Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
File:                     gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft (raw, json)
Hash identifier:          BqLiuOhIz7SLtCuGfCRaTISohB6Du5434bkwOJUPglw=
Subject key identifier:   84:D7:82:A4:76:2A:C8:0D:82:98:C0:AA:06:2A:68:71:FE:D0:B3:56
Authority key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
Certificate issuer:       /CN=810cd50db437c789464cb64dfabfe405ca981b1a
Certificate serial:       01A0C8C637E6CA6121B93E56D97FC90F8577
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
Manifest number:          1A6E
Signing time:             Tue 22 Sep 2026 11:00:28 +0000
Manifest this update:     Tue 22 Sep 2026 11:00:28 +0000
Manifest next update:     Wed 23 Sep 2026 11:00:28 +0000
Files and hashes:         1: 1-GJxYFfHhPUGldIW84G9cSjaROo.roa (hash: xnT7kV2Yd837mUQZhjujVXj3ng6jUmkGRRzKFJTHREg=)
                          2: 7QBS3aveMjEIt5V3oI4muIcCVe4.roa (hash: GsyoiBHqEicecqi/mcF/bo2NUxKmjfbUVwAMQEmmias=)
                          3: FcCot_n8byTOtYnTcT9gqTdXqgI.roa (hash: W7M2MGUSVVgsXq7kupYfdmxLZ/fDswJFwIWF+JWAWi0=)
                          4: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl (hash: 6IFjMtkkbFCORx6f5uY/yRZO2l3RolQWUSUAAfanNVo=)
                          5: jZxaU0gUqcmTgelMnTTUvkNfM7g.roa (hash: fm/mYWmhHVRNa3vFUylMM5LunZsCT8Akl9JuHlA1Fb8=)
                          6: lGhTp3LLyxy8beBvhY8lnM4Yjhs.roa (hash: /3CeCfqpeIvLkc9UntZNryGgsw4LpxUtcTdUNK/e4Hk=)
                          7: nmKKjuvrKpu6Q_V0_c5Z74FUduw.roa (hash: jrXk8p4lSqYPTjIdM+K2z4RnJA6RydCcUOEGFn8KQoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:c6:37:e6:ca:61:21:b9:3e:56:d9:7f:c9:0f:85:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810cd50db437c789464cb64dfabfe405ca981b1a
        Validity
            Not Before: Sep 22 11:00:28 2026 GMT
            Not After : Sep 23 11:00:28 2026 GMT
        Subject: CN=84d782a4762ac80d8298c0aa062a6871fed0b356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:47:84:20:99:52:e2:c6:57:68:3b:c2:59:
                    9b:1c:13:7e:3f:56:08:1e:a9:3f:5c:7c:fc:6a:d0:
                    7b:da:2c:fc:bf:b8:86:e4:18:73:80:b1:0b:cb:35:
                    cf:32:f6:ad:e0:bf:fd:33:ec:c0:01:47:ab:1b:2a:
                    9d:bb:b8:d1:4e:d8:ff:44:c1:fa:d7:4b:a7:8f:6c:
                    a0:27:7e:f7:18:9b:cb:e6:e5:2a:d8:90:7f:ae:65:
                    5c:1b:34:c7:2e:90:e6:0d:40:82:24:ef:b1:0c:8d:
                    21:8a:65:3b:41:6b:7d:f5:a7:40:87:df:c4:61:08:
                    68:46:fd:bd:fe:e3:cb:25:fa:1e:36:7d:ee:f7:ae:
                    14:c2:03:23:56:30:ce:9a:3e:27:a1:ce:22:6d:4e:
                    bb:4e:f4:b9:32:15:3e:b3:a7:96:a0:55:1e:9c:23:
                    d3:11:a4:cd:45:aa:04:48:07:58:e7:72:42:d6:9d:
                    2c:d7:c7:72:c4:e4:77:77:29:45:40:af:85:65:f9:
                    f9:16:63:f6:71:04:12:78:88:e0:97:e7:86:a5:a3:
                    73:a0:53:77:81:2d:3d:c5:26:99:be:43:46:07:d9:
                    ac:e7:0e:4f:0b:fb:97:77:93:59:dd:ca:77:60:1b:
                    da:31:53:b3:24:69:c5:4d:e6:c3:9f:c9:6f:9c:a2:
                    52:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D7:82:A4:76:2A:C8:0D:82:98:C0:AA:06:2A:68:71:FE:D0:B3:56
            X509v3 Authority Key Identifier:
                keyid:81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:38:46:71:c6:e7:c0:10:35:0e:9f:14:ba:92:b0:b2:92:72:
         80:f2:31:cc:31:81:95:a7:b7:77:6f:27:a4:26:f9:c2:23:8b:
         e0:a1:a9:a3:8c:a0:43:68:38:16:c0:ec:80:31:ff:3f:bf:83:
         d6:9e:8c:a7:e2:7e:95:f5:ef:79:0b:dd:08:2a:cb:83:f5:3e:
         f6:8f:41:60:f4:6e:b5:00:1c:9e:67:38:25:0d:3e:20:af:fc:
         ff:96:76:5d:30:ad:f8:e7:e1:d4:e5:6b:18:aa:b0:7c:82:5e:
         f3:3a:d6:01:8f:e8:04:78:bd:13:7e:29:e0:ee:a9:53:03:d0:
         75:c8:23:db:aa:14:ae:5e:95:85:35:ca:a1:cc:9b:42:de:a6:
         db:35:96:41:3c:0a:b8:c8:f8:53:18:3a:52:19:b7:21:22:b1:
         7b:10:aa:66:5b:82:31:27:4e:85:6d:3c:64:71:3c:38:39:c9:
         d6:d8:54:a5:3b:86:74:fe:3f:f8:75:15:59:66:1e:97:d7:ed:
         5f:92:37:73:0f:71:b8:50:bc:97:c2:38:d8:32:7b:b9:93:2a:
         ef:b8:cf:16:4a:4f:dd:ed:2a:27:91:f2:c6:5e:8d:fb:ad:15:
         55:c6:57:89:03:58:a0:5f:37:eb:13:75:bf:bc:82:36:57:96:
         dc:8a:2c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:32:50 2026 by rpki-client