Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
File:                     GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft (raw, json)
Hash identifier:          BvJCwyCHfzduxMJFOE40OiUjMuM3Kg9kaRlS/tqj21s=
Subject key identifier:   6D:0A:0D:C9:49:84:AD:59:15:03:13:F2:09:36:F6:B1:E2:50:FA:2F
Authority key identifier: 18:8A:87:AB:79:10:19:37:93:B8:AA:6C:3C:1E:E6:6B:DB:06:A7:1F
Certificate issuer:       /CN=188a87ab7910193793b8aa6c3c1ee66bdb06a71f
Certificate serial:       01A0EE1D7C66BC6A1052D3C264C452015499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
Manifest number:          02FD
Signing time:             Tue 29 Sep 2026 17:01:44 +0000
Manifest this update:     Tue 29 Sep 2026 17:01:44 +0000
Manifest next update:     Wed 30 Sep 2026 17:01:44 +0000
Files and hashes:         1: GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl (hash: LBAcqneGd1e0OJ0POnYHJX+9KFM9wXe1QJXUMuL8Uo0=)
                          2: RzQNiT7P7X0bt1z43VwFKA5s99s.asa (hash: NE2IJNySJwcA6n4M0FlMAXHaRDUAEwl1GVTXW0QdP1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ee:1d:7c:66:bc:6a:10:52:d3:c2:64:c4:52:01:54:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188a87ab7910193793b8aa6c3c1ee66bdb06a71f
        Validity
            Not Before: Sep 29 17:01:44 2026 GMT
            Not After : Sep 30 17:01:44 2026 GMT
        Subject: CN=6d0a0dc94984ad59150313f20936f6b1e250fa2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b9:10:8c:a8:a5:7f:46:90:bb:62:16:7a:65:
                    82:91:2f:33:2e:cd:3e:7c:d6:51:be:df:2b:8d:ed:
                    f6:3c:9c:53:75:df:20:b3:44:3f:01:55:62:e0:6b:
                    f7:1a:5f:a0:ec:f3:fd:56:03:4a:13:6a:97:33:f3:
                    41:8b:e2:35:ff:f3:44:84:64:b5:9a:43:80:f6:d0:
                    32:77:2d:91:bb:f4:15:ca:73:e1:37:02:65:21:e8:
                    f2:0d:18:39:23:b4:e9:76:84:be:73:ec:d2:2b:01:
                    30:1e:d0:85:51:df:5d:16:93:c3:ab:51:ca:47:fd:
                    04:11:05:63:1c:cc:d4:24:93:96:aa:5b:0a:ae:fa:
                    5a:3e:54:b6:c4:34:9d:bc:63:62:00:d9:7a:50:d8:
                    97:36:f3:6d:32:a6:5e:4e:fd:6a:d8:7e:be:29:f4:
                    54:82:b2:cd:05:95:ec:66:3e:c6:4d:6f:93:da:75:
                    26:9e:db:7c:3f:ec:a7:6a:69:ae:c0:55:db:2d:92:
                    4c:fd:4d:25:25:b2:d4:2d:f5:d5:f6:ef:69:e1:66:
                    f7:c4:9f:f5:eb:ef:ec:bf:f2:87:c8:01:ef:8f:14:
                    7e:8f:1e:60:f1:7d:41:6c:1c:88:d8:26:3a:7d:99:
                    5d:99:25:83:a5:68:fb:3f:e4:ef:e4:2c:20:2b:9a:
                    d6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0A:0D:C9:49:84:AD:59:15:03:13:F2:09:36:F6:B1:E2:50:FA:2F
            X509v3 Authority Key Identifier:
                keyid:18:8A:87:AB:79:10:19:37:93:B8:AA:6C:3C:1E:E6:6B:DB:06:A7:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:b7:ed:bc:d1:76:7f:f1:a6:52:54:a5:57:f5:ce:34:7e:0d:
         58:76:c3:e1:f6:ec:86:44:1b:81:fa:03:12:fa:56:3a:40:e6:
         25:eb:d8:b2:24:1f:b2:bb:ce:8c:d3:f4:65:b2:c0:03:ad:2b:
         52:0f:10:06:cb:7f:fc:02:f3:f3:34:f5:58:73:a6:d8:a7:56:
         82:65:3c:6a:fe:25:95:9a:1e:c3:95:0f:d1:ad:67:fd:c3:43:
         e3:a9:ba:2e:24:8d:fb:47:92:cb:e9:69:02:16:47:2b:07:e7:
         df:26:20:62:f1:3f:67:8b:08:0c:0c:71:19:53:fd:d0:5c:bb:
         48:59:c7:e2:ac:5b:34:b0:d0:3a:a4:93:81:ce:5d:e8:c7:2a:
         1e:3a:14:71:a6:63:d4:57:e1:83:da:17:89:40:21:11:b8:cf:
         b9:ff:95:b0:a0:59:1f:d3:22:99:03:f1:1d:1c:fb:69:5b:3b:
         1b:c6:5f:ae:b9:20:cb:e9:5f:72:5d:e0:7c:ef:ac:38:63:74:
         cc:c0:03:8f:d9:ee:70:c3:d2:e4:a4:78:76:0d:94:97:ae:30:
         95:b2:40:97:db:c8:3a:65:ec:62:cc:0d:4d:a1:5f:8d:3f:49:
         ec:f6:ec:67:17:a0:ce:88:33:4b:16:3f:4e:b8:3c:39:54:0f:
         0a:a2:d3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 04:01:29 2026 by rpki-client