Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
File:                     GvujiocH_SMcOIfkpSvc3tqyAyM.mft (raw, json)
Hash identifier:          yCXdnrfIoDeXGBcwpnTiH8w7AGT+kR0LWNGVGEz9YFw=
Subject key identifier:   4F:50:DC:16:B0:1B:99:AA:D7:4B:C5:08:AE:D7:18:B5:2F:64:93:12
Authority key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
Certificate issuer:       /CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Certificate serial:       01A18CAEFE2F52801A61A93A34D58CCAE889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
Manifest number:          0C2E
Signing time:             Fri 30 Oct 2026 12:00:40 +0000
Manifest this update:     Fri 30 Oct 2026 12:00:40 +0000
Manifest next update:     Sat 31 Oct 2026 12:00:40 +0000
Files and hashes:         1: GvujiocH_SMcOIfkpSvc3tqyAyM.crl (hash: EofQqBry0UN8PiRxC0mXC3hJ4gjGnD5+VpcOaSOhEIc=)
                          2: xNrjnvBJh_wuI9K3bZSO-wuWUTU.roa (hash: xawGQx0fM3PQVbGbqNxkiscfylaEsDI9X0uVsXFPexA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8c:ae:fe:2f:52:80:1a:61:a9:3a:34:d5:8c:ca:e8:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1afba38a8707fd231c3887e4a52bdcdedab20323
        Validity
            Not Before: Oct 30 12:00:40 2026 GMT
            Not After : Oct 31 12:00:40 2026 GMT
        Subject: CN=4f50dc16b01b99aad74bc508aed718b52f649312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:92:6b:57:69:17:ac:e9:fa:4b:e6:99:32:68:
                    a8:8d:fe:77:95:4f:df:a0:00:57:d4:39:70:b7:84:
                    1a:ee:31:33:c2:6c:cf:b4:19:eb:22:41:55:40:cd:
                    f3:33:bd:14:47:9d:40:87:89:7a:60:9a:4e:31:1c:
                    c5:69:68:de:9b:60:82:10:5a:e9:ba:0b:9f:30:09:
                    f8:9a:63:b6:8b:01:bb:ab:20:87:9b:16:42:c5:5c:
                    cd:4f:c7:79:8e:3c:d0:50:80:e3:e7:cc:13:24:fc:
                    39:fc:88:08:3e:ee:8e:b1:05:68:0e:38:19:3c:d5:
                    7f:0f:40:a6:b8:56:9a:3f:eb:c3:98:64:84:11:39:
                    b8:11:19:10:bf:49:91:c2:57:4a:ac:c1:b0:7b:54:
                    aa:96:4b:19:38:ac:b9:ae:20:a4:83:8e:b0:ec:a5:
                    a8:ea:b9:bd:62:e4:ee:7b:3c:ce:b6:29:67:84:7c:
                    77:13:aa:f9:e0:eb:71:8f:e6:fe:9e:5a:fc:2e:56:
                    72:66:c1:a7:11:3b:77:97:a2:36:da:71:e2:0e:c3:
                    d7:c3:1b:92:b9:ae:1b:f9:93:dc:fb:c7:4b:94:14:
                    76:33:0e:51:b2:0f:15:47:fd:f5:57:d2:1b:5a:f6:
                    60:04:b3:49:60:94:97:26:77:be:1a:de:c3:26:25:
                    dd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:50:DC:16:B0:1B:99:AA:D7:4B:C5:08:AE:D7:18:B5:2F:64:93:12
            X509v3 Authority Key Identifier:
                keyid:1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d7:cd:71:0e:fb:ff:b8:35:bc:32:0c:7c:a7:05:49:1d:3b:
         53:2e:6a:ef:ae:17:6d:aa:d5:9d:45:3c:ca:55:7d:be:89:6d:
         c5:87:9d:ce:df:2d:0c:54:20:65:32:03:09:d1:9b:ee:ca:8a:
         e9:10:1c:f7:fd:13:39:11:1d:40:89:17:fd:a6:e9:2f:06:70:
         7f:3e:85:4b:33:c6:ce:63:4c:fb:a5:a3:c5:6a:34:da:33:63:
         75:05:82:f2:c0:58:84:92:08:67:43:c1:b2:c7:25:6f:38:da:
         17:ac:e1:b9:21:76:ac:22:b5:76:67:0f:7b:da:79:8e:60:1c:
         71:4b:e9:8f:33:ef:da:9b:f0:73:84:23:de:88:bd:39:03:b0:
         7e:bf:08:a6:c3:0d:9f:05:26:e0:ea:4e:9e:9f:2e:07:b0:c5:
         20:50:1f:87:ed:bc:aa:66:12:50:19:7b:9b:ec:48:59:b2:67:
         d4:93:d9:db:5c:ce:6e:b3:30:0e:3e:eb:ea:02:04:87:dc:14:
         97:d4:de:ad:1c:82:09:06:ad:87:f8:63:50:5b:cb:e2:8e:80:
         fb:ac:17:1b:e3:78:37:19:9b:3c:c6:b6:02:85:6f:ea:8d:5a:
         97:c5:64:3b:a2:2c:41:8e:75:9d:e9:2e:a8:5a:fd:54:9c:e4:
         fc:41:27:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:24:25 2026 by rpki-client