Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
File:                     GQNkfvskNmLlfmHU7EW0olo36sg.mft (raw, json)
Hash identifier:          X4o3rjzF4Iq2DfYqzyBuVQTQRuOPNtADYhQe9268V5Y=
Subject key identifier:   AF:AE:36:D4:C7:A9:45:97:A9:87:8F:59:AA:1D:AE:68:FE:1B:DE:92
Authority key identifier: 19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
Certificate issuer:       /CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Certificate serial:       01A0C77C6FE543006FC3A3AE3446A41D1016
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
Manifest number:          1A67
Signing time:             Tue 22 Sep 2026 05:00:16 +0000
Manifest this update:     Tue 22 Sep 2026 05:00:16 +0000
Manifest next update:     Wed 23 Sep 2026 05:00:16 +0000
Files and hashes:         1: GQNkfvskNmLlfmHU7EW0olo36sg.crl (hash: y9kZujd8Scf3/PCgbLlr16CwPApuFlZmEiXjlDC/SlQ=)
                          2: J0rH9JX0KbdTKOcoRoiVFom0Vhs.roa (hash: A8dP+OxNgGQqU96bazfRlPshwZe7IJ50JSO2KL6IocU=)
                          3: sYTH2xaYQo9XYa_EEP4k8tAtn3M.asa (hash: WJoWu8Ygfu3XEz0Y8P0zm4tHyBUMT7PoRt6+SRfESnE=)
                          4: zKoqr2AHpdD6h0Di-u6O91o2qr4.roa (hash: C7O0OLcevVEKUGD2h9jR8PHv05Lfi5ttiMBjrZhaHCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:7c:6f:e5:43:00:6f:c3:a3:ae:34:46:a4:1d:10:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1903647efb243662e57e61d4ec45b4a25a37eac8
        Validity
            Not Before: Sep 22 05:00:16 2026 GMT
            Not After : Sep 23 05:00:16 2026 GMT
        Subject: CN=afae36d4c7a94597a9878f59aa1dae68fe1bde92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:21:54:b0:a6:82:b5:de:63:cf:87:54:19:09:
                    4d:15:47:73:a9:d1:40:0b:83:eb:e6:3d:b8:2b:bb:
                    d0:63:93:c5:dc:7a:67:ed:96:f0:5b:17:db:6a:71:
                    b1:bd:84:6d:6c:0d:1a:b2:db:63:57:5e:82:a2:57:
                    63:13:de:12:b4:c2:8a:8c:32:b2:d8:fb:46:b7:18:
                    35:1d:dc:0f:2d:2d:51:53:4a:1c:9d:f8:ec:9e:13:
                    5c:6c:e2:68:11:5f:5c:13:76:d1:72:d8:6b:35:e6:
                    ac:f0:75:bf:22:20:a7:2a:c9:d9:97:31:43:05:60:
                    34:15:1b:e4:49:1d:47:23:fa:44:f6:7a:8b:5b:a6:
                    ac:97:4b:20:d6:7c:5f:10:69:d3:06:02:8c:20:0e:
                    56:27:62:80:e4:28:54:8a:bb:b7:10:4d:fe:ea:72:
                    28:8e:c3:d2:7a:09:db:5d:7f:54:2f:ce:39:07:f1:
                    f3:62:08:38:ad:6c:51:5e:b4:f0:37:42:28:4c:36:
                    75:86:de:9f:33:58:59:01:13:a1:be:4a:2e:6f:7e:
                    29:2a:17:da:b1:3a:88:cc:6b:f7:a1:51:71:df:17:
                    36:42:69:4b:4f:b0:0d:38:70:b2:2e:5c:8c:0c:24:
                    c4:bc:ae:b0:ae:d0:c2:4d:4f:19:f7:bd:f1:8b:8a:
                    77:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AE:36:D4:C7:A9:45:97:A9:87:8F:59:AA:1D:AE:68:FE:1B:DE:92
            X509v3 Authority Key Identifier:
                keyid:19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:bb:54:b2:55:d3:de:ab:d2:45:3f:d1:98:21:f8:d6:c9:a0:
         e8:fa:3a:64:df:e8:b9:e8:3a:ba:d9:93:da:9c:29:50:c0:21:
         45:7c:27:58:86:9e:91:b9:c8:0b:c9:69:26:2b:79:b9:61:69:
         07:17:ca:ba:70:f0:38:d6:53:ea:be:4a:68:a6:b3:75:79:2d:
         5e:c6:04:88:d1:ce:b6:8f:b3:9b:be:df:dd:b7:c6:e6:6d:40:
         04:07:7a:a0:19:35:1a:81:11:ea:52:62:ec:ab:75:e2:e0:97:
         aa:82:08:78:68:ef:47:91:b3:b6:e9:31:8e:68:0e:9e:db:eb:
         13:ef:b9:96:50:e5:48:a6:31:2d:66:86:22:b4:35:ff:ee:7e:
         7e:52:c3:4b:f2:24:89:8e:9e:39:8f:06:f2:6a:26:5a:47:aa:
         75:0d:f1:8c:4b:41:57:88:3f:67:db:e9:af:4c:aa:5c:f8:96:
         cf:4c:17:35:ee:30:0c:bc:54:b8:24:6b:89:b8:eb:ac:8e:47:
         1f:fa:46:c9:73:a3:db:fd:ad:bb:d6:fa:3f:20:7a:65:df:75:
         a7:9d:03:22:9b:ba:28:f6:99:bd:98:2d:27:e4:44:06:12:fb:
         95:8d:57:5e:2a:d1:91:22:7f:67:ce:04:bc:2e:00:05:fd:74:
         43:ee:ec:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:24:46 2026 by rpki-client