Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.mft
File:                     guRyorh_8WgtNi8N3kGOkxGsBGQ.mft (raw, json)
Hash identifier:          hClVPxXpHwZIHxC5322XFq8IGbadDiyoVGePFnxZ7uY=
Subject key identifier:   C4:2A:69:8D:1F:D0:0E:2B:0C:A4:F0:58:DF:E6:48:9A:85:F8:82:39
Authority key identifier: 82:E4:72:A2:B8:7F:F1:68:2D:36:2F:0D:DE:41:8E:93:11:AC:04:64
Certificate issuer:       /CN=82e472a2b87ff1682d362f0dde418e9311ac0464
Certificate serial:       01A0DB71D14E91A6DA392E02EAC1F4697B4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/guRyorh_8WgtNi8N3kGOkxGsBGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.mft
Manifest number:          1960
Signing time:             Sat 26 Sep 2026 02:01:04 +0000
Manifest this update:     Sat 26 Sep 2026 02:01:04 +0000
Manifest next update:     Sun 27 Sep 2026 02:01:04 +0000
Files and hashes:         1: D-e6wU5zP6uZWWi2AkuLUGao4UQ.roa (hash: bKkOhrhuCYI3o+vWiMDxNRSf5d5NZPCfEgFdiqMVbac=)
                          2: guRyorh_8WgtNi8N3kGOkxGsBGQ.crl (hash: KWgRaQu8gQmTF4MQjfCbiifqiu+FF8CRGqHX4QgDLVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/guRyorh_8WgtNi8N3kGOkxGsBGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:71:d1:4e:91:a6:da:39:2e:02:ea:c1:f4:69:7b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82e472a2b87ff1682d362f0dde418e9311ac0464
        Validity
            Not Before: Sep 26 02:01:04 2026 GMT
            Not After : Sep 27 02:01:04 2026 GMT
        Subject: CN=c42a698d1fd00e2b0ca4f058dfe6489a85f88239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e2:55:e4:c8:1c:10:95:1c:9e:db:36:10:02:
                    20:bf:1f:20:0c:54:2d:82:a2:a2:ac:e9:e6:ac:9b:
                    c5:61:f2:4a:fb:01:a0:d0:f1:b4:25:51:da:49:cb:
                    60:3c:03:17:a9:6d:dc:de:6d:9c:c0:92:b2:0d:4c:
                    f9:d8:57:2a:48:0b:47:e2:02:b9:18:13:a2:83:3c:
                    ec:4a:70:3b:d0:c3:e7:c7:ab:35:f8:97:64:24:67:
                    1a:d8:5a:30:05:0d:f0:53:ac:52:66:16:ae:5e:4f:
                    81:1f:29:65:88:ba:35:86:ca:88:f0:c8:e1:f7:b4:
                    94:49:d9:2a:b3:fc:70:42:45:77:eb:30:b6:a2:cf:
                    af:60:8e:91:03:08:88:01:ee:a6:68:74:ab:9f:2a:
                    f4:1e:2f:8c:ab:31:83:a1:f9:67:b0:63:21:48:fa:
                    0f:56:ae:1d:85:18:a2:46:ac:bc:0e:cc:be:55:90:
                    41:3a:d3:69:8d:1d:1d:38:7c:2c:44:8e:ee:5b:90:
                    72:b6:e5:b8:8b:e7:6b:8e:18:f7:ad:bc:84:ed:87:
                    9f:01:b0:d0:2a:93:20:36:c7:1f:cd:f8:b2:02:ca:
                    fe:ee:c2:c5:57:58:f9:07:07:a9:c3:d1:42:5d:25:
                    fc:17:ef:30:8a:54:f4:bd:2e:45:ab:60:85:23:05:
                    5b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2A:69:8D:1F:D0:0E:2B:0C:A4:F0:58:DF:E6:48:9A:85:F8:82:39
