Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.mft
File:                     GBxTLx_zEilN0RxRGxd80zyDBFY.mft (raw, json)
Hash identifier:          1RZCjJ89e9nzclLl7KrOCBSwBMnTcPSs6GLB/kgGCpc=
Subject key identifier:   CE:58:D1:04:E2:5C:6D:B1:1A:D0:90:74:9E:ED:BF:13:47:EE:B0:BD
Authority key identifier: 18:1C:53:2F:1F:F3:12:29:4D:D1:1C:51:1B:17:7C:D3:3C:83:04:56
Certificate issuer:       /CN=181c532f1ff312294dd11c511b177cd33c830456
Certificate serial:       01A0DC847199EDCCE39F3D354ECE1C61D0B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBxTLx_zEilN0RxRGxd80zyDBFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.mft
Manifest number:          79
Signing time:             Sat 26 Sep 2026 07:01:02 +0000
Manifest this update:     Sat 26 Sep 2026 07:01:02 +0000
Manifest next update:     Sun 27 Sep 2026 07:01:02 +0000
Files and hashes:         1: GBxTLx_zEilN0RxRGxd80zyDBFY.crl (hash: FKkGVzpvjVlsRev4mHRA07JVkHPT8dKSM47qdD4X6nM=)
                          2: SmH0Y2akj9BXoPJsoCRP_5Abq_4.roa (hash: noEFjTcJ4li+Z5lYJLyOd4NFqf9iNEJOmVPDK4Ua36c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GBxTLx_zEilN0RxRGxd80zyDBFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 07:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:84:71:99:ed:cc:e3:9f:3d:35:4e:ce:1c:61:d0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=181c532f1ff312294dd11c511b177cd33c830456
        Validity
            Not Before: Sep 26 07:01:02 2026 GMT
            Not After : Sep 27 07:01:02 2026 GMT
        Subject: CN=ce58d104e25c6db11ad090749eedbf1347eeb0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1e:d9:c9:78:1e:db:29:8a:6c:98:64:2c:14:
                    f7:8a:9c:3d:c1:12:d5:30:c4:bf:30:0c:f9:af:4b:
                    1c:60:71:de:c3:5f:b8:c7:a8:bb:9c:43:3e:e7:32:
                    dc:4d:52:bc:70:a4:cf:38:f5:45:83:4f:c5:59:b8:
                    dc:64:23:ec:e9:40:22:2e:1a:6c:57:90:2d:92:54:
                    3e:3a:26:da:6e:81:25:29:56:db:de:38:d2:1d:3a:
                    73:be:fd:e6:3d:70:ce:f4:62:29:e4:e8:d8:d9:78:
                    f3:cd:c1:73:1e:ec:0b:90:38:d0:a6:ed:e1:a2:e9:
                    46:0c:13:fe:10:30:99:aa:ad:f9:fc:43:28:8a:b4:
                    bc:b7:d2:da:06:ff:1e:88:40:61:2c:f1:5d:ae:ab:
                    b7:06:92:7f:78:61:99:fc:0b:ca:8c:39:0a:9a:57:
                    d9:84:c2:e4:36:dc:a0:bf:b6:4d:cb:42:eb:6d:6d:
                    b8:35:ed:8f:43:65:17:d7:69:44:dd:24:41:7d:f9:
                    25:6b:92:60:a4:32:79:fb:c5:05:9a:1a:ca:9b:10:
                    3e:66:06:08:d1:b8:32:7a:1a:d8:ce:ad:89:fa:b7:
                    33:59:1b:04:3d:56:a2:ee:4f:61:b6:76:78:08:44:
                    82:65:0b:a5:88:09:7e:9a:5a:23:50:b3:af:79:11:
                    cb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:58:D1:04:E2:5C:6D:B1:1A:D0:90:74:9E:ED:BF:13:47:EE:B0:BD
            X509v3 Authority Key Identifier:
                keyid:18:1C:53:2F:1F:F3:12:29:4D:D1:1C:51:1B:17:7C:D3:3C:83:04:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBxTLx_zEilN0RxRGxd80zyDBFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d0:bf:9b:a9:21:55:15:91:22:85:9e:e3:56:6e:00:26:2b:
         c1:51:a1:78:14:f2:c8:66:75:c6:23:6d:2a:83:38:5a:61:9c:
         9f:73:dc:95:85:eb:6c:00:24:32:8a:8f:aa:80:a7:77:fb:21:
         c6:27:79:be:3f:5f:2c:fc:23:b5:46:2f:81:2f:74:9f:6b:b4:
         17:e0:49:0a:e9:36:d4:9a:a5:8a:76:2a:fe:aa:c9:0b:8a:e5:
         76:3f:0b:8d:48:19:03:53:05:2e:6d:af:31:7d:4c:16:a8:92:
         d7:17:7a:91:3c:48:32:aa:4b:06:f5:d1:db:21:89:53:a4:ab:
         c5:fc:a5:53:d6:8c:c8:21:c4:2d:62:40:2b:8d:76:56:1f:91:
         82:b7:5b:f9:ec:d4:17:c2:e9:97:e0:d9:79:ae:12:1b:f0:fe:
         eb:39:ea:6a:ce:ff:97:57:56:71:6b:26:6a:34:c9:ef:49:86:
         77:7e:93:bd:44:fb:b3:58:9e:a4:0b:15:4c:3a:7a:88:6e:41:
         c1:e2:a7:49:30:20:47:c5:e2:e0:0d:6b:62:9c:65:f7:cc:ae:
         0b:0d:21:8e:0e:32:bd:2d:f1:3a:6a:ee:b9:8f:29:29:60:88:
         b4:2a:75:66:8d:0a:dd:2d:da:8f:56:e4:20:83:37:6a:2a:80:
         28:ac:62:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:28:10 2026 by rpki-client