Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
File:                     GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft (raw, json)
Hash identifier:          1QwILrbLu0WA5SlHfzSh3G823KVizfmUtNDh/im8ONs=
Subject key identifier:   7B:64:A4:45:69:6C:06:7D:76:35:5F:03:E6:96:55:A3:70:2B:1E:C9
Authority key identifier: 19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91
Certificate issuer:       /CN=194e32a82e98f22d939ff9984455813be2ba6a91
Certificate serial:       01A0DA29019F54F4745D3BE8489E99010DA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
Manifest number:          058F
Signing time:             Fri 25 Sep 2026 20:01:55 +0000
Manifest this update:     Fri 25 Sep 2026 20:01:55 +0000
Manifest next update:     Sat 26 Sep 2026 20:01:55 +0000
Files and hashes:         1: BZBAahTREA8Q_3coOvyfGf9sdjY.roa (hash: jde/2VQaoII8kUESbj5JRDjPMDFmOdYKULZBf+Xi1JA=)
                          2: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl (hash: DPnGxAyy1UaoHelxfBfMdob12REiKdQ8hwIxuR11iDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 20:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:29:01:9f:54:f4:74:5d:3b:e8:48:9e:99:01:0d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194e32a82e98f22d939ff9984455813be2ba6a91
        Validity
            Not Before: Sep 25 20:01:55 2026 GMT
            Not After : Sep 26 20:01:55 2026 GMT
        Subject: CN=7b64a445696c067d76355f03e69655a3702b1ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6b:ca:a2:79:f5:3b:85:68:8f:35:f6:9d:84:
                    4c:08:b0:77:aa:0d:bc:3c:99:b7:8c:e7:46:51:87:
                    b4:dc:12:c4:db:0a:29:76:b6:7b:4b:55:69:2c:07:
                    17:72:35:f3:1f:02:3c:46:49:da:80:e8:fc:c3:49:
                    72:cd:9c:5f:ec:e1:9b:5a:92:08:23:5c:f6:3e:28:
                    6f:73:fa:02:ac:2f:7a:b8:45:79:7d:fe:58:5b:2d:
                    84:08:69:aa:3b:c7:cf:76:9c:00:97:e0:e3:11:90:
                    7a:c6:72:2b:11:51:af:2f:27:24:bc:38:fd:9e:1d:
                    2f:bd:06:3d:b9:75:82:55:01:3a:67:a1:4f:01:23:
                    5a:22:3c:cd:5a:00:69:5b:58:30:14:51:a7:b9:cd:
                    3b:8c:a2:d7:3f:28:ed:93:24:0a:df:0f:49:e0:e1:
                    29:c3:aa:95:96:b3:56:76:bc:8f:97:9a:f2:ce:42:
                    47:f0:4c:25:e2:5a:a9:f9:83:1d:24:c1:e0:d5:e0:
                    4c:49:6a:7f:2c:cb:08:51:78:8c:78:31:1b:60:35:
                    4a:28:98:68:71:9c:6f:af:6f:78:56:91:d8:10:79:
                    3e:88:f6:37:d2:ef:4b:ff:4b:c8:a0:79:68:6b:97:
                    6c:a3:6c:1a:7f:cd:e9:36:f2:86:66:02:2b:7f:92:
                    2e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:64:A4:45:69:6C:06:7D:76:35:5F:03:E6:96:55:A3:70:2B:1E:C9
            X509v3 Authority Key Identifier:
                keyid:19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d5:fa:d4:6f:a6:3b:2f:2b:f8:71:cc:47:ce:6f:c2:80:cf:
         01:07:cd:8b:76:42:ab:ee:25:3a:94:2a:46:ad:7b:e0:5a:ef:
         ce:9f:bf:e6:02:77:85:b5:58:c2:fb:a3:55:4a:f0:3a:1b:2c:
         ad:b2:f4:dc:0c:0d:1c:c4:bd:b2:27:06:39:4e:ed:93:c8:72:
         45:ac:15:bd:c7:a3:bf:8d:b4:d6:83:6d:82:b1:f3:ee:d3:85:
         63:74:95:5b:d3:d4:a2:22:5d:2d:cf:65:68:2f:8a:4d:47:a0:
         0e:dd:60:64:f6:6c:93:47:d9:c7:13:66:92:e6:63:41:c6:67:
         16:1f:57:ee:a5:16:f2:c5:0e:fe:80:38:bb:2d:bf:72:74:60:
         2a:49:23:29:fe:6b:a5:d5:1e:de:81:38:15:6c:c8:35:d5:0d:
         99:83:4a:13:ac:29:cd:7a:b5:7e:8a:cd:b7:4f:9f:d2:fb:cc:
         19:2f:e6:39:ef:62:62:e7:ed:19:f9:95:d4:ef:cd:77:52:f5:
         1e:dc:25:60:0c:4f:bd:58:b9:8e:b9:ea:fb:3b:96:c2:f6:ea:
         c0:e5:a3:87:64:09:87:e1:d7:b9:61:8f:f8:7c:4b:48:e7:d8:
         61:78:36:c6:66:14:39:c1:bf:da:1c:4d:56:71:d7:17:ee:24:
         b9:01:0b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:29:47 2026 by rpki-client