Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
File:                     gyVb16Los8d3SMPFajBDu8ESbEE.mft (raw, json)
Hash identifier:          IhlmwgcYvoq4a75xctLjoL9B/Wcj8mmPVIJUCrGoWIQ=
Subject key identifier:   D1:EE:BF:BA:57:7D:46:08:97:C7:57:A8:45:D6:FF:7B:69:19:54:CC
Authority key identifier: 83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41
Certificate issuer:       /CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
Certificate serial:       01A0C3695FA746B92E5AE0E08893EE09C451
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
Manifest number:          0796
Signing time:             Mon 21 Sep 2026 10:00:57 +0000
Manifest this update:     Mon 21 Sep 2026 10:00:57 +0000
Manifest next update:     Tue 22 Sep 2026 10:00:57 +0000
Files and hashes:         1: gyVb16Los8d3SMPFajBDu8ESbEE.crl (hash: eBQ0FHskp9tZBM2VqJlS1UrMFVzlieAHNhWqH7AcDfU=)
                          2: ip_fTXtrV6Sb-Uz_23d2v2IhtQo.roa (hash: JShw05Zaz3LphiciGtK8MssYWo5XoUpv7n2tqAbN/Ak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:69:5f:a7:46:b9:2e:5a:e0:e0:88:93:ee:09:c4:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
        Validity
            Not Before: Sep 21 10:00:57 2026 GMT
            Not After : Sep 22 10:00:57 2026 GMT
        Subject: CN=d1eebfba577d460897c757a845d6ff7b691954cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:27:3e:7e:6c:97:20:2a:12:f1:ee:84:14:da:
                    80:11:9e:73:93:79:e9:35:d6:0e:73:d9:72:27:04:
                    f7:1f:44:cf:e6:ba:82:a0:7b:4c:24:9f:6b:58:39:
                    8a:8c:09:d3:95:3a:c0:b7:f9:58:32:83:24:e6:aa:
                    e6:d1:fe:84:0b:ff:a2:0b:dd:fb:29:f5:f8:14:2d:
                    e9:3f:30:dd:a2:b5:af:39:ac:a5:5b:b5:f0:60:cc:
                    3b:29:71:65:41:f8:3f:aa:8b:19:e9:18:5c:4b:43:
                    c9:53:92:68:f4:1d:4a:cf:0e:52:14:5b:12:cc:4d:
                    16:e6:79:39:74:db:84:67:11:19:5f:67:af:68:97:
                    91:cc:6d:8f:91:fe:4f:64:a8:3a:5f:da:ec:73:38:
                    e7:5a:c7:5e:d5:de:3f:ef:20:3e:0c:21:91:56:e7:
                    39:52:49:02:eb:83:8c:72:0e:5d:99:63:db:6b:66:
                    65:1d:94:74:1e:e7:54:7b:2b:04:74:d6:1a:61:f1:
                    f1:08:10:6a:f1:27:65:29:fc:28:9c:34:50:41:15:
                    37:05:1b:af:8d:d8:48:fc:fd:85:81:da:46:ef:e1:
                    14:00:fc:1f:8f:e6:26:4f:dc:b3:cc:67:54:b6:86:
                    fd:b8:98:9e:15:e1:b6:c1:de:b8:96:12:c4:64:fc:
                    d8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EE:BF:BA:57:7D:46:08:97:C7:57:A8:45:D6:FF:7B:69:19:54:CC
            X509v3 Authority Key Identifier:
                keyid:83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e0:c5:32:aa:ab:f6:bc:6f:51:fe:91:50:15:34:fd:d9:4b:
         75:cf:6b:7e:0b:ef:4d:06:2b:6b:e5:e8:bb:fd:55:4a:6a:de:
         e4:7c:25:48:cf:d4:aa:01:38:08:aa:37:2d:07:12:af:d4:f2:
         e8:df:39:31:a2:94:86:38:c5:98:3a:33:97:8e:bf:6e:5f:2c:
         e7:66:82:51:38:5c:3d:c6:8d:c6:72:58:b2:63:1a:a5:19:ab:
         e0:bc:c3:e0:7e:a7:15:8d:30:cc:51:7e:b1:a5:e3:86:ee:1d:
         36:74:6c:7a:3f:3e:bb:f8:78:83:60:71:c8:4f:54:c3:31:41:
         5c:2d:9d:dd:ab:cd:81:9d:3d:92:ac:8b:59:c5:fb:1c:67:52:
         f7:ab:1b:44:36:85:90:73:c1:3b:4c:4b:e9:18:00:b0:1d:c0:
         86:38:5e:2b:50:c2:13:59:5f:34:2b:60:37:98:93:e3:28:21:
         1b:21:a2:7f:c7:62:f7:6f:49:fd:16:2f:05:10:e6:76:f0:4c:
         6a:a7:cb:3d:5b:7f:28:88:b3:9e:86:63:ed:d6:12:96:10:b3:
         30:59:62:60:4b:19:d5:96:72:7c:c0:17:40:4b:32:d5:b4:09:
         81:84:50:e7:c0:9e:57:b5:8c:48:1c:fc:8e:20:71:c3:c5:ec:
         22:c5:1e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:28:55 2026 by rpki-client