Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
File:                     GmoUZyI70xUQwU8hvTPX12mCnSg.mft (raw, json)
Hash identifier:          6H7d6ERXA2zG5vNDEX0JYRtw4b1QZmlLivZaD0ST1M8=
Subject key identifier:   6A:63:69:9A:AA:8C:5D:BF:43:F6:E7:D8:2F:07:A1:B4:DE:EF:06:90
Authority key identifier: 1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28
Certificate issuer:       /CN=1a6a1467223bd31510c14f21bd33d7d769829d28
Certificate serial:       01A16044A07658012568B16B0A46D777251D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
Manifest number:          04B1
Signing time:             Wed 21 Oct 2026 21:01:12 +0000
Manifest this update:     Wed 21 Oct 2026 21:01:12 +0000
Manifest next update:     Thu 22 Oct 2026 21:01:12 +0000
Files and hashes:         1: GmoUZyI70xUQwU8hvTPX12mCnSg.crl (hash: ZjbY6K0GFFwsh58tpCYA97rMDZWiy7wHGixOI3C+nAU=)
                          2: yMHe_AcZ7t0DOCfavN3ISgqxc3c.roa (hash: 9DwkTaaH9QdGqF+hvGsRneF8svXbKCB6hQgeZ0/mVuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 18:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:60:44:a0:76:58:01:25:68:b1:6b:0a:46:d7:77:25:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a6a1467223bd31510c14f21bd33d7d769829d28
        Validity
            Not Before: Oct 21 21:01:12 2026 GMT
            Not After : Oct 22 21:01:12 2026 GMT
        Subject: CN=6a63699aaa8c5dbf43f6e7d82f07a1b4deef0690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:98:d6:33:e7:fd:26:4b:60:04:34:8c:f3:80:
                    99:00:ba:5c:e3:e8:12:68:0a:79:af:e9:f9:ac:c9:
                    c4:50:ab:81:4d:e7:16:52:5d:0e:7f:8e:17:1c:bd:
                    ac:89:1f:e2:d2:34:8b:1f:2e:3d:8e:c6:88:81:a9:
                    06:07:3c:76:78:57:86:55:3e:b4:1f:ba:0b:17:e7:
                    a5:c5:9c:a9:30:f6:1f:d7:55:f6:c9:72:dd:2b:42:
                    eb:1d:58:a1:b5:d4:17:4a:f5:9c:0b:d8:f3:cc:7a:
                    ee:db:77:15:ad:e5:4c:25:8e:67:61:33:c9:6b:db:
                    a6:de:55:b6:7b:20:b4:c6:ee:af:51:f7:0e:f3:7f:
                    f1:4e:81:db:c4:e0:e7:8e:4f:e5:9a:03:0f:cc:15:
                    e9:c3:38:94:7d:50:f8:43:ae:52:57:53:91:77:a4:
                    4e:6a:3b:c2:a6:76:c1:55:93:7a:40:ba:d1:66:66:
                    ed:a1:4e:f4:bf:0e:cb:f7:40:4d:bb:99:c3:d3:d2:
                    6a:f1:56:74:ad:25:a6:44:98:0f:19:7e:77:30:59:
                    32:00:39:94:e3:ff:e4:c5:08:46:70:68:f8:7a:d9:
                    8e:7a:b6:fe:42:d4:eb:87:1c:15:e1:73:4e:1a:b9:
                    82:78:fa:4c:2b:35:5a:de:9a:04:a2:86:43:da:36:
                    8d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:63:69:9A:AA:8C:5D:BF:43:F6:E7:D8:2F:07:A1:B4:DE:EF:06:90
            X509v3 Authority Key Identifier:
                keyid:1A:6A:14:67:22:3B:D3:15:10:C1:4F:21:BD:33:D7:D7:69:82:9D:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUZyI70xUQwU8hvTPX12mCnSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/87eafc-17a6-4903-b951-4d20da0c530e/1/GmoUZyI70xUQwU8hvTPX12mCnSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:50:24:bf:be:60:c7:19:fd:09:98:42:38:8f:5d:76:7e:7e:
         6b:20:9a:7c:4a:ca:a0:44:4b:fb:5b:86:31:cd:20:8a:61:8e:
         a6:cc:4e:31:1e:7b:83:33:80:18:8c:43:41:f5:fb:6c:93:ad:
         5f:45:aa:c5:33:80:23:f4:4a:a2:9c:c6:ff:4f:8b:f9:38:21:
         ac:4b:75:35:05:6d:5b:9c:57:bc:df:48:6f:ad:5d:39:ca:c7:
         db:c1:ca:77:3a:fa:25:be:c2:e5:78:c3:40:9d:53:02:00:fa:
         6e:18:72:f1:12:8b:e4:8c:a1:21:6a:e4:06:65:90:86:bd:5c:
         64:68:0a:6d:2c:48:e2:32:f0:ab:8e:8b:62:5d:5f:5e:8a:1d:
         92:0a:20:89:85:ac:2e:c5:52:9b:5b:17:1c:80:12:b9:87:3a:
         30:b5:41:97:bf:38:da:e0:37:ec:55:e9:f2:1e:9d:93:cb:32:
         2a:72:3b:c9:93:30:b8:31:6e:b3:ce:a7:55:1c:8e:cc:6c:cc:
         a2:21:9d:6a:8f:fc:4f:59:45:00:0c:c4:06:cf:1e:ab:c3:c3:
         27:98:87:0e:85:0f:20:ce:cf:8a:41:ef:67:6b:77:11:35:e1:
         51:fb:fe:41:bd:18:14:69:9a:5c:18:38:69:f2:c6:3b:40:3e:
         e7:60:b1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 04:22:40 2026 by rpki-client