Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
File:                     GpnHX-V3fhNlc-HlHvumeB86WxY.mft (raw, json)
Hash identifier:          WL2zMw0iAorL/NQY7po3/XAQq16UdNKS4ua9J4jmMvM=
Subject key identifier:   E0:A3:DC:7B:B6:22:BE:E6:C8:5E:B2:F7:31:1F:84:AF:F7:F4:C0:27
Authority key identifier: 1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
Certificate issuer:       /CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Certificate serial:       019CAC1033AE7392DD9102E34CBCB32B4C74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 01:01:08 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:08 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:08 +0000
Files and hashes:         1: GpnHX-V3fhNlc-HlHvumeB86WxY.crl (hash: F3oG3A4fE9tQ5VfiX3OwCmclwkJ1EZwXn4wMRi6HRVc=)
                          2: f8VlKt8JzCNAPxp24L1Yki6OYWM.roa (hash: pdFJm+KiuiR3o4ERryoXHrfDwKAIlg8iSODri6S35nw=)
                          3: qLXb67dE1EAchhK-STW3jwCdYVI.roa (hash: drU9BCSr2spJludNeni+Da0l+Sz7+7Ab8hUqNLHYgcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:33:ae:73:92:dd:91:02:e3:4c:bc:b3:2b:4c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
        Validity
            Not Before: Mar  2 01:01:08 2026 GMT
            Not After : Mar  3 01:01:08 2026 GMT
        Subject: CN=e0a3dc7bb622bee6c85eb2f7311f84aff7f4c027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dd:68:c8:08:85:83:ca:ab:35:10:e4:f0:f1:
                    7a:90:86:cb:8d:45:54:62:33:7e:19:d4:be:75:a1:
                    64:2e:4a:64:ff:0d:93:54:a6:1f:35:2c:36:25:2b:
                    08:d1:2f:22:62:1c:ee:23:c6:84:4d:ca:c7:8e:fd:
                    a2:90:8e:d4:01:e8:fa:d8:0c:d2:d6:9c:ba:48:86:
                    bf:86:3c:a4:5a:d7:2e:8b:ea:61:af:e5:54:af:65:
                    30:57:64:1d:ec:6f:89:1b:7a:48:7b:5b:9b:8e:54:
                    c4:af:cf:be:e5:99:7f:6e:90:93:8c:9f:8f:33:7b:
                    9a:f4:6e:73:bf:4f:2d:95:c4:6c:ac:40:08:e8:d2:
                    a3:6a:80:b7:15:23:db:43:32:6b:e7:49:2a:be:c6:
                    13:0a:8f:56:66:09:f2:f2:6b:32:85:9c:a5:68:55:
                    08:c2:cb:5d:fa:83:a8:61:87:ed:b7:d0:cd:4b:a0:
                    c6:35:3d:ec:0e:6a:ca:eb:6f:c8:29:4a:fb:04:02:
                    f1:22:f7:5e:8e:ca:c2:e5:2b:1b:76:d9:29:51:46:
                    dd:12:a4:a0:ce:d0:11:ef:4f:ca:3a:0f:cc:96:86:
                    17:07:70:f9:35:3c:83:dc:4a:fb:3f:86:e4:db:1d:
                    51:56:39:48:ac:23:34:21:02:75:ed:d2:cc:9f:80:
                    a3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A3:DC:7B:B6:22:BE:E6:C8:5E:B2:F7:31:1F:84:AF:F7:F4:C0:27
            X509v3 Authority Key Identifier:
