Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
File:                     Gk-AAcMMrFRuP5IQO0sScy38v1I.mft (raw, json)
Hash identifier:          9Bl0OU2SbjdzGWoMJ3kJ/OkIztK5lh5Rzj3IM/kbtp8=
Subject key identifier:   E7:2C:A9:38:CD:6E:A8:DD:FE:F3:3B:D4:AA:82:AE:29:12:76:D2:CC
Authority key identifier: 1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
Certificate issuer:       /CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Certificate serial:       01A17ADFEC71580EE279508BE50E0895ECAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
Manifest number:          1AC5
Signing time:             Tue 27 Oct 2026 01:00:57 +0000
Manifest this update:     Tue 27 Oct 2026 01:00:57 +0000
Manifest next update:     Wed 28 Oct 2026 01:00:57 +0000
Files and hashes:         1: BCswXhh13-96UzaS6jsy6o1xQtA.roa (hash: ZcV3c026LJ5PD6nm+askgP2WeXj6YnsPaEau8hz76oA=)
                          2: Bl5slAIXRPgWtIinsLCmL3-jbzk.roa (hash: i6BHS+hInLwE4GPTdlCdthLjEksUt9oFXu6hrkt0YCc=)
                          3: Gk-AAcMMrFRuP5IQO0sScy38v1I.crl (hash: tWJJ8AoEKgBASdGaQiqQvnwbijUbaaYuvUItjCivSVE=)
                          4: MULF19ROPV0W_fTYRqeyOCt3Yeg.roa (hash: JLSm0NR2yp/7sLvwbHrccBHG0dmWFI9G+KuJqUy4oRE=)
                          5: osuY-cnY6vhLD6H1gcoPAxb709k.roa (hash: uqRcFkq6jjVYOzdkGQsiVwhb9Q+ozJsUHkALBpXOot0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 01:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7a:df:ec:71:58:0e:e2:79:50:8b:e5:0e:08:95:ec:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
        Validity
            Not Before: Oct 27 01:00:57 2026 GMT
            Not After : Oct 28 01:00:57 2026 GMT
        Subject: CN=e72ca938cd6ea8ddfef33bd4aa82ae291276d2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d0:3a:e2:93:48:02:75:d4:73:66:e7:45:35:
                    94:23:45:99:d3:b9:64:8d:d8:19:98:b8:ae:df:e5:
                    4f:cf:46:ad:42:07:59:96:c8:58:88:77:4c:43:11:
                    36:0b:53:aa:50:3a:5f:0d:05:a8:de:c7:11:b8:af:
                    7d:2a:a4:9e:a9:c5:7d:46:cf:96:b3:b2:17:3c:69:
                    0a:4b:41:4f:66:fc:3d:48:b7:6d:78:51:69:4f:a5:
                    f6:d1:cb:8e:39:7e:d3:9a:07:f9:d7:24:83:7a:51:
                    92:ff:77:f9:35:f3:18:57:67:a4:a5:36:23:05:09:
                    1e:d7:3f:d8:82:39:15:24:e1:cb:75:f8:1f:86:63:
                    14:e9:f2:24:fa:1f:7c:d1:5b:72:70:e7:3d:d1:32:
                    9a:f7:11:f9:1f:a7:f0:69:53:68:26:49:f8:94:57:
                    48:4c:2b:36:bc:d7:6f:13:01:0c:b5:e6:58:f5:d1:
                    b1:61:4e:5d:6f:13:46:4e:8f:08:b8:e1:23:40:32:
                    7e:3c:6e:71:c7:22:05:b5:7e:bd:56:3f:56:e3:c4:
                    8f:b0:18:4a:35:b4:be:d1:fd:85:6e:6b:10:7f:b3:
                    ca:92:e1:43:5d:7e:9d:c7:ad:d6:c3:b1:a2:81:b4:
                    ee:8e:f6:66:e3:1b:2a:d6:da:e2:77:36:a7:59:32:
