Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
File:                     GryfszEqSr8d3ChRjnYI4Owydd8.mft (raw, json)
Hash identifier:          UsPkr651Qvobo2rMCImbKVokNzgY9pTdGLQHmm006C0=
Subject key identifier:   3C:30:68:11:2B:0A:95:69:52:EE:DF:D8:BF:F6:9B:F3:2C:8F:27:6B
Authority key identifier: 1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF
Certificate issuer:       /CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
Certificate serial:       01A0DF4F166D0EE95AED8485411142B85DE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
Manifest number:          0327
Signing time:             Sat 26 Sep 2026 20:01:37 +0000
Manifest this update:     Sat 26 Sep 2026 20:01:37 +0000
Manifest next update:     Sun 27 Sep 2026 20:01:37 +0000
Files and hashes:         1: DJdi3T9GBdXyWlmkF-1AfJu00z4.roa (hash: 9uSdWnZMdUgF7nF1Y5Ayng87XmAG51T65tQ1ewgeEQc=)
                          2: GryfszEqSr8d3ChRjnYI4Owydd8.crl (hash: nzUvw6tJX4lbBeqcSBf8rlnIz9d2NNZWHBfWMb5O9Bo=)
                          3: REiaLPFJMgnbb32-B6MU-uTjIlI.roa (hash: nKuK7TPAmuzDf184++qSMR2f3U6nDVTJDG8nEA5Zshs=)
                          4: Xvu0C67-BWy0g8WYONkS-2tc_BM.roa (hash: 5IIvu8y7oObXXHmvGLjhkK8E3RwHEJbfJJNw4p6yHig=)
                          5: schmDmE2CKJCpiAehrjpSNlTDGg.roa (hash: +x21cIiTbRvA+l5+kVYBAJIbR8+s45Qj0TzBMrcAZH4=)
                          6: ta7hQSc7ARZjjGzwCStEeYhJ0BE.roa (hash: Py8T1t5CIRrQnYUBu52tDBLLob8RSsHoARPvObfZdB0=)
                          7: vdxk280EZJdsjHh7wsXDY4EoHlo.roa (hash: +1LA/Ivx7z3Vxl1WaI94b4YLVsQkfux8YU6LuCoqZyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:4f:16:6d:0e:e9:5a:ed:84:85:41:11:42:b8:5d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
        Validity
            Not Before: Sep 26 20:01:37 2026 GMT
            Not After : Sep 27 20:01:37 2026 GMT
        Subject: CN=3c3068112b0a956952eedfd8bff69bf32c8f276b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e7:a7:51:1b:15:0d:d7:c8:b9:94:26:ac:93:
                    59:06:d7:b0:6c:04:a2:12:a2:27:09:c9:c9:02:2d:
                    ee:09:44:9b:7c:27:95:56:fd:9c:b8:4e:27:a0:53:
                    5e:14:7a:42:3b:29:d1:f6:f4:5e:06:24:49:23:19:
                    1d:9a:25:e0:1a:4f:03:04:4d:ac:32:a8:20:66:dd:
                    e9:5a:23:77:ac:a7:7c:48:33:98:4c:87:6e:94:f8:
                    0b:1b:73:b6:6b:b6:11:fd:e3:f5:e6:b8:bc:e8:c2:
                    51:96:f5:77:7d:01:c0:00:52:13:77:a7:1d:a4:dd:
                    0c:b7:df:84:68:17:ee:d7:7c:b6:3c:53:ad:b1:bf:
                    8b:9e:3c:ab:7c:c6:4d:11:7f:19:b8:3d:5e:36:a3:
                    13:4f:98:c9:fd:22:5e:52:48:1f:51:9b:0e:8e:d0:
                    27:40:d2:09:a4:e5:22:f8:80:86:48:91:7a:15:ef:
                    e1:42:ba:9b:7b:ca:74:a0:d9:4e:07:61:b6:07:ab:
                    c2:d2:d9:da:cf:f5:dd:a6:b8:05:8e:53:b1:38:5c:
                    85:d8:d1:56:51:54:48:48:43:5f:57:33:8a:5d:91:
                    eb:91:c1:73:7f:d5:1d:b2:d8:4e:02:a0:26:06:31:
                    88:9e:b9:f3:c0:75:32:b7:96:0a:c5:82:ee:a2:4e:
                    41:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:30:68:11:2B:0A:95:69:52:EE:DF:D8:BF:F6:9B:F3:2C:8F:27:6B
            X509v3 Authority Key Identifier:
                keyid:1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:72:aa:a8:f1:d0:e2:b2:00:a8:62:cf:76:29:f9:bb:64:47:
         f2:5a:d2:14:7b:98:57:de:44:68:67:46:bc:bb:f5:8e:cc:b2:
         46:8f:e8:53:c7:bf:12:87:59:d1:f6:a7:f5:bb:54:f9:b1:c9:
         bc:39:78:8e:c5:5e:1a:04:a2:c8:9a:bf:e5:b4:13:93:44:39:
         72:95:80:2c:71:f8:4c:28:83:0b:74:0f:2e:ae:87:3f:77:ed:
         7b:4e:c8:9a:5f:4b:47:9c:8d:9c:da:05:af:b9:d1:fc:18:46:
         68:56:a5:7d:b2:2b:4b:e0:63:4c:a9:36:9a:b8:aa:98:09:2c:
         23:fb:d1:44:a3:19:5e:c2:44:1c:d9:b4:e2:e0:2e:dd:81:fb:
         70:60:bd:ef:36:aa:28:95:15:80:7a:8d:37:af:6b:45:bf:d1:
         23:24:1d:a5:2b:04:8a:cb:aa:6a:f8:1d:a0:13:c1:06:09:70:
         90:0e:86:a7:86:1d:74:4a:c0:85:21:76:29:d4:35:6d:f8:ef:
         9c:f6:cc:e8:41:cc:d4:1f:ab:e1:28:6a:2d:18:19:7a:fd:9c:
         99:f4:f2:0a:dd:17:18:d2:65:5e:8c:26:83:be:74:b9:23:c2:
         b0:b5:d6:3e:6c:34:e0:00:49:e9:b3:4f:55:92:8a:05:e6:e1:
         b4:ad:cf:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:43:41 2026 by rpki-client