            X509v3 Authority Key Identifier:
                keyid:82:E4:72:A2:B8:7F:F1:68:2D:36:2F:0D:DE:41:8E:93:11:AC:04:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guRyorh_8WgtNi8N3kGOkxGsBGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:32:7c:69:6d:fc:20:5f:5c:b8:9a:b2:70:0b:e0:b3:f2:99:
         a2:84:26:08:dc:fb:d8:41:c6:83:79:f6:37:4c:77:dd:1d:06:
         d1:2d:70:ce:3e:ed:37:c9:f8:73:b7:49:5c:06:03:b8:70:d3:
         fe:3d:43:60:ff:b9:de:14:08:28:c4:8f:31:1c:8a:a5:ad:b7:
         37:94:a7:f1:96:6a:fb:de:7f:bd:07:c9:45:0f:6b:75:f8:43:
         84:17:a6:c7:69:a3:c0:12:56:07:80:c1:b4:3d:38:57:60:f9:
         44:56:6d:e8:55:58:23:3a:e0:46:52:cd:20:b7:80:15:27:06:
         d7:6d:41:6c:e1:1d:a9:c6:b1:97:14:f5:5b:a7:ce:28:9c:94:
         86:5d:10:02:38:4b:19:19:03:d4:ad:a5:ec:c1:c7:53:c9:4f:
         db:92:4c:52:4f:45:44:11:e7:da:69:1c:30:52:fe:f4:13:e7:
         18:df:19:8e:6e:7e:2a:e0:99:d9:d7:d3:28:e7:43:e2:e8:c1:
         a7:2c:96:4a:b0:b8:d1:f2:c5:9c:96:f9:39:bb:e5:78:dc:11:
         6e:d9:c0:31:d9:b0:c7:8f:ea:19:02:6b:8f:70:2a:55:aa:37:
         60:6e:7a:f1:fe:3b:33:55:da:47:3f:da:44:8f:d7:aa:98:06:
         99:ab:c5:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbcdFOkabaOS4C6sH0aXtKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTQ3MmEyYjg3ZmYxNjgyZDM2MmYwZGRlNDE4ZTkzMTFh
YzA0NjQwHhcNMjYwOTI2MDIwMTA0WhcNMjYwOTI3MDIwMTA0WjAzMTEwLwYDVQQD
EyhjNDJhNjk4ZDFmZDAwZTJiMGNhNGYwNThkZmU2NDg5YTg1Zjg4MjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+JV5MgcEJUcnts2EAIgvx8gDFQt
gqKirOnmrJvFYfJK+wGg0PG0JVHaSctgPAMXqW3c3m2cwJKyDUz52FcqSAtH4gK5
GBOigzzsSnA70MPnx6s1+JdkJGca2FowBQ3wU6xSZhauXk+BHylliLo1hsqI8Mjh
97SUSdkqs/xwQkV36zC2os+vYI6RAwiIAe6maHSrnyr0Hi+MqzGDoflnsGMhSPoP
Vq4dhRiiRqy8Dsy+VZBBOtNpjR0dOHwsRI7uW5BytuW4i+drjhj3rbyE7YefAbDQ
KpMgNscfzfiyAsr+7sLFV1j5Bwepw9FCXSX8F+8wilT0vS5Fq2CFIwVbXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQqaY0f0A4rDKTwWN/mSJqF+II5MB8GA1UdIwQY
MBaAFILkcqK4f/FoLTYvDd5BjpMRrARkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VSeW9yaF84V2d0Tmk4TjNrR09reEdzQkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi85MmI0ZDYtYjkyNC00YjMxLTk0ZDct
MjM2MTZjNzlhZTAyLzEvZ3VSeW9yaF84V2d0Tmk4TjNrR09reEdzQkdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi85MmI0ZDYtYjkyNC00YjMxLTk0ZDctMjM2MTZjNzlhZTAy
LzEvZ3VSeW9yaF84V2d0Tmk4TjNrR09reEdzQkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjJ8aW38
IF9cuJqycAvgs/KZooQmCNz72EHGg3n2N0x33R0G0S1wzj7tN8n4c7dJXAYDuHDT
/j1DYP+53hQIKMSPMRyKpa23N5Sn8ZZq+95/vQfJRQ9rdfhDhBemx2mjwBJWB4DB
tD04V2D5RFZt6FVYIzrgRlLNILeAFScG121BbOEdqcaxlxT1W6fOKJyUhl0QAjhL
GRkD1K2l7MHHU8lP25JMUk9FRBHn2mkcMFL+9BPnGN8Zjm5+KuCZ2dfTKOdD4ujB
pyyWSrC40fLFnJb5ObvleNwRbtnAMdmwx4/qGQJrj3AqVao3YG568f47M1XaRz/a
RI/XqpgGmavFPQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 13:10:29 2026 by rpki-client