Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/gESlWNFd_DudSn4GZfhtJXzQKgA.mft
File:                     gESlWNFd_DudSn4GZfhtJXzQKgA.mft (raw, json)
Hash identifier:          eiUlC7Vq5HPpf8hBPj3FcJixviue86YlazUt9iCl9r0=
Subject key identifier:   9A:AB:7A:BA:1E:EF:F3:DD:77:09:0E:90:23:54:BB:C6:A4:78:87:A5
Authority key identifier: 80:44:A5:58:D1:5D:FC:3B:9D:4A:7E:06:65:F8:6D:25:7C:D0:2A:00
Certificate issuer:       /CN=8044a558d15dfc3b9d4a7e0665f86d257cd02a00
Certificate serial:       01A0C47B6623D3F8C12D46C6D550FBAA7A2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gESlWNFd_DudSn4GZfhtJXzQKgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/gESlWNFd_DudSn4GZfhtJXzQKgA.mft
Manifest number:          83
Signing time:             Mon 21 Sep 2026 15:00:16 +0000
Manifest this update:     Mon 21 Sep 2026 15:00:16 +0000
Manifest next update:     Tue 22 Sep 2026 15:00:16 +0000
Files and hashes:         1: GKCt3cmjekjcOKMyEhwefZlY1Rc.roa (hash: kX5yQbk7hXqB67DfOETyQgSWwx15qJbJ3YV1PzD/luE=)
                          2: GPicX2Mt4yE_Rq_pflq6xcNfgak.roa (hash: WxqHtA7vCCWgN8qQIvP/TGNrMuKDdpeonE+DyVIgdYU=)
                          3: JdshNWWzWPDoGnEpynR-0_yncmk.roa (hash: 4NdKzjZWez2M4flsHtC7zl6N0sNaTuq1cnyE5IXfYFI=)
                          4: gESlWNFd_DudSn4GZfhtJXzQKgA.crl (hash: lcL1dKpmtlTBwuiv9T/EJz4BD4vzg4NiqLWpIChb0fc=)
                          5: voT2ZQWnx_qNk8Q73rnGykwMWF0.asa (hash: iR3qSJDhDxakqrHwnJqkfuFb/IgbG88thxvrUJtAz0I=)
                          6: wYw4IK_-KzyNyRppSgS5ykkfb9E.roa (hash: 6EiFxAzV99YwwMrQ7lvVQuxFjGeaDZgFc75JscpJEx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/gESlWNFd_DudSn4GZfhtJXzQKgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/gESlWNFd_DudSn4GZfhtJXzQKgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gESlWNFd_DudSn4GZfhtJXzQKgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:7b:66:23:d3:f8:c1:2d:46:c6:d5:50:fb:aa:7a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8044a558d15dfc3b9d4a7e0665f86d257cd02a00
        Validity
            Not Before: Sep 21 15:00:16 2026 GMT
            Not After : Sep 22 15:00:16 2026 GMT
        Subject: CN=9aab7aba1eeff3dd77090e902354bbc6a47887a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d0:86:c6:f2:04:31:09:fd:16:6b:de:31:10:
                    ef:11:09:f6:3d:56:40:9b:7f:81:89:b9:42:1f:73:
                    96:b8:a5:54:32:55:50:5e:bb:7f:d8:91:8a:a5:d1:
                    dc:e6:a9:6f:a0:40:0c:83:5b:4f:2f:ed:03:fa:a9:
                    18:ad:ab:ab:da:84:7a:b0:d4:0c:74:69:8d:2c:b1:
                    80:a4:65:b4:be:8a:2e:1a:e1:d4:23:a2:2e:76:2c:
                    16:b5:91:d7:c0:58:dc:e2:c8:6d:61:33:ed:ad:52:
                    27:04:fd:ee:bd:b8:a3:b0:1d:9b:f5:23:53:79:56:
                    68:6b:59:a3:f3:14:d8:a4:83:c8:d9:42:ec:06:f4:
                    31:6b:4e:0a:23:7a:9a:48:5e:b9:29:7f:1e:2e:97:
                    fd:4a:67:41:f7:72:df:5f:d3:42:17:73:13:f2:10:
                    d7:17:f8:b2:71:87:e6:3d:ff:eb:33:90:5a:6a:ba:
                    de:77:a4:d3:a9:82:9c:b1:70:5f:a0:80:11:6e:57:
                    e1:81:e5:ff:fe:08:e1:e9:7d:65:e6:80:3f:68:12:
                    dc:99:86:2d:37:74:eb:c3:aa:b0:ba:44:82:ad:18:
                    da:1a:3b:a5:03:c8:10:e8:56:40:37:bc:9f:e6:ce:
                    bb:fb:50:b6:20:de:fe:9e:92:12:4a:f0:df:60:16:
                    8b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AB:7A:BA:1E:EF:F3:DD:77:09:0E:90:23:54:BB:C6:A4:78:87:A5
            X509v3 Authority Key Identifier:
                keyid:80:44:A5:58:D1:5D:FC:3B:9D:4A:7E:06:65:F8:6D:25:7C:D0:2A:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gESlWNFd_DudSn4GZfhtJXzQKgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/gESlWNFd_DudSn4GZfhtJXzQKgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/gESlWNFd_DudSn4GZfhtJXzQKgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:5e:d3:99:6d:97:e5:70:1b:e1:2a:85:17:a5:3d:88:2c:0e:
         fb:de:92:79:de:ea:85:c3:71:a3:5e:34:1b:cd:49:aa:8a:0c:
         dc:e7:84:c8:38:f4:0e:13:9c:d4:d3:6e:bc:14:64:b9:31:97:
         98:5f:6e:bb:f1:5e:95:be:3a:fa:36:cc:52:4f:b1:d4:b9:81:
         e8:53:3b:d3:b0:d9:b0:f6:e1:ac:c6:72:50:68:fa:e4:53:5c:
         ee:6e:d9:b3:8e:46:cf:53:5e:3b:9f:df:3d:d8:5c:3d:05:55:
         e8:b6:5a:63:48:bc:f9:cc:ff:48:88:22:12:a4:1b:cf:33:30:
         d8:d7:3f:40:cc:e8:5e:47:4e:10:1c:00:58:42:be:01:8e:cb:
         a9:fb:25:bb:19:e1:c9:4c:cb:17:f6:52:f3:ba:36:0d:c9:6d:
         a1:0a:5a:a2:5a:9e:8b:9b:f5:5f:86:8e:59:3b:da:0f:f5:d1:
         5c:ad:25:39:67:13:28:67:3f:1f:d4:43:09:dd:86:e4:5e:af:
         98:94:6a:f6:c0:b8:db:e4:9e:f4:27:30:c1:68:23:fa:d7:ad:
         ea:93:ca:3e:9f:a1:e4:4f:b6:07:07:e5:9c:56:07:0d:16:e0:
         e3:ee:81:ae:01:ce:93:47:73:c3:bc:1b:ca:25:a0:01:d0:5a:
         9c:bf:99:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:12:43 2026 by rpki-client