Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
File:                     kGIGOModg1ZQ4I3c82PxB4m1MFc.mft (raw, json)
Hash identifier:          qGuJMzePUt+eNn7gfEU2QAcu3Y4u5mhEd/dFd1amFWY=
Subject key identifier:   53:C3:55:57:46:91:FD:F8:79:4C:47:CF:18:E5:19:CB:BD:1F:03:B5
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Certificate issuer:       /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial:       019CAB3466F5BDB173A73AC92F29845879FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
Manifest number:          184A
Signing time:             Sun 01 Mar 2026 21:01:03 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:03 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:03 +0000
Files and hashes:         1: 1-Sxvbx-Cg8U4P-q824JZ5H1YO6E.roa (hash: a2WX2m5pSlEFQ4jCNhWru3oh8Dm7Zur2X//YUpzYRgc=)
                          2: 2tLIQgXliqh4O_vff1RXqlIeEX4.roa (hash: YrnY+CRyc45VEgvZ+B6sFRtEy6DTKUR1pY9HXUeaBcE=)
                          3: Bu0Z9Oa-l-xUVdCadedc-GKia4s.roa (hash: o5hnQmsYeg0a7OtRFe2tFIBK/UiUbqCNv9V7e0W1BHc=)
                          4: PLZh6ebzFcHOVLkjEP2GhHIKCYc.roa (hash: vqQUFtoj1n4nXtNZ0/2d8eNKsl2gvGohYfVzHK71xGM=)
                          5: RrruJq82VAsagsOjJ_NSi5mNKUo.roa (hash: t6X41lofSmz9HVW3wzJ5UBH/fbLKJOUaKmsaL52P/Jk=)
                          6: kGIGOModg1ZQ4I3c82PxB4m1MFc.crl (hash: 8LYSaBEH5cGpIk72Ze7cjwcvREYq6bCMhmOGyLUuLJI=)
                          7: lSU5-TVpHhT9tGKtGsAojuxW5K0.roa (hash: +uzTmcuM9GIefKeGbalnx2cUfB+YMnjPBiLHcbUUgFw=)
                          8: p0uAjHSmHvLpM75XX6oCkhGmdmc.roa (hash: njnabPJ7OUUwxsk5r103td3tMTROdrl25ScvQlzUSm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:66:f5:bd:b1:73:a7:3a:c9:2f:29:84:58:79:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
        Validity
            Not Before: Mar  1 21:01:03 2026 GMT
            Not After : Mar  2 21:01:03 2026 GMT
        Subject: CN=53c355574691fdf8794c47cf18e519cbbd1f03b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:19:3b:64:d3:b8:24:72:22:57:1e:80:9d:1c:
                    83:7e:b2:9b:92:5b:b6:e0:ab:35:78:2d:f1:0d:d1:
                    ab:3d:d6:89:d6:da:58:d6:f8:59:1c:45:50:d3:ba:
                    2b:ee:14:ab:19:7d:1c:93:ac:d3:8c:0f:1e:6a:07:
                    c3:66:05:a1:8b:d0:eb:1f:e8:13:77:c8:f6:cf:ec:
                    90:b6:e3:fb:ec:08:e5:1e:01:1e:29:da:4c:21:80:
                    af:2c:7d:29:df:5b:d7:cb:5a:2d:c7:28:89:08:0e:
                    8d:9f:12:05:c6:f0:a5:dc:e3:57:02:84:88:e3:8b:
                    db:37:e0:68:aa:ba:7e:73:e6:8c:3d:8c:d7:b3:25:
                    6d:37:21:ec:81:46:f9:01:6c:ae:a2:5a:9f:1b:ff:
                    c6:60:d5:65:6c:5c:06:1a:52:ff:2a:5e:52:95:91:
                    b5:8d:16:da:39:1d:81:16:60:2c:86:3b:fc:75:b1:
                    62:58:2a:06:52:8c:f4:ed:45:29:6c:3e:73:b6:7b:
                    41:3b:14:cf:5e:5e:bf:a4:80:74:95:25:35:32:1b:
                    24:b5:7a:a8:a0:17:f3:d1:7a:eb:09:2c:f9:12:4b:
                    7b:36:a4:8c:7f:63:19:6e:2e:ff:c1:0c:87:f7:97:
                    0a:58:f5:1f:f1:22:29:f0:aa:3c:96:ac:76:1d:92:
                    49:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C3:55:57:46:91:FD:F8:79:4C:47:CF:18:E5:19:CB:BD:1F:03:B5
            X509v3 Authority Key Identifier:
                keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:10:84:ad:da:f1:91:5b:99:df:a2:74:5f:ea:fc:57:12:5e:
         3e:c0:81:c8:8f:75:79:d4:dd:58:4c:cd:47:d3:86:f3:d7:d2:
         fa:2f:45:4b:39:59:a1:b2:ef:f2:16:74:3b:36:b4:ac:e7:d1:
         31:bc:2f:48:b0:17:dc:25:0d:f2:89:44:ab:33:ef:1c:6a:4b:
         1a:0d:d8:80:27:60:19:8b:a1:7f:37:bd:0c:85:28:e5:c4:3b:
         56:1a:14:61:19:3d:2c:8f:6a:92:e3:d3:9b:03:e6:ab:50:af:
         4c:de:28:d0:59:f4:1a:1c:34:a1:90:cd:73:63:43:d4:ad:53:
         9c:1c:60:1e:b0:f8:77:e2:53:ce:72:8c:66:e0:d4:26:bf:14:
         a0:bc:89:5b:6b:7f:49:ed:f2:9f:c4:18:09:d5:0e:26:84:c8:
         5e:d1:cd:19:f5:15:7a:1c:83:b4:b8:a1:13:da:c5:32:4b:e8:
         a0:76:7f:a3:75:35:a9:b0:17:20:3c:d9:fd:ff:9b:bd:24:84:
         3a:0b:27:2f:7d:a9:38:c5:7e:fb:28:98:2a:af:4a:a9:f8:76:
         c9:fd:25:78:4c:f0:3e:19:fc:35:bd:66:8d:c9:67:33:39:c2:
         b3:49:87:50:a8:aa:0b:e1:7f:ca:a9:06:88:47:86:63:a0:49:
         38:6a:ec:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:11 2026 by rpki-client