Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
File:                     gLBji4dvOXjKe9KNfeNwmWs5aj8.mft (raw, json)
Hash identifier:          Gi1UThy36yIL1cvquBZgMu5dZJMSompBHGrlOKTJ9gI=
Subject key identifier:   27:94:B1:D5:3E:49:F6:34:C0:20:BA:61:00:EB:81:F3:AA:09:FD:CA
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Certificate issuer:       /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial:       01A0D15C2F774F496793028E356531EDF9B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
Manifest number:          0B93
Signing time:             Thu 24 Sep 2026 03:01:14 +0000
Manifest this update:     Thu 24 Sep 2026 03:01:14 +0000
Manifest next update:     Fri 25 Sep 2026 03:01:14 +0000
Files and hashes:         1: JtRvpoQ6v5bFd3bqNHp70RkQlEw.roa (hash: /oF7VKyAqIh3Dj5gAD5HaY2Wmq8Ex+sQiaIQTG8GOuw=)
                          2: VBmr-5LpIjSQ6myjINReT6R1vMo.roa (hash: qg+Z2r3TWn/McCuaCe1xwiAMWjaHkNEjXrq2W1LrDUU=)
                          3: Y61lvfTY0IfOHOaNCazwXGsL2N8.roa (hash: 52xFh0jAqOfccjKrhy8KiqEx7vruviP8tzZ1IxwQ/As=)
                          4: gLBji4dvOXjKe9KNfeNwmWs5aj8.crl (hash: 4HCTC1KpZNnVk9Zfmx80qbDldbrapSIjovvtUy9/MRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 03:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5c:2f:77:4f:49:67:93:02:8e:35:65:31:ed:f9:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
        Validity
            Not Before: Sep 24 03:01:14 2026 GMT
            Not After : Sep 25 03:01:14 2026 GMT
        Subject: CN=2794b1d53e49f634c020ba6100eb81f3aa09fdca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:03:b3:27:88:4d:03:46:60:9f:2b:fb:0a:b4:
                    f0:be:ae:52:bf:94:ce:86:68:2a:c5:d1:1d:df:aa:
                    17:f3:d9:c7:dd:b4:4f:75:69:9b:3e:33:9c:bd:70:
                    85:d4:1a:37:63:42:7d:69:ef:18:ae:f9:10:c7:23:
                    bb:f1:1d:d0:a2:ee:b1:db:c5:84:96:56:da:e3:d4:
                    55:3c:84:48:e2:c7:ad:1d:f4:c3:07:7b:d0:3a:53:
                    9b:28:cf:d8:13:cf:c9:ca:56:18:c2:d6:84:9c:d3:
                    5e:ed:5a:83:84:35:20:35:12:c5:b2:55:08:b1:48:
                    73:e8:1c:d0:54:a1:d9:58:36:cc:bc:19:eb:c7:a4:
                    c3:fb:1d:9f:7e:78:0a:3f:66:72:ea:fd:c2:3a:4c:
                    12:25:3e:d3:a7:01:56:3f:a3:78:ef:2c:13:9b:a8:
                    79:18:75:7a:35:7a:22:0a:47:f8:ff:a3:a3:90:85:
                    54:b0:4f:62:80:97:c1:66:45:7f:85:83:50:ea:3c:
                    37:ac:c0:5e:16:c5:8a:a3:8b:57:72:d2:6a:ac:5f:
                    89:b1:49:d1:72:33:9e:66:50:7b:91:ac:68:45:2b:
                    97:c0:1e:dd:3a:6a:a3:11:82:75:63:1c:9e:b5:25:
                    c7:8d:94:1c:c1:1c:7b:91:da:fb:e7:94:e1:1a:7c:
