Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
File:                     GtTMzv5VxeIjqbMgW5OKPRyehtU.mft (raw, json)
Hash identifier:          VGtPTFagZz557Ub0Y9rPKJs2OhA1nOJIz/EJhS2d6vw=
Subject key identifier:   86:E3:90:C4:99:6B:C1:49:5A:2D:45:91:68:54:3C:15:9C:B6:38:D5
Authority key identifier: 1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
Certificate issuer:       /CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Certificate serial:       01A137B683EF15633C1ECE37B685188FC95C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
Manifest number:          1782
Signing time:             Wed 14 Oct 2026 00:01:10 +0000
Manifest this update:     Wed 14 Oct 2026 00:01:10 +0000
Manifest next update:     Thu 15 Oct 2026 00:01:10 +0000
Files and hashes:         1: GtTMzv5VxeIjqbMgW5OKPRyehtU.crl (hash: TvjRzi33LeQWo77Vni6C//NH3eIqOYgkgD1nyQYI8pk=)
                          2: k7oeIV7HgF0MdSr9wY7QH1nk1Po.roa (hash: H0UiWZoHXbQKY5PjSSEja9oJ63puQn0Ebtq8jzm98zU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:37:b6:83:ef:15:63:3c:1e:ce:37:b6:85:18:8f:c9:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
        Validity
            Not Before: Oct 14 00:01:10 2026 GMT
            Not After : Oct 15 00:01:10 2026 GMT
        Subject: CN=86e390c4996bc1495a2d459168543c159cb638d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bf:d6:94:8d:cb:7f:c3:95:f8:06:3f:75:46:
                    c8:e6:67:f3:4e:33:5b:76:7f:73:b6:5a:1d:1a:24:
                    40:e3:2b:74:c7:2e:8b:89:d1:c3:f9:06:1e:4b:a6:
                    fc:4a:23:b2:6f:7d:b9:67:91:4d:eb:f4:22:6a:50:
                    7f:eb:b6:1f:62:0b:9e:84:db:2c:3c:49:f5:72:44:
                    78:62:65:ed:11:08:da:65:15:79:7a:9a:c2:ab:68:
                    55:db:c9:ab:1a:05:06:b9:16:00:6b:f6:cb:78:5b:
                    64:ed:85:ee:b2:ff:aa:f6:b2:61:45:00:39:9c:24:
                    24:38:a3:25:76:4c:f2:6f:fa:5c:91:79:c5:f8:da:
                    c4:a5:5a:30:00:b3:89:1c:0d:a5:00:65:b5:bc:23:
                    08:d4:1c:77:d0:88:02:ec:d6:65:59:2f:07:f7:fe:
                    24:f9:18:3b:4f:b9:54:2e:2f:9f:d4:d9:74:93:d7:
                    08:d7:5c:ac:1f:97:58:b7:f8:51:d0:f5:5c:41:3c:
                    cb:05:50:62:25:53:e6:a1:2d:d7:e3:b8:a4:38:ad:
                    82:3d:49:08:9b:4c:9c:84:86:71:67:5c:2b:8e:b5:
                    b0:3b:c1:98:df:2d:e1:f9:7e:93:d9:d2:81:ad:21:
                    7c:2a:f0:29:96:18:c0:48:9d:7e:c0:ee:7c:b9:f2:
                    7e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E3:90:C4:99:6B:C1:49:5A:2D:45:91:68:54:3C:15:9C:B6:38:D5
            X509v3 Authority Key Identifier:
                keyid:1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:1f:6e:9f:ca:99:6e:16:04:f6:b7:51:b0:0c:8a:d7:95:05:
         7b:78:fd:2c:84:03:5c:99:b7:df:f2:b7:11:2d:78:86:5f:25:
         0b:55:71:4f:61:75:89:88:52:aa:8b:5c:07:37:41:bd:2a:36:
         df:1c:dd:0a:fc:b5:f7:fd:3c:df:4b:72:ba:16:3a:0d:ca:4e:
         7f:02:f4:8b:ae:28:f2:68:8c:96:bd:1b:d6:3b:bd:94:17:be:
         83:aa:0e:07:db:d6:0d:1d:63:ae:46:46:e0:90:d0:f7:76:4a:
         e8:3b:af:92:17:bb:e2:46:d0:95:47:e3:72:1f:1d:45:94:78:
         d9:50:9a:fa:14:2c:79:c6:60:83:0c:cb:3d:15:a4:ad:2e:50:
         5b:e7:f5:ad:5d:54:84:21:73:fc:3f:9f:3d:97:67:7b:5c:7b:
         b6:72:e8:22:4f:82:5d:eb:4d:d4:f6:8e:f2:1e:f3:ea:11:70:
         db:65:e2:af:cb:12:fc:2d:1a:6b:ba:79:57:a7:59:36:67:5e:
         54:98:5b:90:19:83:d4:01:cf:28:c8:5a:ea:7b:b0:a0:1b:ae:
         ad:4e:6b:30:04:50:3d:da:9b:2c:1a:24:c9:7f:9f:5b:7f:f0:
         55:96:ce:92:80:99:da:b0:42:0a:ad:a2:d3:9b:12:d1:b0:36:
         90:2f:2b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 07:54:41 2026 by rpki-client