Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
File:                     gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft (raw, json)
Hash identifier:          iV5pmzCkcRIyP1objQIq5sywtBjlhzQKjXi82BooKXQ=
Subject key identifier:   33:D4:05:71:01:65:0D:A3:29:E8:45:7D:86:1F:6A:18:07:83:CD:64
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       01A1DEDE42815F0A53436B8962087992A789
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
Manifest number:          177A
Signing time:             Sun 15 Nov 2026 11:01:10 +0000
Manifest this update:     Sun 15 Nov 2026 11:01:10 +0000
Manifest next update:     Mon 16 Nov 2026 11:01:10 +0000
Files and hashes:         1: 1LvDD_BZRnvvGf1sfqTO_100fVU.roa (hash: 2Miol9a7wXh/xaI1zT3x2+RH8dQMQn9cHhv3Yai3Ws4=)
                          2: 2Rmmekua5E3Q0QLzEFm3-uCxHB8.roa (hash: 2DEDWpJ7SE3vVfpuMvn1i8m6ipkkzB3x7E0ogUZSs8I=)
                          3: 3Bs1QDSGS0kjvq4EHxwWPsOvI7A.roa (hash: Y3wrll2e7N7tLunXy2NfFMm5qgwbNJl4KYqkdR3RdTI=)
                          4: 4oO8dQc9HzUYkUkCS5kPIxq_uyg.roa (hash: 7/k7czuJyIUcq3eRgbpL5PQg2plfXpEYlmEY7AiM4Zo=)
                          5: Bu9SUwOcVJgpBxmQBF-F7epWWtg.roa (hash: FrTMQ7KbXoviPjsdmZdAMqS74Hi4YJDUcARzZd9rKkk=)
                          6: G2xdfzs3wQJv9zZFB0dIYE1wP40.roa (hash: Kb0gJzw5SmbhJGivaLvicWRV0EdJSpkk1X0zcVEuKm8=)
                          7: GL-PczqlSs0W4jCvnEa0sNIucqw.roa (hash: veNNxyMjY/UMYxVIXlw5c0Y0r5OhtpqMPHzE2TAEVYw=)
                          8: Hp-l-QCypDPxGAlYXKDCKIDV8b0.roa (hash: 5BTj8NBQJZuTgfnofdntPmd8NUBWuOYk2ttRiYNiVbM=)
                          9: UYPgBeYg6KhxqN8KMiScXb9d3iY.roa (hash: NoAcSFwn2ZQxxJmCsTTvbGy+E2ymy9JzakwnDRYWs04=)
                          10: UpjGE674s_k9Iv1gBCVazhi7CUc.roa (hash: 87ue4C4cllbiUGBoWnQPxG8trSEi9IkhaFFPVs+XbBs=)
                          11: X1aZ2xaC6FGv74kOCQwL0xxoOZA.roa (hash: 6AsU1KzAtb8yktF/NBT5ZyVg0dsVVnFJnmDhHSx+xJw=)
                          12: Yq8C175qyfOagaIkPHI-RN5Ecxg.roa (hash: nopeu03tl6djr5IRMUx9oy69DCxGlQZWpLg5XrpfQmg=)
                          13: eWXuhLZOzQSkVnakv6XDZbQm47k.roa (hash: 7jNn7zEJAzsZccVFp+ntzTl1B+U5CsfTk+0fguXEWaY=)
                          14: f1XxKSOwgfOmC8P37MUBgW8zIF0.roa (hash: 1s4OkHRdEaBC8RyIRnYuhJ9aFTUMNBJFdizTtu2a1lg=)
                          15: gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl (hash: VhHVV6cEct+LTP8MVibvd3JIQJ6zvk4jsKJ0YcWLW6Y=)
                          16: m6rJiLleGqSjvebHYwPobhqpRnI.roa (hash: ShgXTWxethW6+KMOzI+kaz0tURD514B5b269VfuNT/4=)
                          17: m9BYl4Aw2fbYyqmFkKXBhcADqBg.roa (hash: raOzCXfv2gIYL0xQb0f/9ZqowcC2F2r8bzgcoks8gKQ=)
                          18: osv7rAYIOhaj9-sIDC6cHNqDKfw.roa (hash: GqJZAyRotD8USHo+AYiS2/NF1zO6vL06s6UQimfs+tk=)
                          19: pSI-y0SCqYBWVInc8M0yLN7ZnhM.roa (hash: 3074qQKnytP+H130uNFdcnZrdHZY2zcxKO2AmdzYhJM=)
                          20: qNocEVwfrb6sWWurB6a4f5Aey94.roa (hash: /vCmDzGz3moyEt149Tj7g3vACFmdqTMAMryoRz7OzQc=)
                          21: rCHZqnKTLnkV-IRvPVyjvCMImcc.roa (hash: SGcPhuVDulI6n4Hi271QHa+uDx+5hY6mc1NVrLuOhF4=)
