Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
File:                     GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft (raw, json)
Hash identifier:          3xeMPYU8wsBmxG8gJqrpLbHiwj3RX0J6X36lII0u/yk=
Subject key identifier:   01:2B:02:35:4C:47:2A:BC:AA:A2:47:42:3A:63:DE:DD:94:19:0D:10
Authority key identifier: 18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
Certificate issuer:       /CN=184c7c0364f1093cfc584c93037024104fb4854a
Certificate serial:       01A0C6A11A84800FDFA9EEFC1021D6765A93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
Manifest number:          145E
Signing time:             Tue 22 Sep 2026 01:00:41 +0000
Manifest this update:     Tue 22 Sep 2026 01:00:41 +0000
Manifest next update:     Wed 23 Sep 2026 01:00:41 +0000
Files and hashes:         1: GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl (hash: VE7lmDMoqARE3knmUiAerNY6NC5B9YFq+2txeHNp1W0=)
                          2: UQ_3tdEvusxpKm6g-bRZq8tkD4E.roa (hash: s1CWyQo9MuJT6cKRpUhun2W2gEgTiwk/dhUNwuJXn1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 01:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:a1:1a:84:80:0f:df:a9:ee:fc:10:21:d6:76:5a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184c7c0364f1093cfc584c93037024104fb4854a
        Validity
            Not Before: Sep 22 01:00:41 2026 GMT
            Not After : Sep 23 01:00:41 2026 GMT
        Subject: CN=012b02354c472abcaaa247423a63dedd94190d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e4:02:fb:cc:f0:b2:3c:69:9f:cd:55:b4:cf:
                    37:af:3e:53:94:a0:c0:9c:91:f1:7a:24:79:45:eb:
                    48:d5:59:e8:cc:71:c9:6c:81:0c:b5:fd:fc:4d:c1:
                    e9:2c:2b:85:57:f6:29:6f:42:f2:8c:47:f5:59:58:
                    3c:68:62:16:6c:18:20:bb:2d:ed:a2:b4:1b:8f:36:
                    c4:9e:b1:45:f9:07:85:c3:84:c4:ea:c6:94:d2:9d:
                    6b:d9:c7:9c:81:45:10:3a:28:5d:73:ee:f4:f9:43:
                    6a:74:cc:83:50:b2:ee:b9:0c:77:06:f3:c9:71:a5:
                    89:e9:5e:99:49:df:24:32:77:9b:17:57:e2:a2:dd:
                    bb:13:71:bb:8c:74:73:6a:5f:86:a4:99:f9:61:df:
                    9b:fd:fa:80:2c:8c:ec:d1:08:df:43:cf:10:ff:f9:
                    aa:c9:aa:23:fa:ba:4d:35:5c:c9:fd:d8:55:89:f5:
                    1a:3f:83:15:21:15:0a:01:ba:e7:d5:80:24:ef:76:
                    aa:8e:ed:f6:af:22:26:b9:30:cf:94:6a:1a:aa:c6:
                    db:c3:cb:71:82:3f:2c:85:dc:a6:41:68:b9:87:34:
                    4b:90:b3:29:0b:82:7f:4a:64:e7:a5:d1:c8:04:50:
                    cf:cb:91:d8:d9:2e:be:6b:5c:0d:41:b9:5b:85:3d:
                    b4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2B:02:35:4C:47:2A:BC:AA:A2:47:42:3A:63:DE:DD:94:19:0D:10
