f:d0:68:f1:71:9c:69:bf:6e:
         9b:91:78:10:98:54:26:d1:c7:4f:cf:ff:a5:1b:e2:86:60:ae:
         70:d3:08:38:0e:0f:83:55:d9:66:3c:6f:65:30:0a:a4:5e:cc:
         2b:6f:7b:f1:7e:14:ea:22:bf:82:45:af:d2:69:83:20:b2:a4:
         8d:77:52:f6:07:c4:eb:ca:2c:f4:4a:62:b1:57:30:3d:33:ba:
         72:51:93:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:30:33 2026 by rpki-client