Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
File:                     gVeAUy7Smj-A57pBTvyzednsl8k.mft (raw, json)
Hash identifier:          nW9sPMOafiLssgrvynNT1l7Q4pHxhwcN+xYjloUvp+A=
Subject key identifier:   CB:7F:A8:7A:C5:B8:91:A2:92:40:2B:96:54:1A:10:1C:3C:7D:38:60
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Certificate issuer:       /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial:       01A13B2550E8FDD14B9509394BAE3E0E8B8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
Manifest number:          0D60
Signing time:             Wed 14 Oct 2026 16:01:03 +0000
Manifest this update:     Wed 14 Oct 2026 16:01:03 +0000
Manifest next update:     Thu 15 Oct 2026 16:01:03 +0000
Files and hashes:         1: 167q1DVVPrTdRYPkfcZCi239sJI.roa (hash: iphiS6YGG+NOQC8zeFXWVmhAQBLx2sZq4Y6HLVXVZOE=)
                          2: S9G5psiJeIcbArfBTp1QLAQdHYg.roa (hash: Zc2Nnr9uGhkOJwiMMBzf+F7Jqn4jLoEjO1hmaVvwrus=)
                          3: UrAwf58fhahFUOSzWtBJdSxqbEY.roa (hash: i0STbq1FvyERG4BX0Y5U86QJxom1+453IaNfNJ6A64s=)
                          4: d9jQ0MXnPvYgpDXafRNOfTdiez0.roa (hash: NVVF5QPKokAaAxOOfP2zdbiF9jm9CYGboJv9rbq85QI=)
                          5: gVeAUy7Smj-A57pBTvyzednsl8k.crl (hash: VyPacnF27a4tfg83AJm0WTmcvxvazlVjVu0M53NLEuI=)
                          6: hnX3GEWSMirkXg0F3Fz0pWka2cc.roa (hash: WY0W829d26Ieh54IESsnjlETa41xER8gZPgemFOcDZk=)
                          7: mHsA_rVsySauclXQKxspDTECljE.roa (hash: flPV0bAd69ESTw3Hk72QzoQVnq7R0pY25e/DdE1uZIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 16:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3b:25:50:e8:fd:d1:4b:95:09:39:4b:ae:3e:0e:8b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
        Validity
            Not Before: Oct 14 16:01:03 2026 GMT
            Not After : Oct 15 16:01:03 2026 GMT
        Subject: CN=cb7fa87ac5b891a292402b96541a101c3c7d3860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:89:45:67:e2:f3:6b:0c:9a:58:fd:6f:ad:7d:
                    80:5a:dc:86:98:40:ab:b7:d1:1b:0a:a3:a4:b5:ae:
                    91:68:05:18:c5:b6:26:4f:ae:5a:7f:28:19:54:e0:
                    06:bf:dd:03:24:c9:4e:61:07:1c:4d:81:51:7c:90:
                    17:04:e0:1d:e7:b6:95:f8:b3:76:59:24:11:67:7a:
                    cc:81:7a:6b:db:b3:23:66:28:cd:ad:41:f7:71:f7:
                    85:38:53:2b:a5:d8:cb:b2:9e:49:fd:a5:e4:6c:e0:
                    86:4a:51:4d:01:45:8b:28:7b:65:5e:37:fa:b8:1f:
                    27:9d:c4:be:de:37:65:03:37:71:8f:d7:1f:07:22:
                    2e:b5:cb:9f:51:e7:2d:87:ad:ae:da:f8:b6:da:ef:
                    b6:a7:fb:47:2b:90:de:5d:2d:18:87:4b:29:42:03:
                    72:da:ab:fc:46:47:a7:20:9b:1d:df:6e:74:d3:e7:
                    48:37:35:64:7d:0f:38:cd:1f:0c:79:1d:ad:fe:a2:
                    59:89:7a:f3:c1:0e:df:70:f1:6c:f5:0d:9f:59:70:
                    ab:62:52:cb:4b:a5:da:20:58:86:36:6f:85:d7:59:
                    16:00:b8:7c:8c:49:3b:2a:80:b8:23:b7:37:f8:12:
                    2e:c0:96:12:a1:a3:ad:84:9e:54:76:75:7c:53:4f:
                    cd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7F:A8:7A:C5:B8:91:A2:92:40:2B:96:54:1A:10:1C:3C:7D:38:60
            X509v3 Authority Key Identifier:
                keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:3b:77:06:bd:d9:28:13:03:37:e5:0a:64:5e:ac:a9:39:fd:
         db:9a:07:ca:01:51:35:74:9d:23:71:68:56:ef:de:f8:4e:3b:
         00:cd:61:b2:51:e9:45:bf:2a:95:80:c6:07:42:38:29:eb:40:
         8b:f6:b2:28:88:71:48:d0:46:6e:43:a8:ac:9f:eb:87:6d:cd:
         0a:fa:a5:91:36:a6:10:6c:d1:1c:f5:e5:e2:e6:ba:e9:2a:50:
         11:53:b8:33:b9:a2:42:5a:7d:36:8d:cd:b1:19:25:68:d0:b1:
         cc:d2:ac:3b:59:8f:43:bc:1f:1d:84:4e:24:7b:af:fa:1a:25:
         54:ba:5c:20:78:dc:76:83:b5:c8:36:31:34:81:6e:99:59:56:
         0b:83:df:2f:16:6a:8a:65:61:d5:46:6c:db:c7:0b:a8:ce:54:
         2f:6c:d4:7d:e3:8e:9b:57:9b:df:af:16:4d:1d:fa:4b:09:4c:
         98:37:1d:16:a5:09:86:17:fd:25:94:9f:ac:49:b0:41:32:eb:
         24:2b:8f:19:13:e8:24:40:60:d5:1b:a8:dd:4f:87:bf:d4:16:
         e5:1d:f1:1a:06:d8:fe:10:06:b8:a7:05:fa:e0:01:f1:29:53:
         bc:52:d3:c5:28:c9:06:de:f0:17:70:f3:ca:d6:d8:f7:f6:68:
         02:27:55:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:41:57 2026 by rpki-client