Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
File:                     gVeAUy7Smj-A57pBTvyzednsl8k.mft (raw, json)
Hash identifier:          tqZQJrGgagAM99DaLzIcY92olkL6vRfwuBlW72YpAQY=
Subject key identifier:   9A:AF:1B:19:78:6E:B8:45:9E:CD:D2:DC:F8:A1:CF:F9:4D:65:9C:51
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Certificate issuer:       /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial:       01A127D55734D8C955662C99DCC6226519CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
Manifest number:          0D56
Signing time:             Sat 10 Oct 2026 22:00:55 +0000
Manifest this update:     Sat 10 Oct 2026 22:00:55 +0000
Manifest next update:     Sun 11 Oct 2026 22:00:55 +0000
Files and hashes:         1: 167q1DVVPrTdRYPkfcZCi239sJI.roa (hash: iphiS6YGG+NOQC8zeFXWVmhAQBLx2sZq4Y6HLVXVZOE=)
                          2: S9G5psiJeIcbArfBTp1QLAQdHYg.roa (hash: Zc2Nnr9uGhkOJwiMMBzf+F7Jqn4jLoEjO1hmaVvwrus=)
                          3: UrAwf58fhahFUOSzWtBJdSxqbEY.roa (hash: i0STbq1FvyERG4BX0Y5U86QJxom1+453IaNfNJ6A64s=)
                          4: d9jQ0MXnPvYgpDXafRNOfTdiez0.roa (hash: NVVF5QPKokAaAxOOfP2zdbiF9jm9CYGboJv9rbq85QI=)
                          5: gVeAUy7Smj-A57pBTvyzednsl8k.crl (hash: ODRfNh9v6Xxf6ZhI+iivdhi41aDg+vOe+4K7Lq1ClVA=)
                          6: hnX3GEWSMirkXg0F3Fz0pWka2cc.roa (hash: WY0W829d26Ieh54IESsnjlETa41xER8gZPgemFOcDZk=)
                          7: mHsA_rVsySauclXQKxspDTECljE.roa (hash: flPV0bAd69ESTw3Hk72QzoQVnq7R0pY25e/DdE1uZIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:27:d5:57:34:d8:c9:55:66:2c:99:dc:c6:22:65:19:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
        Validity
            Not Before: Oct 10 22:00:55 2026 GMT
            Not After : Oct 11 22:00:55 2026 GMT
        Subject: CN=9aaf1b19786eb8459ecdd2dcf8a1cff94d659c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ab:72:a5:0f:43:82:32:37:78:7f:d4:b7:c3:
                    f3:a6:19:21:39:d6:5f:9e:d5:12:fc:42:7e:e7:cf:
                    c9:c5:d4:05:7e:97:83:b3:6e:d2:32:cc:1c:15:52:
                    fc:66:16:34:11:b3:bc:ab:da:6f:1d:fd:16:b7:ae:
                    a9:8b:e8:11:52:d9:f6:dd:95:68:b7:24:e2:8b:8c:
                    fd:9a:d2:d8:61:ff:ce:0c:e0:f7:b4:3a:58:a4:f7:
                    39:d0:cf:4f:96:f5:9e:7d:a0:a7:76:61:30:bb:6e:
                    72:84:11:52:8d:f4:f8:79:09:15:69:d3:f6:89:fe:
                    a8:ac:3f:0f:f3:22:e2:a3:50:ed:d4:5a:cf:da:92:
                    a7:0c:ee:0b:16:b7:75:dc:41:25:f8:44:ba:80:e0:
                    18:7c:d7:bc:7a:a9:89:69:91:cd:cb:44:dc:da:ee:
                    9a:36:ba:d2:49:f9:b6:17:b3:1f:ef:91:12:ce:ed:
                    5b:18:7b:c1:8b:69:1e:a6:23:8b:2b:37:ff:22:0f:
                    11:7b:e4:ff:2e:c0:2e:99:8e:19:8a:d2:24:5a:f2:
                    36:63:86:10:86:44:eb:ce:c4:eb:a3:36:f2:96:fd:
                    cc:64:b2:8f:7d:9e:50:53:cf:c8:57:90:b0:3f:90:
                    a2:75:7a:ec:80:b3:b9:f3:31:9a:6d:b0:84:ce:e7:
                    bb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AF:1B:19:78:6E:B8:45:9E:CD:D2:DC:F8:A1:CF:F9:4D:65:9C:51
            X509v3 Authority Key Identifier:
                keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ff:4f:3d:22:d9:08:aa:68:24:c1:bb:62:42:bc:5a:17:74:
         8e:04:f4:fc:8f:ef:60:89:92:2c:10:e1:66:d1:23:83:f5:97:
         2d:b4:fb:ec:ef:f3:26:d9:a5:fb:25:1e:ce:6d:da:c9:55:a0:
         8e:e8:66:71:ad:82:21:5e:59:9d:ec:da:5f:fb:1c:87:21:e0:
         78:0d:8e:50:c5:cd:0b:78:bd:2b:b5:7a:39:93:62:f5:c7:a1:
         a1:e1:5e:d4:31:3b:e6:c8:61:c0:02:c6:52:d6:c8:2c:9f:67:
         07:d3:94:f5:5a:97:0b:41:7b:02:9c:11:56:b2:aa:b3:24:f3:
         c5:80:01:d2:84:1b:b7:91:2a:da:b6:7e:90:45:dd:11:82:f8:
         49:d9:a7:82:c6:a2:91:70:cf:7c:26:81:ff:f3:74:0e:16:e4:
         fc:dc:4a:9c:bc:e9:ec:0c:fc:7d:b7:df:b3:8f:df:ee:aa:06:
         d1:3d:32:74:1c:88:18:aa:82:97:0a:12:7d:0f:46:69:61:a2:
         83:56:17:9d:c5:92:fe:23:1f:a8:f9:d8:98:00:09:32:a0:b9:
         eb:b4:a8:b7:eb:32:55:ba:9a:a5:5b:81:94:76:5b:ae:e0:da:
         00:21:60:a8:be:a9:14:8c:74:fd:2a:17:4a:23:81:1e:e0:7a:
         1c:25:b0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 02:18:04 2026 by rpki-client