                          22: sQvPybtma9tvSwqB-AosSvIjwzY.roa (hash: tGlmhMYvSMpHbovXQ1w4dxEff+1tXSKUNI8zYaqHCcI=)
                          23: tnOvqbiqo6KcISm2Z92wnQLo7AA.roa (hash: xwsx+sSVYc3HTkslJcSA74X9wr4O1+vTlAG6cVjM+So=)
                          24: w07IS6VwbFT7C45jHwNSzVbwcR8.roa (hash: lDpW+bIbUHoYEkbMa43ojnpgVM2clYFDS8nSWRgzTl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 11:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:de:42:81:5f:0a:53:43:6b:89:62:08:79:92:a7:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Nov 15 11:01:10 2026 GMT
            Not After : Nov 16 11:01:10 2026 GMT
        Subject: CN=33d4057101650da329e8457d861f6a180783cd64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d3:36:b5:42:3a:cb:85:1a:42:08:ae:17:d3:
                    cb:cd:ab:c3:12:b9:f1:28:fd:55:c1:5e:df:b7:75:
                    f4:53:fd:97:9b:b8:fc:07:c1:a3:eb:7b:ea:54:51:
                    21:d2:91:7e:b2:a7:91:cb:8b:6a:8c:fd:4e:cf:f0:
                    29:5c:4c:71:88:87:86:24:44:b0:d1:05:a2:24:f2:
                    80:d4:47:db:2a:82:f4:4a:3a:d0:e3:3c:53:1b:7b:
                    47:0a:8f:c3:1b:f3:93:67:fb:a5:2b:89:9f:5b:33:
                    ba:db:18:de:04:0a:fc:55:49:d8:e0:d1:1f:77:d0:
                    8f:09:df:62:c1:92:45:9c:54:f4:68:fd:b2:ac:83:
                    02:56:45:83:6f:bd:6e:d9:70:cc:3d:82:78:27:6e:
                    43:a1:9e:69:74:63:6e:74:fd:17:d6:d5:35:a7:46:
                    0e:87:f8:0d:61:a3:6b:8f:fd:b1:96:12:b5:a2:86:
                    7d:5e:9b:da:55:22:16:6c:9c:14:f5:ab:8b:f9:3f:
                    ff:50:1e:7d:f5:58:f6:2d:02:23:fb:06:6d:c4:f0:
                    ab:2a:b3:10:3d:3e:c0:19:27:68:83:f7:3e:14:ab:
                    39:ef:d8:02:48:37:97:d4:a0:6f:35:ba:e0:fb:64:
                    67:1e:ad:6b:e3:00:00:c9:6a:da:e1:17:c6:4b:5e:
                    f1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D4:05:71:01:65:0D:A3:29:E8:45:7D:86:1F:6A:18:07:83:CD:64
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:b0:ba:0d:e1:45:1b:ee:8b:b9:8b:43:82:76:c4:e5:5d:9b:
         13:37:db:93:f1:6c:1c:1a:7b:c5:7e:f4:bc:da:c1:d8:22:e9:
         a1:f7:03:67:92:c3:0b:cd:fc:88:e1:d7:36:60:e1:46:1a:a1:
         cb:c1:50:c1:69:12:4d:79:93:85:41:8d:d8:a4:13:86:c3:8b:
         ca:6a:6d:f3:d1:d8:79:f9:01:5a:40:50:aa:b5:1a:1d:13:39:
         0a:ae:d7:c9:14:20:ac:06:71:cf:a5:c7:bd:c8:a1:95:59:5c:
         0f:ce:f5:24:4e:36:70:2b:aa:d2:1f:d3:a9:89:f7:b8:b7:4f:
         9e:ef:d2:c6:36:6f:03:49:38:2d:ca:5c:38:64:f1:b9:d0:52:
         b0:94:87:37:98:9a:45:9c:02:8a:6a:15:d3:4e:49:b9:df:4d:
         b9:77:73:8e:47:39:a8:4e:65:4f:6f:00:b7:ee:50:05:1c:a1:
         35:ef:22:45:1e:75:36:49:23:f3:cb:6d:3d:62:7d:72:e4:db:
         04:38:c0:28:42:2f:2b:07:c3:c0:8e:e1:ad:47:c9:27:0f:11:
         1d:2d:26:3d:ee:01:c4:18:72:8a:c1:37:5b:7a:0f:9c:39:e0:
         14:45:e3:05:e9:4f:df:eb:84:62:f9:6e:a1:87:b7:33:a7:d9:
         ed:ec:0a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:03:22 2026 by rpki-client