Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
File:                     GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft (raw, json)
Hash identifier:          ZbrQsj52csws2tcotn2To9rR29dDLkqXaTMUSJfQdp4=
Subject key identifier:   85:26:85:25:8A:B9:A3:C3:FB:36:C2:FD:55:BE:45:4F:9F:B7:16:6A
Authority key identifier: 1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61
Certificate issuer:       /CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
Certificate serial:       01A0DB0418B8E95F3E4CDE121CE0703E2898
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
Manifest number:          1A71
Signing time:             Sat 26 Sep 2026 00:01:13 +0000
Manifest this update:     Sat 26 Sep 2026 00:01:13 +0000
Manifest next update:     Sun 27 Sep 2026 00:01:13 +0000
Files and hashes:         1: GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl (hash: Umi6Ws1n38mGa9DbkOyb1FQ2uvy1DB4eGD0m8LZXmkQ=)
                          2: NYfYWYZMa_439o1QRYF0WdRM5MM.roa (hash: 8UO+Z6kVQhD/teXdacx0W8x4zMZ5SdEkPaLtrfrmHy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 00:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:04:18:b8:e9:5f:3e:4c:de:12:1c:e0:70:3e:28:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b31e73e6d3fc745f127a7ed990aa41214905e61
        Validity
            Not Before: Sep 26 00:01:13 2026 GMT
            Not After : Sep 27 00:01:13 2026 GMT
        Subject: CN=852685258ab9a3c3fb36c2fd55be454f9fb7166a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:67:2c:db:b9:59:29:36:03:4a:66:03:85:81:
                    2e:7c:81:25:cf:b9:26:3c:51:ff:60:cb:54:64:e7:
                    fe:d3:1b:cb:46:5f:a9:6c:2c:b6:82:fb:c6:44:fc:
                    ce:b7:dc:a4:1b:35:1d:af:89:bf:81:66:76:34:52:
                    36:bf:27:91:d7:1c:91:b2:92:ba:d9:e5:8c:d5:ac:
                    c8:e1:bf:a9:82:bb:34:72:aa:4a:bc:64:8c:0e:a8:
                    31:e5:b3:f2:c6:78:18:fe:36:b4:30:1a:6e:e6:f4:
                    95:a8:6d:96:73:dd:b6:02:96:5d:2c:8c:e4:af:a9:
                    7c:ab:19:50:87:b4:c8:f1:5a:53:c3:e3:73:39:f5:
                    cd:cf:87:63:06:d7:50:25:44:1a:5d:be:cd:7c:0d:
                    a5:fa:4d:38:27:e8:45:2d:d4:a1:4c:50:08:7b:19:
                    1e:c4:77:c0:ea:2d:22:3a:ac:ba:6b:20:11:54:b4:
                    49:c2:9d:80:2d:a6:70:75:6b:ef:ca:15:15:d1:18:
                    c7:78:98:fb:9c:fb:76:4e:0c:f5:96:c1:93:a0:b9:
                    71:00:1d:a7:3b:56:0e:e6:45:0a:29:63:46:ec:3f:
                    4e:03:fe:4e:22:72:54:f9:c7:b8:d7:b3:5b:8f:4d:
                    86:86:25:2d:0c:5f:08:b8:c0:3f:06:08:2b:80:6f:
                    30:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:26:85:25:8A:B9:A3:C3:FB:36:C2:FD:55:BE:45:4F:9F:B7:16:6A
            X509v3 Authority Key Identifier:
                keyid:1B:31:E7:3E:6D:3F:C7:45:F1:27:A7:ED:99:0A:A4:12:14:90:5E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1fdd6-730e-4af0-8a56-460273f16ddd/1/GzHnPm0_x0XxJ6ftmQqkEhSQXmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:11:c7:3c:12:55:16:af:ac:d3:f1:e9:46:47:08:1f:8a:3a:
         4e:37:ba:1b:ce:9e:61:07:f3:aa:f9:9d:cf:f1:7f:c1:85:e5:
         e6:f2:df:ed:ce:be:fe:c1:a3:e0:85:35:c9:73:e5:56:cb:f3:
         a4:0c:e5:80:42:a4:66:5e:ce:6d:81:85:fc:8d:67:02:90:5e:
         f2:05:cf:fc:c4:19:16:91:67:26:bb:be:dd:0e:86:43:a0:d3:
         92:b0:e6:f1:1f:95:a9:f5:37:8e:6d:68:0e:43:95:a5:68:3e:
         4b:63:31:d5:6b:c5:83:e6:de:32:0b:f1:1e:58:c1:16:c5:bb:
         df:ce:f4:bb:b9:f2:86:2f:15:00:57:0f:5e:32:94:6e:47:ce:
         14:a6:0e:09:33:25:86:57:1f:08:01:c2:bb:83:50:fa:aa:c7:
         64:30:09:65:58:c8:39:a0:d9:94:43:44:4c:82:a3:61:f8:0c:
         96:8a:b8:05:88:a3:3b:b8:d1:dc:6c:35:92:4a:f5:f7:83:f0:
         3a:b6:a3:64:60:4d:bb:4b:8c:db:bd:41:ac:6d:43:8b:bf:ff:
         6a:58:d8:b7:5d:89:aa:2b:f0:27:79:08:ed:e0:71:24:0d:6f:
         56:d9:f0:1e:cb:68:18:6e:9d:a0:ff:17:15:5a:d9:d5:a3:17:
         3a:50:86:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:04:18 2026 by rpki-client