                keyid:1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:8a:51:3a:82:33:16:e5:4a:bd:f9:43:a0:b6:08:ea:c6:e5:
         9e:d2:8b:99:e0:b9:b3:0e:99:6e:80:f9:59:ec:8a:96:a8:6f:
         0e:47:0d:6f:68:95:d4:e3:6b:10:af:9a:d9:2d:9e:6a:a5:7d:
         d4:95:3c:b6:95:8d:2b:f8:62:0e:aa:f0:e8:2b:48:fb:3d:38:
         33:e0:83:5d:c9:f8:8a:93:28:2f:dd:a5:f5:6d:d6:1b:1b:1c:
         26:be:ae:90:67:8c:a0:9b:a2:49:37:b2:5c:2b:06:e6:79:e6:
         dc:0b:26:83:1a:a6:23:b9:26:c0:94:bc:b4:a3:7a:fe:e3:0e:
         71:bd:05:2b:93:12:62:30:7c:77:cf:2d:be:ac:2a:a3:1a:4e:
         4b:6e:10:55:dd:f8:f5:3f:77:28:35:47:c6:9f:9a:70:70:19:
         8f:2b:8d:e6:14:65:82:b0:c1:4f:96:c7:d4:31:d9:14:51:aa:
         c5:25:3c:f4:52:55:76:51:11:e4:d2:6c:40:09:27:75:b8:9a:
         8e:2e:06:b6:21:29:ee:d6:4d:5f:22:2a:10:8a:a0:89:4d:89:
         cf:c5:e9:b8:25:29:74:af:3c:ef:79:75:46:ce:1e:c2:f1:b5:
         c2:84:1e:51:6a:02:a9:b0:6d:70:03:64:bf:94:97:8a:51:29:
         63:f7:95:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEDOuc5LdkQLjTLyzK0x0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhOTljNzVmZTU3NzdlMTM2NTczZTFlNTFlZmJhNjc4MWYz
YTViMTYwHhcNMjYwMzAyMDEwMTA4WhcNMjYwMzAzMDEwMTA4WjAzMTEwLwYDVQQD
EyhlMGEzZGM3YmI2MjJiZWU2Yzg1ZWIyZjczMTFmODRhZmY3ZjRjMDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N1oyAiFg8qrNRDk8PF6kIbLjUVU
YjN+GdS+daFkLkpk/w2TVKYfNSw2JSsI0S8iYhzuI8aETcrHjv2ikI7UAej62AzS
1py6SIa/hjykWtcui+phr+VUr2UwV2Qd7G+JG3pIe1ubjlTEr8++5Zl/bpCTjJ+P
M3ua9G5zv08tlcRsrEAI6NKjaoC3FSPbQzJr50kqvsYTCo9WZgny8msyhZylaFUI
wstd+oOoYYftt9DNS6DGNT3sDmrK62/IKUr7BALxIvdejsrC5SsbdtkpUUbdEqSg
ztAR70/KOg/MloYXB3D5NTyD3Er7P4bk2x1RVjlIrCM0IQJ17dLMn4Cj4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCj3Hu2Ir7myF6y9zEfhK/39MAnMB8GA1UdIwQY
MBaAFBqZx1/ld34TZXPh5R77pngfOlsWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3BuSFgtVjNmaE5sYy1IbEh2dW1lQjg2V3hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83MTE3M2ItMTkzOC00ODM1LWFmMDAt
YTY5OWJjYjA4YWUzLzEvR3BuSFgtVjNmaE5sYy1IbEh2dW1lQjg2V3hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi83MTE3M2ItMTkzOC00ODM1LWFmMDAtYTY5OWJjYjA4YWUz
LzEvR3BuSFgtVjNmaE5sYy1IbEh2dW1lQjg2V3hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4pROoIz
FuVKvflDoLYI6sblntKLmeC5sw6ZboD5WeyKlqhvDkcNb2iV1ONrEK+a2S2eaqV9
1JU8tpWNK/hiDqrw6CtI+z04M+CDXcn4ipMoL92l9W3WGxscJr6ukGeMoJuiSTey
XCsG5nnm3AsmgxqmI7kmwJS8tKN6/uMOcb0FK5MSYjB8d88tvqwqoxpOS24QVd34
9T93KDVHxp+acHAZjyuN5hRlgrDBT5bH1DHZFFGqxSU89FJVdlER5NJsQAkndbia
ji4GtiEp7tZNXyIqEIqgiU2Jz8XpuCUpdK8873l1Rs4ewvG1woQeUWoCqbBtcANk
v5SXilEpY/eVwA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:15:28 2026 by rpki-client