            X509v3 Authority Key Identifier:
                keyid:18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:1d:63:82:6c:64:ae:e9:52:9f:72:ee:d4:8f:8b:ca:1d:16:
         f9:03:c7:d8:52:57:44:01:a4:30:28:df:fb:b3:d4:66:6a:70:
         50:34:c6:6f:a9:95:ec:98:ea:50:cb:c3:dd:2f:b3:3c:a2:58:
         ab:18:0b:4f:d0:1c:fb:66:84:a5:f7:57:07:7a:5c:49:b8:98:
         0b:9b:69:f9:47:e0:85:d8:03:b4:0f:34:ae:e2:57:7a:ff:d4:
         20:00:71:03:3a:af:9e:a9:db:57:ae:5e:67:6f:01:30:2e:3a:
         0c:e4:fa:ee:46:15:54:19:dd:1a:c6:45:9a:85:4a:e3:db:0b:
         9a:07:94:7b:2a:b9:f2:c1:8b:32:17:c1:a4:13:86:56:ea:70:
         90:42:46:7a:f8:f7:bd:27:68:e2:da:4a:f1:02:f1:20:bf:64:
         e1:c6:8f:fc:71:8e:77:05:18:98:ee:1b:cf:05:86:05:19:ee:
         bd:72:c4:f1:61:db:04:a0:14:37:e8:b9:2e:30:1e:53:09:1f:
         79:98:cc:d9:37:3a:37:c8:d2:2f:1c:a4:9a:c3:ae:a5:f2:52:
         5b:bc:bf:87:4b:48:3d:30:69:47:36:6b:d2:00:f4:07:a6:2e:
         6d:66:a2:ad:d9:1e:c1:7a:dc:de:a5:31:cb:4e:a8:e8:45:5f:
         a3:7c:16:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGoRqEgA/fqe78ECHWdlqTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NGM3YzAzNjRmMTA5M2NmYzU4NGM5MzAzNzAyNDEwNGZi
NDg1NGEwHhcNMjYwOTIyMDEwMDQxWhcNMjYwOTIzMDEwMDQxWjAzMTEwLwYDVQQD
EygwMTJiMDIzNTRjNDcyYWJjYWFhMjQ3NDIzYTYzZGVkZDk0MTkwZDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+QC+8zwsjxpn81VtM83rz5TlKDA
nJHxeiR5RetI1VnozHHJbIEMtf38TcHpLCuFV/Ypb0LyjEf1WVg8aGIWbBgguy3t
orQbjzbEnrFF+QeFw4TE6saU0p1r2cecgUUQOihdc+70+UNqdMyDULLuuQx3BvPJ
caWJ6V6ZSd8kMnebF1fiot27E3G7jHRzal+GpJn5Yd+b/fqALIzs0QjfQ88Q//mq
yaoj+rpNNVzJ/dhVifUaP4MVIRUKAbrn1YAk73aqju32ryImuTDPlGoaqsbbw8tx
gj8shdymQWi5hzRLkLMpC4J/SmTnpdHIBFDPy5HY2S6+a1wNQblbhT20qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAErAjVMRyq8qqJHQjpj3t2UGQ0QMB8GA1UdIwQY
MBaAFBhMfANk8Qk8/FhMkwNwJBBPtIVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0V4OEEyVHhDVHo4V0V5VEEzQWtFRS0waFVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82NjZkZDUtY2ZhMy00MGU3LWFhMzAt
OThmOTQwZTRkN2MxLzEvR0V4OEEyVHhDVHo4V0V5VEEzQWtFRS0waFVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS82NjZkZDUtY2ZhMy00MGU3LWFhMzAtOThmOTQwZTRkN2Mx
LzEvR0V4OEEyVHhDVHo4V0V5VEEzQWtFRS0waFVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQx1jgmxk
rulSn3Lu1I+Lyh0W+QPH2FJXRAGkMCjf+7PUZmpwUDTGb6mV7JjqUMvD3S+zPKJY
qxgLT9Ac+2aEpfdXB3pcSbiYC5tp+UfghdgDtA80ruJXev/UIABxAzqvnqnbV65e
Z28BMC46DOT67kYVVBndGsZFmoVK49sLmgeUeyq58sGLMhfBpBOGVupwkEJGevj3
vSdo4tpK8QLxIL9k4caP/HGOdwUYmO4bzwWGBRnuvXLE8WHbBKAUN+i5LjAeUwkf
eZjM2Tc6N8jSLxykmsOupfJSW7y/h0tIPTBpRzZr0gD0B6YubWairdkewXrc3qUx
y06o6EVfo3wWMw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:10:42 2026 by rpki-client