Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
File:                     1-GSAgviI1Al6xM26hGYLkw91A18.mft (raw, json)
Hash identifier:          MRKsE3zpFOe6F3kTPYQqC1jXdllOTlAWeFu/zBD0ubw=
Subject key identifier:   73:B0:0C:04:61:50:E1:3F:B1:4D:05:96:05:5F:3A:DD:41:C6:B0:C4
Authority key identifier: F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F
Certificate issuer:       /CN=f8648082f888d4097ac4cdba84660b930f75035f
Certificate serial:       01A1242FFE901556E6DE0D41378374D8482B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
Manifest number:          034D
Signing time:             Sat 10 Oct 2026 05:01:27 +0000
Manifest this update:     Sat 10 Oct 2026 05:01:27 +0000
Manifest next update:     Sun 11 Oct 2026 05:01:27 +0000
Files and hashes:         1: 1-GSAgviI1Al6xM26hGYLkw91A18.crl (hash: u72xoVpSQJplQ/jsVNZoHOGdrcZiL9qUULzikHMgXmM=)
                          2: Ld1IptB75UF1wrERs5D-utW7pW8.roa (hash: qkhGZ0ztjC9ORXPQw0r6Rit5ibpjpCY4xiHV/vyohFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:24:2f:fe:90:15:56:e6:de:0d:41:37:83:74:d8:48:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8648082f888d4097ac4cdba84660b930f75035f
        Validity
            Not Before: Oct 10 05:01:27 2026 GMT
            Not After : Oct 11 05:01:27 2026 GMT
        Subject: CN=73b00c046150e13fb14d0596055f3add41c6b0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ed:90:72:b8:ee:2c:f6:81:b9:d8:b8:84:7f:
                    ae:db:22:e0:0b:01:b8:10:e1:05:8d:d8:df:e8:e6:
                    e6:92:9e:92:92:c5:58:ae:7e:6e:9a:0e:f8:b3:25:
                    21:d4:aa:5f:23:ed:81:b3:6e:a3:8c:b9:1c:ba:92:
                    b9:21:c1:0e:9c:a4:20:da:29:d1:e1:d7:64:57:bb:
                    6f:bd:83:98:7d:fb:2a:d3:54:0a:23:e2:74:8f:8d:
                    9b:9b:16:d7:f7:cb:65:c4:e0:49:ba:8e:bb:f1:f8:
                    ca:a1:b5:4c:be:09:e8:9b:3f:64:37:11:14:55:fc:
                    ff:28:3f:ec:46:b6:cf:37:f3:72:db:ab:a6:a6:93:
                    ac:42:54:92:c5:bc:9c:69:61:42:3a:0a:cf:82:da:
                    b6:17:3e:bf:9b:75:09:9b:1f:2a:e8:f1:7c:ce:51:
                    19:d5:c2:08:31:9c:51:eb:57:b0:49:96:76:6b:1c:
                    3e:4a:89:91:d0:d4:53:0a:2b:54:c3:45:9b:de:80:
                    5c:42:89:2d:80:52:32:d8:b7:69:da:cb:64:32:db:
                    9e:6e:b9:2e:20:ce:a4:ff:39:d1:f3:f6:6c:ee:dc:
                    b5:c3:a0:55:3a:95:5c:25:5d:fe:f9:e5:8b:eb:b4:
                    70:0a:f9:22:e0:d0:f8:7d:08:64:13:26:70:82:c4:
                    6a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B0:0C:04:61:50:E1:3F:B1:4D:05:96:05:5F:3A:DD:41:C6:B0:C4
            X509v3 Authority Key Identifier:
                keyid:F8:64:80:82:F8:88:D4:09:7A:C4:CD:BA:84:66:0B:93:0F:75:03:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GSAgviI1Al6xM26hGYLkw91A18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b6612b-953e-4c6c-aad0-3af9a4b0a873/1/1-GSAgviI1Al6xM26hGYLkw91A18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:40:93:1f:a7:c6:5b:9f:f0:de:e2:18:6d:8e:bc:46:28:cc:
         48:d7:7d:88:6b:c9:00:04:a6:06:c7:28:6a:36:cb:44:33:a4:
         ab:77:73:88:19:40:53:a1:10:f1:04:3f:40:13:fe:63:fb:00:
         4d:ed:5b:34:cd:89:61:15:bf:3c:47:e7:fc:55:fe:6a:73:7c:
         32:65:cb:0f:ea:ca:27:6b:91:73:37:9c:8c:38:47:13:27:7f:
         55:c9:aa:1b:bd:9d:a2:22:60:b8:2d:19:f3:dd:5b:5d:c6:62:
         22:5d:44:0f:f0:df:41:cd:7b:b9:fa:2a:6c:49:25:f1:11:5d:
         87:5c:26:03:d5:bf:1b:ed:00:4d:bf:c2:5e:5a:c5:85:25:95:
         a1:30:db:12:ae:e3:a3:f4:9c:9c:45:9d:79:7b:b7:d6:b0:ce:
         2a:98:55:f7:3d:04:89:90:ae:c5:4b:22:b2:5e:66:3e:30:08:
         e6:7b:02:c3:5b:23:86:6b:83:87:eb:6c:de:f7:72:08:f3:d1:
         f4:67:22:c2:44:a6:8f:61:6d:be:0a:af:a0:ae:11:df:72:49:
         72:e2:c2:7b:a4:1e:94:15:93:10:00:98:8e:44:05:af:0d:58:
         2e:72:0f:74:2d:db:43:f3:cc:32:79:e7:5f:b0:94:44:83:22:
         1b:fe:28:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:53:42 2026 by rpki-client