Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
File:                     GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft (raw, json)
Hash identifier:          OUsq6JWjH2dPXgqic/ZjDR+YfD3EU/CFSc7yjIkthM8=
Subject key identifier:   3C:E1:FC:16:33:ED:18:FB:C2:F2:9F:2A:ED:1A:E0:12:5C:1B:2A:C1
Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
Certificate issuer:       /CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Certificate serial:       01A13AEE20EC5D0020338A3FE1D1F1690478
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
Manifest number:          1A35
Signing time:             Wed 14 Oct 2026 15:00:46 +0000
Manifest this update:     Wed 14 Oct 2026 15:00:46 +0000
Manifest next update:     Thu 15 Oct 2026 15:00:46 +0000
Files and hashes:         1: 6LC4FnmLLsng6HVU2xR3jbERaDc.roa (hash: LpXh0JZ4HonUdcN7azN27CT2g+jjECs6HIXpWyOrLLQ=)
                          2: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl (hash: YfJpBnY5fWAjwOx6LJGkmR+u9lJA2K+WBF9NAM9FBQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 14:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3a:ee:20:ec:5d:00:20:33:8a:3f:e1:d1:f1:69:04:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423
        Validity
            Not Before: Oct 14 15:00:46 2026 GMT
            Not After : Oct 15 15:00:46 2026 GMT
        Subject: CN=3ce1fc1633ed18fbc2f29f2aed1ae0125c1b2ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2b:34:66:c0:b9:b4:f2:56:23:fa:5f:fa:3b:
                    3e:a9:97:45:33:0f:2b:72:93:6f:55:42:a9:5f:dc:
                    0f:14:99:0f:c0:65:75:3e:0d:5c:38:40:3b:ed:e8:
                    de:b2:ce:54:f3:52:0b:20:31:cd:f6:b3:f4:1d:72:
                    73:8f:04:e5:69:d6:5a:99:fe:f6:de:3d:6e:e0:90:
                    92:d0:ca:65:e7:eb:f9:67:32:5f:f1:5c:1a:ca:ec:
                    9f:15:29:94:6a:4e:5f:1f:e9:5e:87:b4:15:1d:21:
                    cc:3f:32:5c:b8:4d:e7:10:30:90:20:d3:db:26:b0:
                    7d:8a:22:ac:62:a2:64:36:8a:ee:97:ea:3a:81:6a:
                    5f:62:b2:37:ad:82:eb:08:42:61:8c:87:81:fa:5b:
                    f5:bd:05:dc:4b:92:85:9c:65:04:3e:6e:0d:d4:f9:
                    d1:7c:cd:39:16:ab:22:0f:6e:86:e3:ee:1f:d5:84:
                    04:95:25:2a:50:13:96:a5:33:0f:b6:35:b4:69:aa:
                    23:4c:41:82:da:88:b9:09:2f:5a:12:dc:73:9d:43:
                    65:0c:7d:22:0b:68:7f:0a:34:ab:a9:4f:4b:ed:be:
                    50:cd:88:eb:f8:d2:98:11:e2:d6:d8:f3:73:76:1c:
                    99:26:c2:74:84:11:d3:8c:ba:d7:fb:c4:50:80:bd:
                    20:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E1:FC:16:33:ED:18:FB:C2:F2:9F:2A:ED:1A:E0:12:5C:1B:2A:C1
            X509v3 Authority Key Identifier:
                keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:e9:1d:7d:da:96:24:9d:a3:7f:20:80:b4:ad:d8:cc:43:86:
         95:44:c9:ab:31:72:40:6d:f8:58:2c:b9:af:d8:20:f3:ed:23:
         04:a1:6f:4f:3e:a0:df:fa:0f:e3:bb:49:54:4f:25:18:9f:ba:
         c0:ad:f1:d7:a8:65:67:45:f0:a9:75:3a:fb:10:64:96:ff:72:
         45:d5:3f:73:26:d9:6e:1c:b9:19:b5:c8:11:da:2c:ee:89:43:
         06:46:7f:2d:c1:f1:22:c8:6e:5d:c2:4b:f3:6b:a5:b2:c2:33:
         81:ad:99:1a:5c:99:42:b0:cd:86:37:96:e9:9f:9b:20:dc:28:
         c4:48:f9:b6:ea:4f:ad:ec:30:8c:33:d1:6f:43:b9:30:97:79:
         11:25:a6:a6:be:92:1e:8e:ef:bd:6d:9e:a5:3b:da:e3:da:96:
         a5:81:52:ad:ed:14:f9:61:34:8d:cd:58:55:00:a6:93:5e:ff:
         65:c0:d8:c3:b5:84:2c:9b:c9:42:6e:03:12:e2:bd:23:62:4d:
         10:a1:d3:14:4c:b7:2b:cb:7f:4e:81:b7:28:1c:15:7f:ca:ce:
         0c:a3:a4:11:ee:61:fe:0f:ee:ab:57:6f:03:43:03:b5:04:95:
         33:b2:09:4d:04:ca:5a:d4:fa:c1:91:99:c0:53:b0:29:74:4c:
         72:9f:51:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:24:46 2026 by rpki-client