Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
File:                     G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft (raw, json)
Hash identifier:          PMFIZ8H2hQ/ejx3m/A83q1tH7eSqepNwIoa9prgWnxM=
Subject key identifier:   03:1B:64:35:90:C6:E3:CD:60:52:5A:7D:BD:D8:CF:E5:89:86:79:BE
Authority key identifier: 1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4
Certificate issuer:       /CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
Certificate serial:       01A0E2F4C2E14885EF60414DCF10F1AB7A8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
Manifest number:          0EF4
Signing time:             Sun 27 Sep 2026 13:01:26 +0000
Manifest this update:     Sun 27 Sep 2026 13:01:26 +0000
Manifest next update:     Mon 28 Sep 2026 13:01:26 +0000
Files and hashes:         1: A9Wb5TUgy6_nes46nQIzu3J2gJ0.roa (hash: HBds/dPFgakP+7Jk7BYLI0SRbVkbpB9JVxok50Ozwgs=)
                          2: G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl (hash: GJplEDcyI+b74U89Kyv8EAJovNml2tQibt84jXfmuxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e2:f4:c2:e1:48:85:ef:60:41:4d:cf:10:f1:ab:7a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
        Validity
            Not Before: Sep 27 13:01:26 2026 GMT
            Not After : Sep 28 13:01:26 2026 GMT
        Subject: CN=031b643590c6e3cd60525a7dbdd8cfe5898679be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:8c:ca:21:6b:94:77:81:d6:29:75:ff:04:e7:
                    06:8a:9a:5a:e4:7c:12:f5:f5:a9:cd:2f:1a:d2:09:
                    32:2c:86:1a:dc:ea:2c:6a:ac:ad:ef:0e:a7:e1:a8:
                    7c:c9:6a:5c:90:a9:25:c4:05:e4:5c:35:84:8f:be:
                    57:04:a7:0a:af:bd:ce:7d:43:69:31:ef:83:0c:b4:
                    e0:2a:e3:2c:02:17:03:1d:4b:0d:55:5c:30:a7:dd:
                    6b:6e:16:fa:74:bd:01:db:e7:66:af:c8:0e:8d:7f:
                    88:30:2b:67:58:e3:cc:2e:f6:67:22:30:ad:96:f9:
                    2d:7c:f8:df:07:1e:37:e8:d7:8a:ce:97:d6:ac:cd:
                    84:6c:e1:44:93:e8:04:f2:b9:4b:20:cd:3c:17:65:
                    53:93:b4:66:87:af:b0:44:d4:8a:bd:ef:a6:e6:a7:
                    00:13:1a:f0:91:56:46:be:c5:ff:c3:9a:4d:3c:ac:
                    03:7b:3d:b6:e5:e0:6f:a0:82:ff:c2:fe:2e:32:18:
                    a0:ff:c7:91:92:01:7f:d2:23:17:b0:eb:5f:9b:a5:
                    38:a3:2d:a5:b0:23:7c:da:30:a1:5a:5a:95:77:fa:
                    32:26:e1:74:a9:b3:7c:e9:ad:45:4b:87:19:c8:50:
                    30:46:78:07:fc:87:14:55:8f:b5:11:36:98:d5:c2:
                    7f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1B:64:35:90:C6:E3:CD:60:52:5A:7D:BD:D8:CF:E5:89:86:79:BE
            X509v3 Authority Key Identifier:
                keyid:1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ad:b1:97:10:89:da:82:d7:25:3f:3b:c1:49:d6:79:ab:4e:
         1b:12:bc:13:da:fe:ec:bd:54:70:07:fe:25:21:b2:bd:39:c2:
         15:85:f1:88:62:dd:14:ae:5e:c8:65:b9:df:4f:5d:7f:a1:b2:
         c3:f2:70:be:26:cb:64:1f:03:d6:b5:15:4f:5a:7d:c2:7f:24:
         97:f2:0a:b8:f6:5e:de:08:73:cd:26:c4:0d:28:c6:2b:19:af:
         84:6a:e4:d2:b3:63:0e:13:d1:b3:f5:de:8d:1e:a5:cb:54:a2:
         49:ab:85:ae:49:aa:a1:98:c4:03:d8:12:68:7c:c5:ef:db:2f:
         d2:28:5d:5e:e7:b8:cb:ff:d1:6b:db:1f:ce:cc:5a:4d:a6:67:
         36:fa:53:64:63:86:59:9b:b4:33:07:11:14:52:1d:db:fb:47:
         4b:66:09:ed:2a:bf:c4:d0:a3:85:89:2f:fe:97:fc:62:0c:bf:
         d4:8d:36:02:08:78:95:2d:f1:fd:9d:be:ac:13:4d:b6:c1:4c:
         f9:50:e4:19:80:36:ec:4e:3b:1a:14:5f:ea:bd:55:cc:f3:38:
         83:d9:e8:38:85:93:6f:21:f9:90:a0:d8:ec:32:df:5e:47:43:
         04:6c:c0:87:59:57:b9:27:28:7a:c8:6d:85:8b:72:fb:17:41:
         80:c1:0b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:22:35 2026 by rpki-client