Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
File:                     gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft (raw, json)
Hash identifier:          4bnfYWq11GA6a2hJMcB10u/lzIdX9Oco6J0M9b/I8wM=
Subject key identifier:   52:E1:1E:52:D4:59:91:59:A8:73:FA:1C:77:75:1B:86:80:DA:F5:DC
Authority key identifier: 82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7
Certificate issuer:       /CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
Certificate serial:       01A0DBA9C8703B516D392880D73E4BC1DA43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
Manifest number:          1A71
Signing time:             Sat 26 Sep 2026 03:02:12 +0000
Manifest this update:     Sat 26 Sep 2026 03:02:12 +0000
Manifest next update:     Sun 27 Sep 2026 03:02:12 +0000
Files and hashes:         1: gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl (hash: FZEZQmvlArACikWeD3ZH1BkhllnZ/rzkIw9TvwtdICE=)
                          2: sl_qn_gMelOUS3XMJODn5T8W54w.roa (hash: MlmmeycjTjJos3jc0JF/rEVajpy499lBCd4bHXbugOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:a9:c8:70:3b:51:6d:39:28:80:d7:3e:4b:c1:da:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
        Validity
            Not Before: Sep 26 03:02:12 2026 GMT
            Not After : Sep 27 03:02:12 2026 GMT
        Subject: CN=52e11e52d4599159a873fa1c77751b8680daf5dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6c:22:48:5a:4b:ee:88:11:a8:65:d5:b1:e8:
                    3b:20:8a:42:cb:b9:87:52:56:6f:5c:b0:87:77:e9:
                    16:8e:b6:f9:fe:1c:f1:43:7b:95:09:79:a5:fb:d2:
                    19:cc:43:76:d9:1e:3c:97:58:66:4f:61:b7:c2:af:
                    59:55:23:49:d5:8e:5b:33:b8:68:fb:72:6a:89:86:
                    db:33:74:be:0b:36:4e:66:e7:81:65:0a:97:7e:31:
                    46:a2:a5:ee:5d:82:a8:71:a1:40:a3:a7:16:0c:ca:
                    e6:a0:91:28:0c:95:05:f6:3d:00:e1:84:af:8c:03:
                    74:50:6a:7e:9e:88:da:06:90:c7:26:3e:4a:f8:1b:
                    06:90:b5:da:b6:95:9c:4f:c8:f1:e1:01:34:3c:47:
                    c1:8b:35:68:50:be:fb:35:cf:80:e3:3c:1b:66:98:
                    93:e3:db:24:6d:24:2a:f4:74:b0:a2:50:d4:00:e6:
                    38:bb:5a:cf:5c:a9:87:30:83:6d:2a:38:68:ed:f2:
                    f6:8d:be:a0:13:df:12:b5:5b:35:d3:99:00:63:6a:
                    8e:aa:72:93:68:63:e3:59:67:80:5d:d0:50:a4:5e:
                    8e:46:54:76:de:dc:aa:56:fc:09:c1:b4:07:89:6d:
                    4f:11:17:c7:38:44:62:51:be:92:a8:1d:84:e5:90:
                    f2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E1:1E:52:D4:59:91:59:A8:73:FA:1C:77:75:1B:86:80:DA:F5:DC
            X509v3 Authority Key Identifier:
                keyid:82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ef:df:cf:25:e7:c9:75:78:64:78:6e:55:40:a9:12:92:c7:
         65:60:48:85:d6:6a:ae:19:51:0f:1c:d6:07:f0:05:37:79:ef:
         7b:be:7f:45:10:80:99:50:ee:90:e2:14:fd:90:e2:12:1e:44:
         cf:49:0a:2a:57:bc:9a:9e:46:cb:1e:f9:ee:c4:0a:a5:4e:ed:
         fb:1c:ee:79:69:1b:07:5d:9b:80:88:f3:8e:57:40:67:05:95:
         a8:8f:68:de:be:51:6e:38:21:83:3c:b1:58:47:5e:69:41:29:
         5c:83:24:e7:c6:6a:21:68:44:06:66:3e:12:5d:ec:f1:8c:76:
         f2:d7:43:fa:5a:d5:fc:bd:bf:b5:22:d3:2c:05:0b:7c:44:78:
         d6:dc:b2:af:59:a4:4b:11:7f:de:a8:df:1c:56:bc:07:1c:0f:
         6e:81:ef:cd:92:7e:dc:33:4f:0c:90:31:fe:29:d5:80:f1:aa:
         94:9a:43:ce:59:09:2b:9e:b4:29:96:ef:76:94:dd:c1:63:66:
         c6:51:19:2e:8b:d2:4a:86:3d:48:68:53:9d:c1:e0:60:40:a9:
         8f:b0:cd:f1:2a:a3:67:67:22:3c:a1:53:76:51:8a:6e:e8:c7:
         bc:a9:0c:25:2f:e3:b7:83:60:fa:ac:4b:b8:5a:c2:ad:fb:3a:
         16:0b:9a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:42:48 2026 by rpki-client