Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
File:                     GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft (raw, json)
Hash identifier:          1B0wraHD6TGVMDvT8gcwP/T3trmXe0bNi78OiNOK7pk=
Subject key identifier:   6B:CB:F9:1D:02:E7:5D:37:68:1B:F6:92:89:DA:2B:6D:D1:F9:A7:CE
Authority key identifier: 18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
Certificate issuer:       /CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Certificate serial:       01A14DD068760BADF1B8FAD6D3978C65E20E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
Manifest number:          1AB3
Signing time:             Sun 18 Oct 2026 07:01:06 +0000
Manifest this update:     Sun 18 Oct 2026 07:01:06 +0000
Manifest next update:     Mon 19 Oct 2026 07:01:06 +0000
Files and hashes:         1: 4yhn0zab6G9Xm_NjzDhDVFNViNU.roa (hash: A7LqIa0Mp3Sp/NDA4NIu51kIjL901Apj0xVFgoij29k=)
                          2: 7VsPFkhM_OrYhPPIYt8jc85Ys8Y.roa (hash: x7mGZCpmu0SwOVi3OquDRZc+flnwWQDFf3B9ZxRJHaY=)
                          3: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl (hash: JXfYRAB8E3IrYY40MGuk0G+BAvJxGUeB+nmF33uf5Cs=)
                          4: r7rIkd3JpKTtd7ti5sQWVfcfHRc.roa (hash: BZ2IDfhsgXSEeuZ1ehS1OEbZfErOlb6+IBt9JMlf/C4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4d:d0:68:76:0b:ad:f1:b8:fa:d6:d3:97:8c:65:e2:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
        Validity
            Not Before: Oct 18 07:01:06 2026 GMT
            Not After : Oct 19 07:01:06 2026 GMT
        Subject: CN=6bcbf91d02e75d37681bf69289da2b6dd1f9a7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d0:39:be:ad:31:3a:18:8c:13:48:2d:2e:49:
                    de:80:ff:28:45:0f:4d:34:3e:95:a0:e5:5d:f0:c9:
                    db:29:3d:f3:80:b5:5b:f3:40:b3:02:49:e3:91:98:
                    20:95:d0:5b:4c:02:ec:eb:5c:b7:10:50:38:20:cc:
                    aa:a0:f0:1c:c4:7b:70:84:9b:1d:a6:be:35:be:d7:
                    e3:6b:b0:8f:0b:b1:2d:8c:36:0e:5a:d4:84:f9:e9:
                    92:5b:e3:bd:cf:79:13:6e:43:47:dc:f7:dc:ec:f0:
                    49:d4:6c:f2:3e:fc:28:5f:8a:c1:57:2b:ca:c7:28:
                    cb:c3:9b:10:91:19:be:20:80:b8:11:65:19:1a:ee:
                    ac:df:ab:93:25:01:a0:8d:1c:77:4f:04:d3:b3:bd:
                    e2:f0:a0:0d:28:cf:19:14:bb:21:14:c9:bd:53:c9:
                    a5:68:6a:1d:4f:17:61:07:82:f4:fb:13:17:74:aa:
                    8f:9e:44:d5:0f:64:b2:f4:44:9a:42:3e:26:fb:ff:
                    02:7a:61:0c:3c:99:bc:4e:22:14:d5:6e:40:35:74:
                    15:c7:e8:a3:57:63:67:39:4d:53:ca:eb:f3:e4:c3:
                    48:ad:3e:19:6c:94:1e:82:87:43:cf:7d:a5:8d:67:
                    e7:5e:c9:4e:d2:13:9d:27:a5:10:fa:ac:0d:2e:c1:
                    21:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CB:F9:1D:02:E7:5D:37:68:1B:F6:92:89:DA:2B:6D:D1:F9:A7:CE
            X509v3 Authority Key Identifier:
                keyid:18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ed:64:15:41:70:29:9a:79:eb:33:ae:66:f5:ea:39:5e:e0:
         95:da:95:f8:76:d0:bf:e3:b3:ef:af:b9:d2:9a:0d:3b:98:61:
         fb:9e:e5:6c:fd:97:29:b4:36:ca:9e:ff:0a:73:7e:d1:19:b1:
         78:1c:96:35:79:aa:6f:a6:70:0c:34:e3:e9:4f:6e:49:3c:6c:
         d7:9c:81:58:94:f8:45:25:ae:28:d5:38:b1:35:d5:b7:73:30:
         fe:45:e6:8d:fa:1e:8e:2c:40:7c:6d:a2:a1:5e:e0:9d:34:68:
         ca:b2:65:72:19:5d:d6:c9:ed:6f:4e:19:f8:a1:4e:39:37:19:
         c3:5d:83:53:e8:84:2f:7f:c2:47:52:3a:49:41:7a:86:33:e9:
         a7:72:4b:34:0a:fd:5a:82:56:92:ca:54:9e:c8:63:0c:40:bf:
         54:32:98:0e:b1:cf:f2:90:c7:d0:9b:d5:dd:e7:c8:16:b7:a8:
         11:f6:f8:45:61:dd:54:95:ad:ff:46:38:42:c0:41:e3:3c:d0:
         7d:95:4d:4a:15:81:61:c3:9c:56:a8:36:ff:48:33:f1:26:38:
         a0:1e:5a:3d:67:d6:4d:72:90:4f:74:86:6e:b5:05:0a:91:f2:
         57:07:5d:ed:5c:3e:e8:9a:19:c9:e3:e9:ad:ce:8f:86:a6:62:
         94:2e:5a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:52:03 2026 by rpki-client