Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
File:                     Gk-AAcMMrFRuP5IQO0sScy38v1I.mft (raw, json)
Hash identifier:          kywoaU3blHm5Zicx7VG9eltS2cegG+Z8yh3HzaSTTFo=
Subject key identifier:   C1:A1:D8:BA:B1:2E:53:DA:87:D1:36:25:32:DD:1A:F6:34:B1:E8:F9
Authority key identifier: 1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
Certificate issuer:       /CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Certificate serial:       01A08B67CFCFE0CA6097516AAC487AAAACC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
Manifest number:          1A49
Signing time:             Thu 10 Sep 2026 13:00:31 +0000
Manifest this update:     Thu 10 Sep 2026 13:00:31 +0000
Manifest next update:     Fri 11 Sep 2026 13:00:31 +0000
Files and hashes:         1: BCswXhh13-96UzaS6jsy6o1xQtA.roa (hash: ZcV3c026LJ5PD6nm+askgP2WeXj6YnsPaEau8hz76oA=)
                          2: Bl5slAIXRPgWtIinsLCmL3-jbzk.roa (hash: i6BHS+hInLwE4GPTdlCdthLjEksUt9oFXu6hrkt0YCc=)
                          3: Gk-AAcMMrFRuP5IQO0sScy38v1I.crl (hash: +38MpLnh77A6+INfkmVW5EM8TWyaxRlXvp4uwkxyfO8=)
                          4: MULF19ROPV0W_fTYRqeyOCt3Yeg.roa (hash: JLSm0NR2yp/7sLvwbHrccBHG0dmWFI9G+KuJqUy4oRE=)
                          5: osuY-cnY6vhLD6H1gcoPAxb709k.roa (hash: uqRcFkq6jjVYOzdkGQsiVwhb9Q+ozJsUHkALBpXOot0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 13:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:67:cf:cf:e0:ca:60:97:51:6a:ac:48:7a:aa:ac:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
        Validity
            Not Before: Sep 10 13:00:31 2026 GMT
            Not After : Sep 11 13:00:31 2026 GMT
        Subject: CN=c1a1d8bab12e53da87d1362532dd1af634b1e8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ea:de:8b:a5:41:d5:c3:2f:db:b2:2a:93:41:
                    5c:da:96:63:87:6b:aa:17:8e:b8:70:83:75:5e:8d:
                    8d:6d:48:b7:1c:46:57:9b:7a:88:64:12:ed:a0:45:
                    ef:38:54:74:79:57:ed:1c:25:9c:1a:4f:a3:d4:68:
                    f1:06:8b:85:2d:dd:f1:34:c8:e5:65:40:2a:a0:a0:
                    2b:5b:46:de:61:ea:eb:d7:fe:66:46:2b:76:c9:c8:
                    2b:03:ad:24:a9:e5:1f:95:c1:6d:04:f5:12:02:4f:
                    05:32:5d:1c:d9:0a:7b:e3:73:45:8c:d6:22:f7:47:
                    92:de:94:e9:6a:c9:32:67:24:35:85:3e:23:24:13:
                    a3:06:56:aa:b3:4b:c6:a5:40:a9:a2:28:48:05:11:
                    5d:c9:2e:26:4e:f3:5b:84:63:67:7d:05:4c:a7:b6:
                    d0:d9:21:f4:93:a2:9e:c4:cd:17:a3:30:82:9f:30:
                    cd:cd:73:42:83:ec:d1:1d:7e:d4:9a:82:a5:bc:57:
                    00:8d:cc:71:34:b1:c6:b0:a3:bd:f6:80:a7:59:38:
                    07:20:4c:a0:57:37:9a:6e:63:ec:ca:dd:19:64:4e:
                    f2:a7:ce:dc:1f:fc:3b:50:b8:87:c3:79:7d:55:53:
                    5c:7c:b4:73:52:89:10:3a:2d:21:35:2b:e8:b1:07:
