Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.mft
File:                     GvG1DCVL0yR-iyldWF5iBm5rtdQ.mft (raw, json)
Hash identifier:          o4q2i4W5Ze6JAawfkxbS9LrnEPdphsuk776LQv3FZ7A=
Subject key identifier:   20:84:2F:B4:05:0D:63:A4:E1:A5:98:EF:51:83:BB:DF:C4:52:77:E9
Authority key identifier: 1A:F1:B5:0C:25:4B:D3:24:7E:8B:29:5D:58:5E:62:06:6E:6B:B5:D4
Certificate issuer:       /CN=1af1b50c254bd3247e8b295d585e62066e6bb5d4
Certificate serial:       01A13A49057317025DB4762DBDAB47CEF04A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GvG1DCVL0yR-iyldWF5iBm5rtdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.mft
Manifest number:          011C
Signing time:             Wed 14 Oct 2026 12:00:26 +0000
Manifest this update:     Wed 14 Oct 2026 12:00:26 +0000
Manifest next update:     Thu 15 Oct 2026 12:00:26 +0000
Files and hashes:         1: 768i5q9Q1IPj0343NKNk7lOkYAg.roa (hash: s9OQdsGX+sfyQxXWbx9LyVNNyjVCI8W1Nl9Y367w2nw=)
                          2: GvG1DCVL0yR-iyldWF5iBm5rtdQ.crl (hash: X1xjKuKUjFHtIgXQnbyxyQeI5OLwcXzRhMsul4eZW74=)
                          3: RsOEMIH24_zjcm5Tb9OM-o4S8HM.roa (hash: 6XnQ+iDSw/RX0OUv6MFChlZfoWbfa+RL33606GyYig4=)
                          4: TC1WJhIqS5YyYCF7c6UbQzyCxIA.roa (hash: IBegOftzNU2I7gMVa4Vw1YN978e8IznFPxboB3IfNzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GvG1DCVL0yR-iyldWF5iBm5rtdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 12:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3a:49:05:73:17:02:5d:b4:76:2d:bd:ab:47:ce:f0:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1af1b50c254bd3247e8b295d585e62066e6bb5d4
        Validity
            Not Before: Oct 14 12:00:26 2026 GMT
            Not After : Oct 15 12:00:26 2026 GMT
        Subject: CN=20842fb4050d63a4e1a598ef5183bbdfc45277e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bd:73:38:d8:4e:de:12:e4:bc:a7:6a:02:07:
                    45:d0:d8:7b:9a:60:a6:1b:60:9f:19:83:45:42:a8:
                    4d:3f:35:9b:7e:86:4a:0c:62:61:48:70:bc:20:03:
                    23:5e:06:a0:b6:a4:cd:1f:70:e4:4c:d0:ff:fd:69:
                    bb:c7:0c:50:90:45:95:22:eb:82:54:fa:a1:01:a3:
                    df:00:32:c9:cf:dd:4d:6f:19:d3:70:ae:af:6b:04:
                    ac:b7:93:5c:37:d8:4b:a3:bb:82:d2:2d:3e:98:bd:
                    a6:c1:2f:ba:1c:fc:10:59:21:b7:ec:c6:bc:10:ac:
                    3c:2a:d3:7f:71:80:be:76:1e:4c:b5:fe:65:4c:ab:
                    11:d5:e4:33:16:3e:e9:98:1a:6f:82:7d:d0:35:7f:
                    a0:8a:f8:b7:2c:8c:a9:bb:72:6e:98:d9:ae:e2:d6:
                    29:71:0b:8e:eb:08:a9:f8:7a:ce:39:26:55:0b:1c:
                    94:a8:14:bc:25:fa:87:e6:60:a7:87:c0:c9:09:9e:
                    58:a7:1c:fb:04:33:ff:ee:3c:54:33:17:d4:f7:8e:
                    30:a2:a5:78:2b:a1:eb:92:f3:bf:c2:a0:24:f7:b0:
                    16:fb:39:d0:de:0b:93:4b:14:c9:01:5f:d9:3a:97:
                    aa:05:d9:ab:d7:8f:f7:0b:72:09:a4:1a:d8:07:8f:
                    54:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:84:2F:B4:05:0D:63:A4:E1:A5:98:EF:51:83:BB:DF:C4:52:77:E9
            X509v3 Authority Key Identifier:
                keyid:1A:F1:B5:0C:25:4B:D3:24:7E:8B:29:5D:58:5E:62:06:6E:6B:B5:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvG1DCVL0yR-iyldWF5iBm5rtdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:cf:13:f9:1c:a3:50:9f:dd:ca:a1:28:cf:fe:12:e7:ff:78:
         44:a4:27:71:4a:29:ab:17:a8:51:ad:0b:ee:1d:26:c0:d9:48:
         64:60:41:01:a6:3f:c9:6e:12:60:42:59:fa:ce:b9:d8:32:de:
         a8:72:9e:85:2e:81:f5:a0:0e:5b:78:dd:fa:c5:73:cd:a0:5b:
         14:dc:4b:3c:37:0e:87:59:69:4f:6a:e0:3d:e1:de:cb:e7:a3:
         60:45:94:6c:24:59:41:60:c7:c1:8b:4c:a0:af:01:de:7a:f5:
         d2:e4:e5:eb:d0:cb:4b:49:1c:bf:56:aa:90:de:4c:ae:74:46:
         d2:c3:fe:48:5d:f6:ac:2b:be:7e:35:19:a4:5b:58:ba:dd:2d:
         5f:d7:2d:1b:c5:ff:f1:0f:4f:90:f5:39:92:ac:e0:c0:32:7a:
         f1:c1:02:7f:aa:ed:a9:9f:c5:67:a0:5a:6c:a9:db:d7:71:73:
         fa:93:ce:81:1b:49:a2:fc:22:c1:af:77:89:6a:a7:4c:9a:5a:
         69:c7:54:89:ac:6e:f0:0d:dc:d0:19:23:6e:dd:40:b7:15:3d:
         fc:06:25:10:1f:18:3c:d8:20:f9:4d:f8:6c:4d:e1:34:5c:e0:
         28:fa:3b:d5:f9:db:1d:63:d0:1b:7d:23:8e:e3:40:97:87:93:
         88:8c:3b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 19:26:27 2026 by rpki-client