Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
File:                     gV_CISVyYlbWo189oo91E90xwf4.mft (raw, json)
Hash identifier:          zSc20qdK4uZBLSGJy5Ago8CV5ZUaXNbhTxLuX/Oli0w=
Subject key identifier:   DD:F6:7E:CE:8F:2F:04:0E:C9:D5:39:66:B1:90:07:89:D7:D2:94:10
Authority key identifier: 81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE
Certificate issuer:       /CN=815fc22125726256d6a35f3da28f7513dd31c1fe
Certificate serial:       01A0EAE5037C4830571F3F355EC2620DB88E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
Manifest number:          1A0A
Signing time:             Tue 29 Sep 2026 02:01:11 +0000
Manifest this update:     Tue 29 Sep 2026 02:01:11 +0000
Manifest next update:     Wed 30 Sep 2026 02:01:11 +0000
Files and hashes:         1: gV_CISVyYlbWo189oo91E90xwf4.crl (hash: e9oVuCd4pAo8NK8KgVmhkPBzVruYh9N5dk3fzeWrnkg=)
                          2: lYK_65AKlFPw1-t6tjg4pQYtXHY.roa (hash: VCWprxMwmjsHW4IsRUv/igV1kqqp3MMJUQXFePAz+0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ea:e5:03:7c:48:30:57:1f:3f:35:5e:c2:62:0d:b8:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815fc22125726256d6a35f3da28f7513dd31c1fe
        Validity
            Not Before: Sep 29 02:01:11 2026 GMT
            Not After : Sep 30 02:01:11 2026 GMT
        Subject: CN=ddf67ece8f2f040ec9d53966b1900789d7d29410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8c:d1:c3:b5:cb:14:41:0b:64:c7:2f:07:ad:
                    2f:09:e3:38:9a:a0:e3:66:ec:3a:31:a6:c9:20:88:
                    c7:06:70:7f:c7:28:b1:8e:89:0e:cf:87:e5:b2:6e:
                    ef:f5:f1:09:1c:69:7a:39:3d:4f:21:bf:3d:df:e3:
                    b3:9b:5f:8b:6e:bd:6d:dd:73:b1:0b:70:2d:6b:e7:
                    16:a7:32:7f:2b:2e:2e:c5:a9:9f:23:35:4c:60:0e:
                    3d:46:db:95:65:e5:24:d0:6c:ca:88:e1:2f:3f:4f:
                    d7:da:c0:78:29:30:4d:73:37:ab:e8:fa:b1:3f:9e:
                    36:f7:36:b8:43:02:49:ef:70:37:26:9e:3c:0e:49:
                    96:0e:3d:9c:ef:97:f0:63:d6:58:bf:78:c9:de:0d:
                    2e:87:0b:5c:68:4d:df:c3:54:b7:6e:01:2a:71:99:
                    ca:ed:b2:e4:5a:0e:ed:35:24:5a:6b:09:6b:7e:01:
                    a4:eb:de:96:cd:33:b3:66:b6:a8:27:c5:9c:57:b0:
                    d8:b8:8c:3e:69:71:83:5a:79:07:98:e3:28:c4:96:
                    40:64:16:4d:52:99:d5:e6:93:7f:03:ac:b8:f6:a1:
                    da:bf:0e:23:0c:dc:e7:64:cd:62:cc:aa:51:cf:65:
                    c3:e8:95:d8:92:cf:9e:65:15:58:7f:a8:da:b0:5a:
                    d8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F6:7E:CE:8F:2F:04:0E:C9:D5:39:66:B1:90:07:89:D7:D2:94:10
            X509v3 Authority Key Identifier:
                keyid:81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ac:46:d2:35:e9:1a:89:38:ad:68:6e:98:2f:76:4d:53:d6:
         2f:08:ea:83:a1:0e:9d:44:05:ba:68:e2:e1:83:51:09:2a:f2:
         61:e4:0f:7c:9f:01:ea:c4:3c:28:c6:67:2f:81:fe:4e:09:00:
         39:53:c9:ee:d1:b9:bc:a1:6d:da:c6:ba:bf:4a:fd:be:5b:0e:
         55:67:5c:73:23:e8:38:61:42:82:41:f4:e8:28:31:e9:3b:d3:
         2c:a2:85:06:14:12:d0:64:4e:dd:27:3c:73:64:b3:b7:9e:eb:
         31:30:15:ce:71:59:c5:8b:0c:21:f1:30:f6:fb:0b:dc:c5:74:
         fe:69:f0:7f:ad:99:19:f1:35:ad:fa:2e:7d:fb:4b:87:37:26:
         54:4b:f7:49:fe:bb:47:e5:00:39:28:c5:1f:86:50:c0:09:24:
         52:80:56:97:1d:24:5b:3c:cd:9f:23:86:c3:e0:83:7d:90:f1:
         da:0f:7b:92:ee:40:36:fd:02:be:da:35:01:e1:6e:4d:2e:aa:
         f6:61:aa:66:20:a1:5f:04:2f:1f:41:08:42:92:ab:9e:63:4b:
         26:32:3a:d6:12:af:c2:9b:68:33:00:07:09:ab:a6:2a:d5:0d:
         26:e3:cc:9e:13:26:b7:b8:9d:d3:7a:b1:6d:f2:c9:78:16:7f:
         02:ca:fb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 09:49:42 2026 by rpki-client