Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
File:                     GE__PPkA52quDSzS533-riTF0kw.mft (raw, json)
Hash identifier:          Je8RdweNZkCrXF1NgHLIu5uDaLGXWFj3qy4ZcqFJPf8=
Subject key identifier:   B8:D0:5D:DC:6F:B3:F9:86:B2:F0:41:4E:54:D4:FD:E7:81:F6:17:AD
Authority key identifier: 18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
Certificate issuer:       /CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Certificate serial:       019CACEBAB58D7CD87411F6C1B8EFD64A455
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
Manifest number:          0EB5
Signing time:             Mon 02 Mar 2026 05:00:51 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:51 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:51 +0000
Files and hashes:         1: GE__PPkA52quDSzS533-riTF0kw.crl (hash: zYnlZVO2eCZfaseld5+aPQj+93/0wChmsDfg+bXMpCg=)
                          2: rUaeP0oUdPvhV-Z1zHmVDofPVMg.roa (hash: yKtILw4rHDCHQjsROea7n0Z4TscVtMBleCX2L+hkG+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 05:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:ab:58:d7:cd:87:41:1f:6c:1b:8e:fd:64:a4:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
        Validity
            Not Before: Mar  2 05:00:51 2026 GMT
            Not After : Mar  3 05:00:51 2026 GMT
        Subject: CN=b8d05ddc6fb3f986b2f0414e54d4fde781f617ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b3:db:4f:99:02:ad:3b:51:88:b7:07:22:26:
                    71:6f:54:0e:c4:d8:ff:a3:65:be:ef:24:54:db:98:
                    31:36:74:34:50:a9:63:bb:b2:c5:d8:59:5f:3a:72:
                    07:84:7b:61:0e:6c:09:3d:40:9f:54:e7:21:49:42:
                    3b:45:1a:bc:62:07:eb:c6:ea:fd:55:05:73:8c:9a:
                    b7:3e:dc:66:af:5e:8d:a1:28:26:cf:37:a6:46:04:
                    b6:f7:f2:f4:8d:a3:c0:31:38:4e:20:98:b6:b2:02:
                    83:3b:4f:af:0d:d3:c9:7f:7c:80:20:c8:49:11:16:
                    20:ac:d4:8f:17:92:6a:5e:bb:9f:b6:79:cd:b8:71:
                    b5:98:a7:d2:8b:a9:19:bc:be:9f:c8:b0:85:85:8a:
                    9c:01:27:47:8e:36:86:d4:90:8c:64:12:65:9c:58:
                    5c:99:7f:27:49:d4:24:14:c7:87:2c:99:22:9d:e8:
                    b1:da:bc:17:49:31:b9:33:af:79:47:75:50:0f:2d:
                    42:01:55:44:01:d9:c2:d8:4a:d1:07:77:96:12:e5:
                    e3:66:bf:47:b0:7f:09:fa:4f:7c:2f:b7:12:d2:9d:
                    70:75:dd:45:4e:8f:19:4a:c4:27:5f:6f:82:8c:86:
                    03:f7:00:e7:f5:4d:87:8b:a8:37:3d:95:41:7d:05:
                    f4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D0:5D:DC:6F:B3:F9:86:B2:F0:41:4E:54:D4:FD:E7:81:F6:17:AD