                    52:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:94:B1:D5:3E:49:F6:34:C0:20:BA:61:00:EB:81:F3:AA:09:FD:CA
            X509v3 Authority Key Identifier:
                keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:39:c3:ef:8e:f8:51:8d:56:44:0c:61:07:0d:92:bd:41:12:
         87:be:d3:4b:1a:0e:29:34:e0:52:ba:50:e1:f8:7c:28:57:f5:
         19:a6:33:c2:d1:13:e5:8d:2e:c0:aa:13:65:24:63:b0:fa:9a:
         5c:07:dd:6a:9d:9c:a0:51:44:16:e9:b4:ca:96:27:e9:12:8a:
         fc:db:23:0e:b8:9c:a0:bf:55:48:85:12:07:5a:40:aa:0d:6d:
         35:fc:c9:0d:55:dc:15:36:33:c2:e1:cd:42:38:25:e1:bb:5e:
         54:d2:35:85:ec:78:be:78:39:3b:9c:36:3c:30:5c:43:e2:6e:
         44:3d:10:92:f5:f4:5d:7d:1b:01:2f:ad:08:c7:04:33:fc:95:
         98:75:83:2e:6c:7a:12:22:b6:24:c9:b7:21:b2:78:ce:8d:7d:
         92:b2:08:7c:41:2b:7a:f3:2a:25:6c:a4:19:a3:b4:80:88:e1:
         d9:0e:b2:f3:97:bf:bb:a8:0e:51:dc:6c:0f:51:8a:15:4f:c2:
         61:69:b8:37:6b:4b:80:fa:72:79:8f:17:20:7b:f1:75:a3:71:
         23:dc:16:36:3c:54:6e:4f:78:a3:40:33:4c:c8:85:a5:06:64:
         28:2b:0f:6c:77:85:6a:20:9c:9a:c0:e4:6f:0a:5d:ca:d3:00:
         45:5d:82:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRXC93T0lnkwKONWUx7fm2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYjA2MzhiODc2ZjM5NzhjYTdiZDI4ZDdkZTM3MDk5NmIz
OTZhM2YwHhcNMjYwOTI0MDMwMTE0WhcNMjYwOTI1MDMwMTE0WjAzMTEwLwYDVQQD
EygyNzk0YjFkNTNlNDlmNjM0YzAyMGJhNjEwMGViODFmM2FhMDlmZGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAOzJ4hNA0Zgnyv7CrTwvq5Sv5TO
hmgqxdEd36oX89nH3bRPdWmbPjOcvXCF1Bo3Y0J9ae8YrvkQxyO78R3Qou6x28WE
llba49RVPIRI4setHfTDB3vQOlObKM/YE8/JylYYwtaEnNNe7VqDhDUgNRLFslUI
sUhz6BzQVKHZWDbMvBnrx6TD+x2ffngKP2Zy6v3COkwSJT7TpwFWP6N47ywTm6h5
GHV6NXoiCkf4/6OjkIVUsE9igJfBZkV/hYNQ6jw3rMBeFsWKo4tXctJqrF+JsUnR
cjOeZlB7kaxoRSuXwB7dOmqjEYJ1YxyetSXHjZQcwRx7kdr755ThGnxSGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeUsdU+SfY0wCC6YQDrgfOqCf3KMB8GA1UdIwQY
MBaAFICwY4uHbzl4ynvSjX3jcJlrOWo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mNDY2M2YtNDg0ZS00MmRiLTg5YTAt
MTViMDlmNWY2ZWQ3LzEvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9mNDY2M2YtNDg0ZS00MmRiLTg5YTAtMTViMDlmNWY2ZWQ3
LzEvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijnD7474
UY1WRAxhBw2SvUESh77TSxoOKTTgUrpQ4fh8KFf1GaYzwtET5Y0uwKoTZSRjsPqa
XAfdap2coFFEFum0ypYn6RKK/NsjDricoL9VSIUSB1pAqg1tNfzJDVXcFTYzwuHN
Qjgl4bteVNI1hex4vng5O5w2PDBcQ+JuRD0QkvX0XX0bAS+tCMcEM/yVmHWDLmx6
EiK2JMm3IbJ4zo19krIIfEErevMqJWykGaO0gIjh2Q6y85e/u6gOUdxsD1GKFU/C
YWm4N2tLgPpyeY8XIHvxdaNxI9wWNjxUbk94o0AzTMiFpQZkKCsPbHeFaiCcmsDk
bwpdytMARV2CgQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:26:34 2026 by rpki-client