Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
File:                     GfGp3RJvNyN84gD7hhb_k3vKlmw.mft (raw, json)
Hash identifier:          IIdU7hgw1K/g+Oii8OD7DuFa5cxA5C14Hft0aCDn6to=
Subject key identifier:   C9:CF:CA:A9:68:46:25:6C:71:63:AE:43:51:64:4F:B5:12:84:A5:AF
Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C
Certificate issuer:       /CN=19f1a9dd126f37237ce200fb8616ff937bca966c
Certificate serial:       01A10F27DB9EBE627CD086639C21F4FE5E0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
Manifest number:          1A8C
Signing time:             Tue 06 Oct 2026 03:00:32 +0000
Manifest this update:     Tue 06 Oct 2026 03:00:32 +0000
Manifest next update:     Wed 07 Oct 2026 03:00:32 +0000
Files and hashes:         1: 7owqXESGy_RXh39I2zXYrOmIRmY.roa (hash: uD/kXqY4+DVU4PEvK0O92LooxshLndRFHktHnH9fzjs=)
                          2: FhTqn0nI2AOefAde-zGtbwEbRRY.roa (hash: pvmj7N2aWwyL4DhPFHc9oWpCfcCMtoks7zjIuX/XA3M=)
                          3: GfGp3RJvNyN84gD7hhb_k3vKlmw.crl (hash: 4W/NSTIGeD9e7sA39Ik05bz7mZZNuYAP7d7UnbJLg1U=)
                          4: IjVQWwZv9EJg_zhL2dYrs3DlkR4.roa (hash: 9Z9gCW1kabV4H10WypJ+CcaUnOFek5gLKpjj5o/RjC0=)
                          5: WYkunCsYhA2teRxLAg2Szm4t8hg.roa (hash: qVG+UMRzYieYY8QAWvVzEcBUYsd1eqpIARZQP14+D/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 03:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0f:27:db:9e:be:62:7c:d0:86:63:9c:21:f4:fe:5e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c
        Validity
            Not Before: Oct  6 03:00:32 2026 GMT
            Not After : Oct  7 03:00:32 2026 GMT
        Subject: CN=c9cfcaa96846256c7163ae4351644fb51284a5af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:31:d3:9d:ac:a6:54:55:c3:0d:10:56:64:2f:
                    73:28:bd:80:93:e0:71:78:88:e1:81:76:0c:11:c2:
                    9a:d2:f7:ea:f7:49:4c:b8:5c:72:d6:1a:dc:e1:bc:
                    c5:47:7c:dd:b8:93:22:ac:5d:1b:79:1a:16:f8:ea:
                    62:16:37:3c:fc:d3:6d:c0:c4:b8:d4:0b:95:01:fb:
                    02:2e:73:fc:36:84:19:65:72:b7:14:6b:37:94:bb:
                    a0:4c:c4:e6:6e:a8:62:a2:d1:a4:f4:72:37:0e:06:
                    6a:7a:ab:57:26:c9:2b:16:bd:e6:14:5b:5d:ef:03:
                    8d:91:94:2e:93:98:67:d6:69:a5:af:62:b0:4f:35:
                    0d:c1:a9:f6:1a:34:53:92:c5:ad:e3:38:37:17:dc:
                    8c:72:ab:d5:10:d3:ca:2e:c6:1d:7e:57:1e:36:96:
                    e6:3b:34:b5:34:f2:e4:20:4d:de:cd:8d:74:59:01:
                    4c:af:41:23:aa:68:21:b9:57:88:ac:c3:6a:ea:10:
                    03:e1:f0:0a:e7:c2:36:05:52:15:7d:a5:bd:62:ca:
                    68:c0:60:dd:47:7f:88:71:e1:7c:50:7d:42:41:68:
                    9e:64:a0:e6:56:11:04:b5:dd:3f:3b:c7:b5:e1:ad:
                    9b:46:aa:d0:81:1a:70:10:23:3d:cb:dc:45:de:40:
                    ee:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CF:CA:A9:68:46:25:6C:71:63:AE:43:51:64:4F:B5:12:84:A5:AF
            X509v3 Authority Key Identifier:
                keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c3:60:76:f6:54:54:17:5a:5a:0b:b7:09:10:0f:97:b2:fe:
         2c:ed:87:61:32:a4:88:1b:b8:1c:39:82:d3:06:0f:d7:2c:6c:
         21:00:30:96:4b:b2:f8:85:67:17:fe:ec:10:3e:55:d1:58:33:
         4d:e7:0d:3b:73:af:24:a5:e4:49:5e:82:38:b3:b2:3a:ae:66:
         3d:5c:6e:4f:43:83:8d:e2:0c:b8:11:9a:7d:91:ef:17:a4:f9:
         8d:1a:e1:94:f1:d7:33:79:de:62:62:b4:25:76:54:49:01:6e:
         b4:61:af:67:11:a5:87:ca:26:7e:c4:6d:39:e3:b9:74:ae:87:
         d4:9d:d9:ec:81:ea:66:d9:60:58:94:60:ef:6d:92:70:b2:27:
         9c:e0:91:e9:d4:37:b1:a3:b0:35:aa:0d:6a:b0:21:d5:93:af:
         97:29:41:11:9c:ba:a4:4e:77:3d:52:e7:7d:22:25:69:ee:4d:
         ec:a8:b6:69:05:ca:72:61:35:2a:d1:68:27:3e:01:44:27:ae:
         19:a3:d9:05:c9:a1:2d:24:16:66:76:7c:2c:a7:91:69:41:aa:
         4d:ca:9a:76:9a:74:0a:96:00:00:dd:1a:c0:5b:68:77:ca:56:
         35:35:a0:5f:bd:15:cd:0c:47:5d:75:b4:0d:ba:36:c8:0b:a8:
         47:36:73:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 11:09:04 2026 by rpki-client