Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
File:                     gJn-FS53ZHo7-PBarMYMuriw8_E.mft (raw, json)
Hash identifier:          y2fNHDc0+Q2S7PVTwgPxNDhvmqbbn+g0GyLy8lgIkEE=
Subject key identifier:   F4:5B:5C:5F:A8:80:D4:A5:A9:1A:9E:5C:0E:14:5B:1A:C6:CE:96:2E
Authority key identifier: 80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1
Certificate issuer:       /CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
Certificate serial:       01A09991752B4B4A0446F5021FE252885A90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
Manifest number:          05F4
Signing time:             Sun 13 Sep 2026 07:00:41 +0000
Manifest this update:     Sun 13 Sep 2026 07:00:41 +0000
Manifest next update:     Mon 14 Sep 2026 07:00:41 +0000
Files and hashes:         1: gJn-FS53ZHo7-PBarMYMuriw8_E.crl (hash: mOqo1At9WNw0ndVxJv3VrNbrXNHJ8+XBcFvYMKiFnDA=)
                          2: pJgLulMLIKvMMO7AdCTNd61W_Qo.roa (hash: d7x2/EMQahiRCVzVwOaCAyZfFY39+nEtyCz6GzOW0VI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 14 Sep 2026 03:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:99:91:75:2b:4b:4a:04:46:f5:02:1f:e2:52:88:5a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8099fe152e77647a3bf8f05aacc60cbab8b0f3f1
        Validity
            Not Before: Sep 13 07:00:41 2026 GMT
            Not After : Sep 14 07:00:41 2026 GMT
        Subject: CN=f45b5c5fa880d4a5a91a9e5c0e145b1ac6ce962e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a8:d3:5c:62:fe:31:4a:64:c6:22:d5:c0:69:
                    75:d0:a5:b4:4f:9a:a6:50:57:09:1a:42:fe:b2:81:
                    50:ed:fd:ce:a5:db:a9:e2:0a:73:85:a4:46:7e:0c:
                    9a:47:13:7d:27:1c:5c:a8:fe:de:24:75:1f:69:58:
                    81:e4:11:1d:31:a6:55:e1:61:50:1e:f3:fb:aa:05:
                    d4:72:b4:23:91:ca:ec:8f:57:03:47:79:04:76:75:
                    88:3c:11:a2:d3:6e:bc:ac:0e:5d:d1:c5:93:0a:7f:
                    1a:46:46:40:93:00:8b:1f:27:79:6d:c5:b7:ad:2d:
                    c2:e5:a1:6f:54:c5:07:75:a2:2f:67:1b:68:dc:4e:
                    d9:c1:29:dc:9f:74:74:c5:cf:2e:f0:db:46:47:20:
                    12:a9:3a:0c:18:a7:c4:70:9c:be:5f:91:be:85:55:
                    8c:d2:90:f9:f3:1a:e0:21:4c:09:67:29:4e:31:a6:
                    99:35:9f:36:78:22:06:57:ec:56:e3:73:fe:90:e4:
                    18:5d:21:f6:f0:93:84:1d:61:d1:9c:9d:99:6c:ec:
                    08:18:72:e1:ca:07:b3:24:37:70:7f:1f:3d:cd:9e:
                    7f:84:ab:05:32:5d:8d:ae:48:51:dd:cc:66:3d:43:
                    a1:ec:f3:74:25:a4:c4:70:2b:a8:89:19:28:1e:6f:
                    46:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5B:5C:5F:A8:80:D4:A5:A9:1A:9E:5C:0E:14:5B:1A:C6:CE:96:2E
            X509v3 Authority Key Identifier:
