Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
File:                     gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft (raw, json)
Hash identifier:          QqRF/hxB/88SOPtR5SjE0/X+coHcFml7fSqi7S2YwUc=
Subject key identifier:   5A:04:A8:60:E5:EC:14:FD:C8:D9:D7:2A:96:B1:02:E0:DD:A1:E4:A2
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Certificate issuer:       /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial:       01A0CD7EE430042932AF9DF2CC8C8DFA1774
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
Manifest number:          1A73
Signing time:             Wed 23 Sep 2026 09:00:40 +0000
Manifest this update:     Wed 23 Sep 2026 09:00:40 +0000
Manifest next update:     Thu 24 Sep 2026 09:00:40 +0000
Files and hashes:         1: 0xjlkzMLHzYUOQzM0T_hixdH3Vc.roa (hash: w3LcFmfi5o+ZqCPWaVzw9mcyP3jYqj4m9ROiWLMpgAY=)
                          2: 5t0r8fJd2nhioYpGfkI7Yf9otXA.roa (hash: k52ZXWE/9hDIrYh0zpZm2nywZwLzZgmA6wQ6L4w58mM=)
                          3: 6K4jtyB3n1dTIno4GBJ6uOlA2H4.roa (hash: s//DyxiKkxSxvwwq0U0tirxt/hDGoM9Ut2Dc50YCwqM=)
                          4: Cryli7tFA3xQzdS5-qcU49qg2iM.roa (hash: ZS2Te+uiOMALn+TaiqIM3OKXyBaszdLcDeqRDP7qYwo=)
                          5: gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl (hash: VYWvpohNO/bNoPsrweRHrPOmklBW0wTfifwf1d7kpn0=)
                          6: jsVSRtJd2CDXuEExXGRqUMz5PZw.roa (hash: 3KBrD6dE8HRG9EKrovP9Lr4d9GeL2O9jLSsM034LhGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 09:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:7e:e4:30:04:29:32:af:9d:f2:cc:8c:8d:fa:17:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
        Validity
            Not Before: Sep 23 09:00:40 2026 GMT
            Not After : Sep 24 09:00:40 2026 GMT
        Subject: CN=5a04a860e5ec14fdc8d9d72a96b102e0dda1e4a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d0:da:6a:ea:45:31:8a:7f:9b:a1:87:dc:46:
                    00:3f:0b:73:13:a9:f5:d3:4b:e6:94:ad:49:0b:da:
                    ad:cc:63:81:bf:48:08:0a:21:d5:50:35:ea:75:ef:
                    77:f1:47:fe:92:29:37:0f:ba:f3:bf:4d:2e:77:dc:
                    91:d0:c6:15:a7:72:54:49:b6:b6:90:51:a1:51:30:
                    dc:c9:f5:c9:4e:d2:b5:85:39:cd:3d:61:d8:32:6f:
                    03:e5:5d:9b:a2:af:c6:51:a8:99:c9:64:e4:b0:9e:
                    a7:e8:cc:8a:ea:50:d9:d8:c6:a6:8c:42:65:f8:56:
                    ff:a6:37:80:ef:d3:84:05:85:60:02:19:5f:9f:a0:
                    29:69:08:86:99:0a:0b:bb:48:1e:c5:79:5f:55:9b:
                    16:54:9e:0a:f8:d6:03:c0:70:fe:f0:f0:5b:80:5d:
                    d9:02:7e:3c:34:80:73:ca:8e:8c:84:0f:f5:cc:7d:
                    da:7d:ea:23:06:33:a6:45:6d:ee:f8:ff:62:91:71:
                    c4:04:6e:c2:93:81:bb:54:d2:30:ae:c0:81:8e:a9:
                    fa:e8:a0:0a:e8:c7:d4:9d:95:2f:a7:a9:5e:72:bc:
                    12:95:3d:86:f1:ec:5d:2f:4b:70:d1:77:81:6e:33:
                    3e:78:3f:47:21:f4:5c:62:c4:72:90:47:86:0d:e1:
                    07:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:04:A8:60:E5:EC:14:FD:C8:D9:D7:2A:96:B1:02:E0:DD:A1:E4:A2
            X509v3 Authority Key Identifier:
                keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:c7:47:bb:e4:32:c6:4f:7e:66:32:3d:0a:8f:ca:f8:59:cd:
         a2:5f:81:b0:cf:d4:db:5e:b9:5f:4e:47:3c:7c:f1:26:fc:91:
         08:7f:f0:d5:0b:c5:44:7e:17:8c:1c:5b:c0:7d:7a:47:ec:3a:
         ed:23:0b:7d:a4:75:a6:ac:72:bd:32:8e:e4:83:a7:5c:4d:e8:
         6b:c0:8c:40:bf:b6:60:ad:32:7b:73:40:f4:12:ac:8c:c9:ad:
         73:f0:f6:36:d5:36:23:29:a4:b0:28:b8:5c:d6:79:cd:f1:02:
         fd:47:dd:0b:c4:36:19:c4:89:a6:e8:d8:9c:e9:c0:2a:d2:af:
         3e:43:4f:dd:af:de:4f:c0:24:0a:15:97:74:bc:86:70:ed:41:
         41:bc:a0:4b:f9:b2:4a:aa:b4:38:d3:b2:f3:f0:d4:7b:a1:ac:
         b9:98:cc:fa:70:9f:a7:0b:42:a8:e9:06:e0:f3:09:dc:8c:56:
         e2:81:3c:b2:30:50:f9:15:90:a7:02:de:bc:8b:32:bd:5e:f3:
         21:b2:75:0f:b2:4c:7d:76:15:12:b3:04:12:87:80:7e:f4:33:
         ba:84:1a:6e:4e:22:d8:46:cb:67:79:bd:58:eb:73:d9:1b:5f:
         ed:63:da:95:b4:bd:6e:f2:24:f8:af:42:9f:1b:39:db:31:26:
         de:ed:eb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:49:25 2026 by rpki-client