                    49:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2C:A9:38:CD:6E:A8:DD:FE:F3:3B:D4:AA:82:AE:29:12:76:D2:CC
            X509v3 Authority Key Identifier:
                keyid:1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:1a:0a:28:a7:a3:bb:a7:8c:f5:f8:40:57:f8:91:e0:9c:2b:
         50:fd:c3:ee:2b:62:70:c4:a0:db:8b:6e:96:a2:b0:0b:30:b5:
         ba:16:79:38:ae:10:75:bc:75:a1:3e:ef:d6:fe:19:7e:eb:e9:
         cf:a5:fc:14:54:e7:66:f0:7b:ca:73:ac:56:49:1b:b1:f9:1a:
         ad:bf:ed:95:6d:42:d4:9b:f7:84:51:a1:f8:6f:4d:1b:34:9a:
         d4:06:d9:f6:5e:9f:c2:b9:fc:bb:7f:c7:da:9c:d3:21:f6:fe:
         40:f1:42:11:7d:e9:1b:ad:6f:e6:ac:6f:c7:fd:0b:ab:0a:1b:
         67:94:94:37:d8:f2:34:a5:6c:78:af:f9:48:8d:41:1d:8c:87:
         50:54:b2:16:0c:34:b5:dc:91:4a:e6:ee:45:8c:8e:ec:1c:5f:
         d0:c7:cf:2c:17:d6:14:90:8c:32:8c:33:b4:74:0a:31:06:76:
         c3:bc:59:fc:4e:be:f7:bc:87:df:13:22:52:53:22:89:db:07:
         40:32:27:33:ab:9c:e3:55:d2:9c:46:fb:2d:ba:76:a2:98:65:
         bf:19:04:d4:95:75:5e:f2:8c:91:c8:99:53:5d:34:e1:9d:f7:
         d7:bb:77:b0:56:cc:3e:84:13:40:e9:e7:a0:79:b7:ca:e1:05:
         b5:b0:63:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF63+xxWA7ieVCL5Q4IleyqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNGY4MDAxYzMwY2FjNTQ2ZTNmOTIxMDNiNGIxMjczMmRm
Y2JmNTIwHhcNMjYxMDI3MDEwMDU3WhcNMjYxMDI4MDEwMDU3WjAzMTEwLwYDVQQD
EyhlNzJjYTkzOGNkNmVhOGRkZmVmMzNiZDRhYTgyYWUyOTEyNzZkMmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9A64pNIAnXUc2bnRTWUI0WZ07lk
jdgZmLiu3+VPz0atQgdZlshYiHdMQxE2C1OqUDpfDQWo3scRuK99KqSeqcV9Rs+W
s7IXPGkKS0FPZvw9SLdteFFpT6X20cuOOX7Tmgf51ySDelGS/3f5NfMYV2ekpTYj
BQke1z/YgjkVJOHLdfgfhmMU6fIk+h980VtycOc90TKa9xH5H6fwaVNoJkn4lFdI
TCs2vNdvEwEMteZY9dGxYU5dbxNGTo8IuOEjQDJ+PG5xxyIFtX69Vj9W48SPsBhK
NbS+0f2FbmsQf7PKkuFDXX6dx63Ww7GigbTujvZm4xsq1tridzanWTJJxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcsqTjNbqjd/vM71KqCrikSdtLMMB8GA1UdIwQY
MBaAFBpPgAHDDKxUbj+SEDtLEnMt/L9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2stQUFjTU1yRlJ1UDVJUU8wc1NjeTM4djFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kNmM4NmQtNmM2NS00YTI1LWE4ZmEt
MzhkNGYzMjExODk2LzEvR2stQUFjTU1yRlJ1UDVJUU8wc1NjeTM4djFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kNmM4NmQtNmM2NS00YTI1LWE4ZmEtMzhkNGYzMjExODk2
LzEvR2stQUFjTU1yRlJ1UDVJUU8wc1NjeTM4djFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihoKKKej
u6eM9fhAV/iR4JwrUP3D7iticMSg24tulqKwCzC1uhZ5OK4Qdbx1oT7v1v4Zfuvp
z6X8FFTnZvB7ynOsVkkbsfkarb/tlW1C1Jv3hFGh+G9NGzSa1AbZ9l6fwrn8u3/H
2pzTIfb+QPFCEX3pG61v5qxvx/0LqwobZ5SUN9jyNKVseK/5SI1BHYyHUFSyFgw0
tdyRSubuRYyO7Bxf0MfPLBfWFJCMMowztHQKMQZ2w7xZ/E6+97yH3xMiUlMiidsH
QDInM6uc41XSnEb7Lbp2ophlvxkE1JV1XvKMkciZU1004Z3317t3sFbMPoQTQOnn
oHm3yuEFtbBj7g==
-----END CERTIFICATE-----
Generated at Tue Oct 27 09:20:02 2026 by rpki-client