                keyid:80:99:FE:15:2E:77:64:7A:3B:F8:F0:5A:AC:C6:0C:BA:B8:B0:F3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJn-FS53ZHo7-PBarMYMuriw8_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/gJn-FS53ZHo7-PBarMYMuriw8_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d2:97:a9:93:83:f5:07:5c:70:b3:c9:03:02:67:84:cb:c8:
         85:a1:ca:ec:41:ac:8e:b4:bc:a1:4f:75:70:42:2d:0d:0c:ce:
         64:09:cc:88:77:21:dc:90:1c:b8:72:3a:02:3f:85:f9:2f:99:
         94:6f:cb:44:18:11:da:5a:8e:c0:ea:19:19:9a:48:12:27:65:
         7d:f3:ef:6a:5c:b8:95:d3:fc:cc:7f:43:34:ca:c6:70:e4:ea:
         96:44:cc:24:57:a0:8c:3d:93:4a:2b:d1:81:a0:38:1a:8d:01:
         a5:57:f5:f4:0d:87:7b:34:3a:d5:bc:a3:d1:7f:c6:a4:ad:2c:
         94:7c:77:e5:c4:5d:1f:0b:85:78:fd:13:13:e4:db:d5:b1:fa:
         d3:80:1e:a5:40:fa:9b:cf:19:41:3d:57:34:87:5b:50:51:b4:
         03:67:04:b4:db:9a:f7:f0:db:7f:54:01:94:03:54:af:08:81:
         32:42:f3:bd:4f:5f:47:b7:85:61:60:77:44:5d:a5:18:84:25:
         2e:4a:28:bf:f5:4b:1a:a3:45:6f:ca:ed:1e:09:00:79:68:60:
         7c:60:eb:bd:9e:80:49:1f:c5:bf:a6:68:e8:5c:e9:5c:bb:6c:
         b2:89:91:c5:68:73:36:cf:71:68:a5:d5:57:cf:7b:15:24:66:
         29:e4:2d:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCZkXUrS0oERvUCH+JSiFqQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwOTlmZTE1MmU3NzY0N2EzYmY4ZjA1YWFjYzYwY2JhYjhi
MGYzZjEwHhcNMjYwOTEzMDcwMDQxWhcNMjYwOTE0MDcwMDQxWjAzMTEwLwYDVQQD
EyhmNDViNWM1ZmE4ODBkNGE1YTkxYTllNWMwZTE0NWIxYWM2Y2U5NjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKjTXGL+MUpkxiLVwGl10KW0T5qm
UFcJGkL+soFQ7f3Opdup4gpzhaRGfgyaRxN9JxxcqP7eJHUfaViB5BEdMaZV4WFQ
HvP7qgXUcrQjkcrsj1cDR3kEdnWIPBGi0268rA5d0cWTCn8aRkZAkwCLHyd5bcW3
rS3C5aFvVMUHdaIvZxto3E7ZwSncn3R0xc8u8NtGRyASqToMGKfEcJy+X5G+hVWM
0pD58xrgIUwJZylOMaaZNZ82eCIGV+xW43P+kOQYXSH28JOEHWHRnJ2ZbOwIGHLh
ygezJDdwfx89zZ5/hKsFMl2NrkhR3cxmPUOh7PN0JaTEcCuoiRkoHm9GxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRbXF+ogNSlqRqeXA4UWxrGzpYuMB8GA1UdIwQY
MBaAFICZ/hUud2R6O/jwWqzGDLq4sPPxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0puLUZTNTNaSG83LVBCYXJNWU11cml3OF9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wMDk1ZWYtOGEzOS00NGQxLWE5YTYt
NWJhZWYzZmMyOTVkLzEvZ0puLUZTNTNaSG83LVBCYXJNWU11cml3OF9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wMDk1ZWYtOGEzOS00NGQxLWE5YTYtNWJhZWYzZmMyOTVk
LzEvZ0puLUZTNTNaSG83LVBCYXJNWU11cml3OF9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNKXqZOD
9QdccLPJAwJnhMvIhaHK7EGsjrS8oU91cEItDQzOZAnMiHch3JAcuHI6Aj+F+S+Z
lG/LRBgR2lqOwOoZGZpIEidlffPvaly4ldP8zH9DNMrGcOTqlkTMJFegjD2TSivR
gaA4Go0BpVf19A2HezQ61byj0X/GpK0slHx35cRdHwuFeP0TE+Tb1bH604AepUD6
m88ZQT1XNIdbUFG0A2cEtNua9/Dbf1QBlANUrwiBMkLzvU9fR7eFYWB3RF2lGIQl
Lkoov/VLGqNFb8rtHgkAeWhgfGDrvZ6ASR/Fv6Zo6FzpXLtssomRxWhzNs9xaKXV
V897FSRmKeQtCg==
-----END CERTIFICATE-----
Generated at Sun Sep 13 09:33:07 2026 by rpki-client