Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
File:                     GimypF3gE2_qu_rkuqcBcqqGYZs.mft (raw, json)
Hash identifier:          Aesbgt2cOUgeUK5zXjKMb4g/khRX8RgH6KW/prSqlLA=
Subject key identifier:   9C:0A:DE:67:CA:F8:E0:A2:6E:F3:61:E1:57:96:6C:ED:DD:7C:A5:61
Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
Certificate issuer:       /CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Certificate serial:       01A0DC4DDB234045AE5371A9390297DA1492
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
Manifest number:          1A75
Signing time:             Sat 26 Sep 2026 06:01:24 +0000
Manifest this update:     Sat 26 Sep 2026 06:01:24 +0000
Manifest next update:     Sun 27 Sep 2026 06:01:24 +0000
Files and hashes:         1: GimypF3gE2_qu_rkuqcBcqqGYZs.crl (hash: C+rjx9b9rC3+XhU90pLiRQLbjcmKAYCptBMwwSkBQ5w=)
                          2: _LIMNGBB_bM1l_RNh7Jn1ke8Z1Q.roa (hash: Y1Vdc4Bk2253+dyiXjTYX2rbKWMSURyUVb6exyc6X4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:4d:db:23:40:45:ae:53:71:a9:39:02:97:da:14:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b
        Validity
            Not Before: Sep 26 06:01:24 2026 GMT
            Not After : Sep 27 06:01:24 2026 GMT
        Subject: CN=9c0ade67caf8e0a26ef361e157966ceddd7ca561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:41:c7:90:b5:8e:46:18:e9:3f:5b:56:49:3e:
                    bf:3a:49:de:e2:4e:50:f9:cb:bd:b1:ff:49:5f:21:
                    99:0c:68:c9:a1:05:72:a0:88:9f:f2:1d:e2:b0:88:
                    ac:4e:7f:bc:44:f7:10:87:d2:7c:4f:aa:01:f6:39:
                    67:4b:4f:a6:36:02:aa:2d:2e:44:64:e2:df:2f:f2:
                    97:85:72:b7:d7:20:93:ff:02:61:27:f8:be:83:03:
                    04:f0:2f:f0:3a:1b:69:ce:ed:9b:76:9a:8c:ff:d8:
                    9d:8a:b0:fd:58:78:97:a9:17:63:f9:07:6f:42:78:
                    f2:71:04:0d:c3:c1:e8:64:24:0c:45:f8:ed:55:0d:
                    7a:69:2f:44:37:5d:7b:5e:af:89:66:42:17:40:1b:
                    ce:87:52:59:66:14:f3:a1:0d:0a:8e:b3:c3:22:39:
                    60:5b:47:36:5a:50:ce:29:64:16:93:3a:99:03:88:
                    a3:f7:80:6f:7b:28:bb:46:ae:e5:b9:9f:fb:3a:ad:
                    32:51:ed:65:ac:e0:7f:2c:4a:51:34:ed:f1:17:19:
                    cf:a9:e2:b5:6d:15:cf:e6:3e:f3:ad:f0:bb:6f:46:
                    ee:9c:3d:b9:25:26:c6:bc:02:69:5a:b0:0f:59:c5:
                    22:f3:7a:64:aa:b3:35:56:78:f1:a9:89:a2:44:3f:
                    c2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0A:DE:67:CA:F8:E0:A2:6E:F3:61:E1:57:96:6C:ED:DD:7C:A5:61
            X509v3 Authority Key Identifier:
                keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:94:8e:28:d9:d3:93:22:2e:32:bf:76:24:c2:24:81:fa:c1:
         36:e1:08:33:02:fe:be:41:cc:95:c4:23:27:7b:bc:e9:bb:9e:
         e0:8a:ec:b5:e7:74:42:7a:5d:ae:df:6b:41:a0:24:73:8f:85:
         29:68:b6:ad:27:58:3f:b8:01:21:26:4d:90:08:57:dd:c4:65:
         ba:48:57:8d:b9:33:a2:4a:fe:33:aa:27:11:9e:a3:95:a5:90:
         ad:6c:ec:11:96:f9:67:eb:b6:7c:48:2f:27:84:d5:85:90:88:
         3d:fa:4e:d5:61:e3:63:1d:17:c9:58:bf:fa:59:67:f8:d6:91:
         13:0e:6e:15:18:f3:ce:7e:f5:77:f7:62:a0:84:f4:a7:85:33:
         47:0c:4b:79:f3:67:17:f6:09:03:58:6c:ba:08:da:06:34:a0:
         18:9a:c6:fd:d8:7a:af:ae:53:de:01:1c:1c:c6:d9:f4:d6:1b:
         58:2d:6a:50:52:ab:9d:84:3c:d0:88:1d:99:af:d8:39:c2:86:
         70:ff:13:84:d7:79:6b:99:b3:92:15:39:36:64:25:d7:c3:96:
         37:ed:5f:99:a5:89:de:55:b4:57:26:d1:cf:94:6d:e1:c0:9c:
         4a:cf:52:6e:7c:6b:e4:e4:d0:4b:d0:27:4c:7b:d1:07:73:eb:
         dc:48:c7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:40:12 2026 by rpki-client