            X509v3 Authority Key Identifier:
                keyid:18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ca:12:11:d9:bb:1c:ca:76:84:a8:84:80:ea:28:81:a5:14:
         41:91:ce:23:fb:9e:ec:22:38:0f:c0:3a:76:31:bf:93:77:b3:
         bb:25:ad:f9:1b:3a:20:82:48:94:4d:9b:a0:8a:ea:30:ed:ed:
         fb:0f:4d:a9:97:78:48:00:b8:53:6f:ad:67:9c:99:14:d7:9e:
         41:22:a5:9a:d7:4e:1c:8b:09:51:35:4f:63:95:04:9d:2e:e2:
         fb:e4:81:7f:d2:74:ef:08:06:c0:03:0c:d9:70:dc:f9:f1:fa:
         96:46:26:24:c4:58:49:1f:65:b0:43:a7:7c:f1:e7:06:a7:14:
         07:6b:3b:dc:08:d4:db:f0:63:35:5c:4f:b6:75:4c:62:71:65:
         8a:6b:e3:c5:ee:11:f2:3e:b1:36:78:fc:59:88:80:6e:ed:1c:
         aa:d8:b8:92:18:a6:5d:e6:11:aa:38:f1:06:94:5f:3c:59:5c:
         b0:1f:fb:a8:19:7a:63:1f:38:cd:2f:0e:8f:11:e7:6b:b0:32:
         de:e9:aa:dd:5b:a5:59:d1:d9:40:c9:3b:6d:55:e7:e8:6e:59:
         ac:9e:a4:4a:5e:70:11:60:1b:91:1a:fd:f8:a1:d3:9f:a3:6d:
         1d:bc:41:47:2e:16:7e:df:6a:0e:e0:7f:13:fa:2f:d1:b7:81:
         b6:d8:14:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys66tY182HQR9sG479ZKRVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NGZmZjNjZjkwMGU3NmFhZTBkMmNkMmU3N2RmZWFlMjRj
NWQyNGMwHhcNMjYwMzAyMDUwMDUxWhcNMjYwMzAzMDUwMDUxWjAzMTEwLwYDVQQD
EyhiOGQwNWRkYzZmYjNmOTg2YjJmMDQxNGU1NGQ0ZmRlNzgxZjYxN2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LPbT5kCrTtRiLcHIiZxb1QOxNj/
o2W+7yRU25gxNnQ0UKlju7LF2FlfOnIHhHthDmwJPUCfVOchSUI7RRq8Ygfrxur9
VQVzjJq3Ptxmr16NoSgmzzemRgS29/L0jaPAMThOIJi2sgKDO0+vDdPJf3yAIMhJ
ERYgrNSPF5JqXruftnnNuHG1mKfSi6kZvL6fyLCFhYqcASdHjjaG1JCMZBJlnFhc
mX8nSdQkFMeHLJkineix2rwXSTG5M695R3VQDy1CAVVEAdnC2ErRB3eWEuXjZr9H
sH8J+k98L7cS0p1wdd1FTo8ZSsQnX2+CjIYD9wDn9U2Hi6g3PZVBfQX0ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjQXdxvs/mGsvBBTlTU/eeB9hetMB8GA1UdIwQY
MBaAFBhP/zz5AOdqrg0s0ud9/q4kxdJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0VfX1BQa0E1MnF1RFN6UzUzMy1yaVRGMGt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hOTY2NmUtZmNmMC00ZmI2LWE0NTIt
MzhiMzkyYzZlMWJmLzEvR0VfX1BQa0E1MnF1RFN6UzUzMy1yaVRGMGt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hOTY2NmUtZmNmMC00ZmI2LWE0NTItMzhiMzkyYzZlMWJm
LzEvR0VfX1BQa0E1MnF1RFN6UzUzMy1yaVRGMGt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsoSEdm7
HMp2hKiEgOoogaUUQZHOI/ue7CI4D8A6djG/k3ezuyWt+Rs6IIJIlE2boIrqMO3t
+w9NqZd4SAC4U2+tZ5yZFNeeQSKlmtdOHIsJUTVPY5UEnS7i++SBf9J07wgGwAMM
2XDc+fH6lkYmJMRYSR9lsEOnfPHnBqcUB2s73AjU2/BjNVxPtnVMYnFlimvjxe4R
8j6xNnj8WYiAbu0cqti4khimXeYRqjjxBpRfPFlcsB/7qBl6Yx84zS8OjxHna7Ay
3umq3VulWdHZQMk7bVXn6G5ZrJ6kSl5wEWAbkRr9+KHTn6NtHbxBRy4Wft9qDuB/
E/ov0beBttgUwQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:49 2026 by rpki-client