Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
File:                     GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft (raw, json)
Hash identifier:          fBJgNQROvhE3GrxgixV91vJe9io9lgVYoMkvoMrF8lg=
Subject key identifier:   65:D8:7D:D7:EC:19:B4:FD:AE:33:4B:40:5F:B2:29:E0:C4:4A:17:E0
Authority key identifier: 19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
Certificate issuer:       /CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Certificate serial:       01A12B7B2CE4A7ACAC6A37B502D42515E52D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
Manifest number:          097B
Signing time:             Sun 11 Oct 2026 15:00:54 +0000
Manifest this update:     Sun 11 Oct 2026 15:00:54 +0000
Manifest next update:     Mon 12 Oct 2026 15:00:54 +0000
Files and hashes:         1: FiXFwvxiV6Y1ajHORGAWiqcT-Y4.roa (hash: Zs2NR7v6cxcECJIbaIPTJM9/Q7GTHlESDly+5o8OUyM=)
                          2: GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl (hash: vVKz5EOgdsQ7Rxwyq9a/NHjwzv3y/yucAQVCDRO1zY8=)
                          3: H6M_InTSfVSn-OrNGGPHtf16a84.roa (hash: 67LBTnOipV4/GHI9IH+2paCeB2Zya21UUa/eX3d6cWc=)
                          4: aCTYERjrsgQgd2eNcJ-xT6iLuVA.roa (hash: FSNpstLHIA+MgvTMObqgBgedN4krH4ykjVcUB8HPSAs=)
                          5: n_tsv6Gyy6l05YXi3Ux3ZNxYK4k.roa (hash: tTwofU2ePVTBmlzrQLu6MXi58L90+r8cW89IO3vj7uk=)
                          6: oc64jGTa7tYBazn5B8iUtkhOiqA.roa (hash: RFnqxJshGlA8TNiqCYqoYq6mvbEyQL7fumOe50DNmVk=)
                          7: vGG_tLkKXFgbXJfTRyLCvmDQxbE.roa (hash: WShGMkUZgE0y2ZoQYvE7mjCYcDN54oRSnCg5kaDhPTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:7b:2c:e4:a7:ac:ac:6a:37:b5:02:d4:25:15:e5:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b390b62d09950d500cd6bbbd78d0390560ec42
        Validity
            Not Before: Oct 11 15:00:54 2026 GMT
            Not After : Oct 12 15:00:54 2026 GMT
        Subject: CN=65d87dd7ec19b4fdae334b405fb229e0c44a17e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4b:78:1a:29:e1:63:31:4e:ed:08:8f:4f:99:
                    53:a6:89:ee:85:db:0c:e1:dc:78:c6:17:f5:8f:e6:
                    e3:e1:ff:d2:69:58:b5:14:82:a9:b1:24:65:1b:ed:
                    6b:a0:a4:80:33:eb:50:74:19:e7:00:c8:13:9d:dd:
                    2d:b7:0f:a8:14:ef:71:7e:cc:e6:44:fd:40:6f:cb:
                    8c:84:99:d6:6e:c1:4a:26:7a:b8:cb:b2:96:cc:4f:
                    73:80:b0:5e:27:2d:a7:eb:e2:b6:5a:e0:a1:ef:5d:
                    98:51:43:b5:7b:25:4e:dd:de:1f:03:4a:26:22:f7:
                    2f:dd:1d:96:22:83:37:17:04:14:9b:94:68:5e:a7:
                    4d:20:91:ef:80:01:c4:25:6f:d6:e3:2f:6d:3e:ff:
                    c1:24:c2:04:b0:5d:4d:f2:c3:fa:c8:32:b7:be:3f:
                    04:16:bd:31:fd:32:02:24:43:45:54:76:f8:18:14:
                    8e:2f:13:74:54:02:2a:07:99:ef:4d:04:21:46:30:
                    3d:3f:70:28:db:2a:b3:3d:30:99:34:c0:be:d2:72:
                    69:f1:14:5f:92:bd:ad:d7:aa:22:73:d2:e5:7f:cf:
                    f4:da:bc:bc:4f:45:dc:6b:46:d9:ed:8b:56:d6:d8:
                    d3:4e:68:ee:d2:5b:98:18:91:a9:8d:ca:16:a8:aa:
                    f7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D8:7D:D7:EC:19:B4:FD:AE:33:4B:40:5F:B2:29:E0:C4:4A:17:E0
            X509v3 Authority Key Identifier:
                keyid:19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:11:b5:30:6c:3e:80:f4:4b:e6:d0:63:cd:a9:97:16:03:49:
         f3:43:5e:ae:63:04:8b:38:1f:de:33:91:73:02:23:4c:bc:a8:
         9c:13:55:99:30:61:8d:5a:8c:8d:f0:a1:18:83:25:0c:90:27:
         7c:f5:d5:b5:af:94:8a:d5:ad:0c:dc:bf:dd:b6:26:21:56:3d:
         5e:b6:6e:5a:28:18:ee:17:d6:19:e8:9a:9f:82:95:94:2e:49:
         e3:86:89:d3:fe:08:5c:ca:a1:a9:69:5b:40:46:89:92:82:f5:
         80:16:5a:48:7e:8d:71:9e:1b:55:a6:19:40:02:b2:eb:42:bc:
         5d:04:10:25:f5:53:a2:a7:c4:a6:bc:1b:7b:0a:9b:ba:76:57:
         39:16:f4:78:cc:74:76:41:a4:cb:f8:cf:46:ee:ec:31:1e:11:
         fa:75:22:ef:f6:89:05:a6:a9:33:8b:cc:b3:41:dd:b9:54:e1:
         a6:7a:9e:46:23:13:62:a6:e3:d2:b0:af:07:e6:c2:c6:6d:bc:
         cc:f2:c5:4d:3f:6a:4d:f2:24:e6:7c:d4:8d:2a:9e:b2:69:7c:
         c7:5e:4b:ef:35:18:0a:6e:00:df:c8:93:a4:0a:c6:cc:eb:65:
         08:45:ed:c9:78:cd:2f:7d:5b:90:7c:c9:23:0b:88:81:b8:31:
         f9:bf:87:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:39:35 2026 by rpki-client