                    e9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A1:D8:BA:B1:2E:53:DA:87:D1:36:25:32:DD:1A:F6:34:B1:E8:F9
            X509v3 Authority Key Identifier:
                keyid:1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b7:da:03:31:27:fd:ed:0a:4b:66:01:df:62:be:40:bc:0b:
         20:b8:b0:07:d6:b4:1d:e4:2e:ff:fe:95:94:60:fb:bc:d4:2b:
         f6:0d:59:ea:4b:8d:f3:ad:72:77:3b:3d:6b:16:a2:5e:7c:e9:
         1d:8e:f0:a0:8d:ac:9f:ce:c3:82:72:a7:75:3e:a5:71:2e:fd:
         8e:3d:ba:de:2f:b4:d0:7d:28:4a:be:98:b9:b3:fa:79:45:2d:
         46:e4:97:8a:f9:82:a0:f5:eb:f6:d2:14:19:79:cd:63:07:cc:
         8b:be:ad:8d:30:c5:a0:bc:e1:6a:b1:ae:e5:70:cc:7c:5e:ab:
         07:2c:b4:86:8a:c4:31:28:9f:06:5e:8c:03:d8:c9:9e:eb:6f:
         90:ef:2f:a9:29:ba:de:cf:a7:10:a0:b8:b3:31:ed:1c:79:32:
         21:bb:ee:3d:83:ce:3f:8a:33:41:26:18:dc:28:26:76:10:eb:
         a2:41:5b:42:e7:7c:53:4a:ce:e7:43:b1:0e:05:b4:27:32:12:
         58:8e:1a:0e:27:bc:8a:ad:87:24:73:78:83:b1:b6:f0:ee:93:
         27:21:81:70:e9:ec:92:ce:a5:a1:6a:d8:af:e7:9e:94:bb:8c:
         a9:66:fd:4b:8c:fc:b0:7b:bf:dd:63:24:45:3e:8b:66:50:17:
         8d:40:6e:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLZ8/P4Mpgl1FqrEh6qqzHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNGY4MDAxYzMwY2FjNTQ2ZTNmOTIxMDNiNGIxMjczMmRm
Y2JmNTIwHhcNMjYwOTEwMTMwMDMxWhcNMjYwOTExMTMwMDMxWjAzMTEwLwYDVQQD
EyhjMWExZDhiYWIxMmU1M2RhODdkMTM2MjUzMmRkMWFmNjM0YjFlOGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+rei6VB1cMv27Iqk0Fc2pZjh2uq
F464cIN1Xo2NbUi3HEZXm3qIZBLtoEXvOFR0eVftHCWcGk+j1GjxBouFLd3xNMjl
ZUAqoKArW0beYerr1/5mRit2ycgrA60kqeUflcFtBPUSAk8FMl0c2Qp743NFjNYi
90eS3pTpaskyZyQ1hT4jJBOjBlaqs0vGpUCpoihIBRFdyS4mTvNbhGNnfQVMp7bQ
2SH0k6KexM0XozCCnzDNzXNCg+zRHX7UmoKlvFcAjcxxNLHGsKO99oCnWTgHIEyg
VzeabmPsyt0ZZE7yp87cH/w7ULiHw3l9VVNcfLRzUokQOi0hNSvosQfpkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGh2LqxLlPah9E2JTLdGvY0sej5MB8GA1UdIwQY
MBaAFBpPgAHDDKxUbj+SEDtLEnMt/L9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2stQUFjTU1yRlJ1UDVJUU8wc1NjeTM4djFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kNmM4NmQtNmM2NS00YTI1LWE4ZmEt
MzhkNGYzMjExODk2LzEvR2stQUFjTU1yRlJ1UDVJUU8wc1NjeTM4djFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kNmM4NmQtNmM2NS00YTI1LWE4ZmEtMzhkNGYzMjExODk2
LzEvR2stQUFjTU1yRlJ1UDVJUU8wc1NjeTM4djFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObfaAzEn
/e0KS2YB32K+QLwLILiwB9a0HeQu//6VlGD7vNQr9g1Z6kuN861ydzs9axaiXnzp
HY7woI2sn87DgnKndT6lcS79jj263i+00H0oSr6YubP6eUUtRuSXivmCoPXr9tIU
GXnNYwfMi76tjTDFoLzharGu5XDMfF6rByy0horEMSifBl6MA9jJnutvkO8vqSm6
3s+nEKC4szHtHHkyIbvuPYPOP4ozQSYY3CgmdhDrokFbQud8U0rO50OxDgW0JzIS
WI4aDie8iq2HJHN4g7G28O6TJyGBcOnsks6loWrYr+eelLuMqWb9S4z8sHu/3WMk
RT6LZlAXjUBuJA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:27:03 2026 by rpki-client