Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
File:                     Goed4cdfu9LDHR2QgUBW8n1X13Y.mft (raw, json)
Hash identifier:          hMvr6aTS7re3Klc+S2vF5AU/kEEPCRZE9Rmai7T4AC4=
Subject key identifier:   3C:D2:D8:54:30:F9:38:74:47:EC:9D:A4:70:D0:C6:DB:EC:91:11:DC
Authority key identifier: 1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
Certificate issuer:       /CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Certificate serial:       01A0C5C57FE5FAEEB3CDB644F5207876C59C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
Manifest number:          1A67
Signing time:             Mon 21 Sep 2026 21:00:49 +0000
Manifest this update:     Mon 21 Sep 2026 21:00:49 +0000
Manifest next update:     Tue 22 Sep 2026 21:00:49 +0000
Files and hashes:         1: 1-CiDrqbmERXOpG9SMHicw3qasuw.roa (hash: iSRU/0wozf9Okdu3tMaJ6tDL4SNkPY2zcM5n9DF7Eqk=)
                          2: Goed4cdfu9LDHR2QgUBW8n1X13Y.crl (hash: 53CKGcHdDFu00q/C3hFGf+0KXXYA0nqF4JKX0pecvfA=)
                          3: OYrxag2gdKVWmcS_MSjERgU_Ji0.roa (hash: Up6LnAiF7e1D845y6IhDGcXjWiOaIs0vsPTFZeoDQ24=)
                          4: p5utnLd33eKKva_RAEO_Xi-exGo.roa (hash: o9yl5ENus82WxKAzd4PkSoVYVHhX9LlBVWPF96ouh8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:c5:7f:e5:fa:ee:b3:cd:b6:44:f5:20:78:76:c5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
        Validity
            Not Before: Sep 21 21:00:49 2026 GMT
            Not After : Sep 22 21:00:49 2026 GMT
        Subject: CN=3cd2d85430f9387447ec9da470d0c6dbec9111dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a3:2d:2e:6e:14:26:0f:ed:b1:10:ab:92:74:
                    3a:21:87:2f:a6:12:89:0c:10:62:94:6e:12:0a:a5:
                    cd:9b:cd:32:83:11:02:a7:3f:4b:55:34:66:ee:48:
                    c1:c2:dc:f8:c2:0a:6e:83:5d:be:b5:5f:86:be:e2:
                    0f:ca:7a:75:4c:a8:e3:31:67:64:e9:6b:28:c4:d4:
                    ad:fc:4d:ae:ae:74:f2:79:b7:9e:86:6b:b2:d8:f3:
                    5e:52:3e:66:0d:dd:64:75:16:9e:b1:ce:5c:79:ab:
                    e2:16:5d:a9:00:88:d5:62:2f:68:db:b3:f0:87:9f:
                    7f:34:bc:de:c6:12:ac:26:ae:9a:2e:d4:d7:c5:0f:
                    e6:df:b2:a6:30:df:a3:e4:ac:35:fa:23:85:68:27:
                    58:c9:4c:b4:44:47:d7:a0:f1:c6:5a:de:e2:84:19:
                    fd:58:26:f8:ef:a4:2d:f5:2a:4a:b9:9e:b4:76:eb:
                    a7:1f:e5:48:86:49:30:d8:67:b6:05:71:55:ea:a3:
                    59:15:54:d9:c5:c8:c8:45:d7:80:ec:9c:26:ec:5d:
                    76:a8:6f:c4:48:ae:05:c9:5d:2a:65:e0:c6:f4:62:
                    85:3f:50:8f:57:4d:f7:f8:18:db:69:b5:97:05:65:
                    8f:e5:71:7a:51:26:51:3d:52:cd:30:fa:1b:81:25:
                    d6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D2:D8:54:30:F9:38:74:47:EC:9D:A4:70:D0:C6:DB:EC:91:11:DC
            X509v3 Authority Key Identifier:
                keyid:1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:13:5c:f4:38:fd:f8:6a:99:a0:be:a7:de:a1:d3:ae:8a:60:
         b3:a0:74:71:c4:95:e6:1d:79:38:ce:e5:7b:71:17:4d:ec:48:
         de:f3:26:d1:53:b4:15:c9:7f:b0:91:e0:9e:56:e8:d1:19:37:
         6c:83:00:73:6c:66:98:0f:b8:ca:ca:26:67:0b:d0:f6:71:b6:
         a9:27:58:75:18:bb:7a:be:d4:c3:42:4c:a1:7e:28:0a:d5:92:
         89:29:a0:80:fb:fd:45:f7:e1:54:be:85:d2:0f:ee:b8:80:eb:
         2c:87:7c:f4:a7:94:5a:7d:ce:79:4c:0b:b7:34:0b:3b:68:46:
         3b:5d:21:2d:73:61:58:60:fb:42:4d:99:fe:fd:ad:94:ff:1d:
         6e:6b:55:e8:1b:71:90:9d:a8:b0:0d:3d:44:09:f8:a2:29:eb:
         c0:e9:b1:c9:8e:dc:79:5c:1f:8f:37:ce:e6:19:05:79:55:de:
         a5:94:35:f4:9a:92:f0:e9:eb:7f:80:10:da:31:e7:a5:f3:eb:
         df:d2:4e:0b:ca:00:ec:e5:c6:40:dd:03:5a:09:0a:ef:4b:22:
         02:2d:d4:f9:67:1c:50:04:68:fc:a1:c9:e4:63:41:65:4e:14:
         65:52:45:49:b4:0b:87:9e:3b:21:21:3e:7a:4d:4a:88:fe:46:
         78:63:97:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:49:09 2026 by rpki-client