Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
File:                     GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft (raw, json)
Hash identifier:          BSzw//3Fle83yF6X2j+aL6W+TyDcCYBCKMgTxB2NA2g=
Subject key identifier:   E7:D6:EF:E9:AA:BC:73:61:F7:76:16:E2:17:D6:E4:A7:F6:F3:AA:DB
Authority key identifier: 19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
Certificate issuer:       /CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Certificate serial:       01A125B076392CCA9E7F6377CFEB7CDFA931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
Manifest number:          0978
Signing time:             Sat 10 Oct 2026 12:01:23 +0000
Manifest this update:     Sat 10 Oct 2026 12:01:23 +0000
Manifest next update:     Sun 11 Oct 2026 12:01:23 +0000
Files and hashes:         1: FiXFwvxiV6Y1ajHORGAWiqcT-Y4.roa (hash: Zs2NR7v6cxcECJIbaIPTJM9/Q7GTHlESDly+5o8OUyM=)
                          2: GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl (hash: dNLoJjQDud7KPNj8K/VvEQMGG5+MI9N0XQzK0gNYjo8=)
                          3: H6M_InTSfVSn-OrNGGPHtf16a84.roa (hash: 67LBTnOipV4/GHI9IH+2paCeB2Zya21UUa/eX3d6cWc=)
                          4: aCTYERjrsgQgd2eNcJ-xT6iLuVA.roa (hash: FSNpstLHIA+MgvTMObqgBgedN4krH4ykjVcUB8HPSAs=)
                          5: n_tsv6Gyy6l05YXi3Ux3ZNxYK4k.roa (hash: tTwofU2ePVTBmlzrQLu6MXi58L90+r8cW89IO3vj7uk=)
                          6: oc64jGTa7tYBazn5B8iUtkhOiqA.roa (hash: RFnqxJshGlA8TNiqCYqoYq6mvbEyQL7fumOe50DNmVk=)
                          7: vGG_tLkKXFgbXJfTRyLCvmDQxbE.roa (hash: WShGMkUZgE0y2ZoQYvE7mjCYcDN54oRSnCg5kaDhPTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:b0:76:39:2c:ca:9e:7f:63:77:cf:eb:7c:df:a9:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b390b62d09950d500cd6bbbd78d0390560ec42
        Validity
            Not Before: Oct 10 12:01:23 2026 GMT
            Not After : Oct 11 12:01:23 2026 GMT
        Subject: CN=e7d6efe9aabc7361f77616e217d6e4a7f6f3aadb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:32:d5:30:be:72:9c:56:8b:31:9b:6c:30:89:
                    e7:6d:b7:1b:0d:38:3c:e6:f8:60:88:76:28:4c:69:
                    a9:dc:5a:34:dc:93:b1:3d:f9:98:4b:93:14:66:33:
                    31:c6:c0:ec:08:83:97:09:22:3c:d3:e1:fd:7b:0e:
                    1f:95:ff:56:20:bd:13:ae:be:d8:3b:21:08:c1:91:
                    be:75:d6:96:93:fd:aa:8a:32:91:56:8a:76:59:1e:
                    78:07:62:f8:20:59:c5:ac:58:aa:fa:f3:de:99:98:
                    07:bb:ca:6f:73:55:23:ab:70:5a:4b:71:59:0d:ca:
                    dd:ce:3e:e7:5d:e1:1c:9a:4a:62:82:fd:14:96:e0:
                    dd:61:0e:3f:da:ae:8e:22:a8:1a:f8:06:de:61:d0:
                    8e:24:7b:fb:33:83:7b:4b:4e:45:f8:4b:e8:08:06:
                    e4:5b:67:d6:50:a2:ab:d4:db:d9:3b:2d:37:b1:33:
                    d4:ed:fe:6e:3b:41:89:d3:ce:d1:9c:d2:df:24:57:
                    17:58:2c:26:ac:01:2d:b0:98:26:4d:f5:3b:1d:dd:
                    c0:e9:ac:a2:96:9f:fe:07:8f:bc:20:e7:e1:ab:79:
                    0a:3d:51:19:61:03:ea:da:06:86:c9:d2:97:cd:94:
                    d3:23:ff:94:92:0e:27:dd:85:22:af:18:64:92:cf:
                    b9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D6:EF:E9:AA:BC:73:61:F7:76:16:E2:17:D6:E4:A7:F6:F3:AA:DB
            X509v3 Authority Key Identifier:
                keyid:19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:dd:55:d0:9e:f8:78:02:11:b5:eb:41:7e:6e:e6:58:ae:f9:
         22:17:83:6d:4c:44:0b:22:0e:70:db:ce:1b:33:ce:8e:52:40:
         79:11:83:62:8e:61:4a:2d:cc:1b:bf:d5:fd:b6:fe:50:ec:62:
         1e:6c:3c:22:a4:c3:f6:f7:c2:d8:2b:53:1a:d7:89:bd:b5:c7:
         0a:de:cd:98:10:7d:b3:c5:86:89:bf:2e:33:2c:b1:a8:22:82:
         24:1e:1b:67:22:9f:e4:0b:56:ba:7c:da:b2:e2:94:ea:c9:58:
         cc:c6:72:85:d5:fe:c9:18:db:7d:3d:8e:c2:2a:a1:db:fd:6a:
         af:8c:b6:99:0c:0d:1e:b0:ad:ca:6f:e2:f8:5f:3a:df:54:84:
         f8:50:e0:89:b5:0e:15:5a:dd:c1:4a:e0:0b:82:2e:81:d0:d2:
         b5:0d:b6:8d:86:24:f1:97:34:78:24:02:73:6d:d5:1f:1e:b7:
         40:f0:1c:48:89:61:5d:f9:a4:4a:07:cc:e7:59:25:2f:6d:f3:
         9e:6a:2a:e3:df:d7:8a:6e:b7:2a:37:39:10:b8:9b:79:15:c5:
         cc:9d:e2:e6:30:5a:46:5a:f5:a4:b6:9c:5c:b7:2a:57:ed:30:
         79:3b:c2:46:3d:32:67:18:2c:16:bc:3c:f1:1f:4b:ba:fe:6f:
         13:44:c3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:37:47 2026 by rpki-client