Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
File:                     gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft (raw, json)
Hash identifier:          Zt7WVYDl0V6IRyWhY8TYhp0Yvz7Myka0OX8olU0wO90=
Subject key identifier:   D7:7B:CD:1A:B6:AB:5D:E2:FE:21:01:1C:41:64:6A:17:4B:58:4F:0F
Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
Certificate issuer:       /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Certificate serial:       01A0C5FBDF2C9F0DB3CC2C1BBB143B91E229
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
Manifest number:          0BC7
Signing time:             Mon 21 Sep 2026 22:00:13 +0000
Manifest this update:     Mon 21 Sep 2026 22:00:13 +0000
Manifest next update:     Tue 22 Sep 2026 22:00:13 +0000
Files and hashes:         1: HGlsVrHEnVUZTxnltUDYgtbddII.roa (hash: PRTqegkFaXBSmjlIahMPcYyZ0ftS890tO/2pjXR1d6s=)
                          2: W0JnqG_1catAnHEXGycEO8oq48k.roa (hash: A6AJQgQl743BUazqkp43vOKzFjK/bipy9CgPiB+KG6U=)
                          3: gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl (hash: M+xfXuSN/TSQa2OOo976xUlyxeW7FZy0ga4HkVyi508=)
                          4: jcRnGzty5tFJLCYMbqQ9KAoJt0M.roa (hash: a1X93SlCywmHujOimn+Po6M7RMMfbT2R8166ZJ7vS9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:fb:df:2c:9f:0d:b3:cc:2c:1b:bb:14:3b:91:e2:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
        Validity
            Not Before: Sep 21 22:00:13 2026 GMT
            Not After : Sep 22 22:00:13 2026 GMT
        Subject: CN=d77bcd1ab6ab5de2fe21011c41646a174b584f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9b:0c:f1:8b:65:ca:d9:5d:dc:07:ba:17:3f:
                    45:c8:a2:a6:d9:f0:1c:41:90:34:40:68:df:55:cc:
                    59:88:57:71:66:4d:a9:03:cd:fb:e8:41:55:3f:80:
                    2c:07:fd:c1:81:f4:58:40:58:33:64:a9:94:67:7a:
                    14:b9:45:9b:5c:df:2e:d8:70:38:0b:55:b0:af:0e:
                    c3:22:79:14:35:18:88:d5:5f:f4:36:8f:d8:ce:61:
                    00:61:eb:1f:b9:bd:44:f3:cb:47:86:e1:cb:dd:45:
                    8f:95:89:87:45:72:61:0c:09:54:10:d6:6a:9c:fc:
                    b1:37:4e:69:e9:e6:cd:06:01:17:37:d9:10:57:d5:
                    59:b7:31:27:f3:0d:f6:62:8e:80:9e:cc:36:e5:df:
                    36:fe:7c:12:3e:55:c9:0d:59:66:73:c8:4d:96:4d:
                    b5:1b:ce:d6:11:10:d3:b2:89:51:3d:ff:f7:d1:48:
                    f4:03:c9:d0:b3:c2:aa:4f:29:de:7f:a1:65:dc:16:
                    3b:4c:74:5e:f8:08:d0:47:b1:55:5e:8c:52:b6:ec:
                    d6:61:fe:1f:90:4b:e1:0e:e2:0a:82:85:3e:ec:1c:
                    1b:26:d3:54:72:62:e1:b9:95:00:44:f1:91:d9:82:
                    2b:7e:f4:75:ae:61:24:1b:9c:40:63:63:ac:b4:a1:
                    9c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7B:CD:1A:B6:AB:5D:E2:FE:21:01:1C:41:64:6A:17:4B:58:4F:0F
            X509v3 Authority Key Identifier:
                keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b9:22:e9:eb:36:ad:37:0e:c6:96:48:6a:fc:b3:ea:bc:e9:
         7f:46:d6:a7:ef:26:9e:ee:36:fa:ad:2a:2f:36:4f:9f:70:16:
         47:db:97:3a:1d:33:80:28:65:12:8a:cf:b4:12:49:19:5d:64:
         b5:fe:4b:e9:3d:bc:de:f7:47:9d:49:4d:c4:4d:12:69:ff:da:
         80:d5:b0:03:48:7b:02:be:2f:82:b5:99:21:c7:14:e1:b1:e6:
         22:a4:29:c2:ef:82:5e:51:88:9a:44:47:ec:96:64:1f:8b:6f:
         1b:89:81:77:a2:36:cd:3c:81:23:5c:c0:fd:cd:e5:f4:ff:8f:
         03:1c:67:74:64:c5:77:c2:f9:b3:34:75:1d:d4:3c:14:82:c5:
         c0:d8:41:36:14:10:c9:ba:4e:49:10:f7:31:03:c4:f6:fd:cd:
         5b:96:e2:31:e3:cb:ac:c6:59:ef:e9:90:02:b6:1d:f6:82:9e:
         14:6a:25:bb:2b:91:93:86:6a:ad:59:05:49:53:ae:04:dd:88:
         bd:19:8e:0b:3e:93:05:82:4b:eb:5a:0d:d5:5d:65:e6:0c:2a:
         b2:76:e9:23:55:63:18:78:80:0a:c3:20:de:c2:0e:c4:b1:a2:
         87:fd:58:55:2b:3b:7d:87:86:08:1b:54:78:c8:81:a9:27:53:
         ac:f5:9d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:52:48 2026 by rpki-client