Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File:                     gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier:          /ufCMbtGfhlQqmQG/ZVoZhYxgj7UhNw04CMgPn1GX4s=
Subject key identifier:   61:BD:97:CA:31:57:BE:A1:5D:91:89:29:6E:76:11:07:AC:10:7F:D2
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer:       /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial:       01A08B687F01391ED454360EF6A73530ECD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number:          1ADB
Signing time:             Thu 10 Sep 2026 13:01:16 +0000
Manifest this update:     Thu 10 Sep 2026 13:01:16 +0000
Manifest next update:     Fri 11 Sep 2026 13:01:16 +0000
Files and hashes:         1: IUI0XObzqlXmJSe9907ojhvvGKY.roa (hash: lh17xK7xmqGsZK8e6QUcQhpWBvUMvRGKUOxPhaUyu88=)
                          2: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: 6xea55DiQGPW7OK2LNmJx5+qwHIchE6RJHSY09LI4FI=)
                          3: yxM7J-fncjH39qOsj_6YqBGJVWU.roa (hash: AjHV8rOTeMWNj3biUMbUNtv+kWtvN/aGZ8u6KDIN/SM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 13:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:68:7f:01:39:1e:d4:54:36:0e:f6:a7:35:30:ec:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
        Validity
            Not Before: Sep 10 13:01:16 2026 GMT
            Not After : Sep 11 13:01:16 2026 GMT
        Subject: CN=61bd97ca3157bea15d9189296e761107ac107fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:68:65:12:03:48:02:08:63:11:75:b5:85:
                    d6:1b:80:0b:d3:79:89:2d:09:7e:4b:1f:05:e5:a1:
                    04:f5:7e:07:39:e8:8d:af:c7:6b:c0:77:74:e3:c2:
                    f2:d7:02:6b:27:3a:e5:fa:fa:f3:c5:09:42:ca:18:
                    c0:82:3f:5f:b0:58:8e:2c:ab:f4:9e:b4:c2:8f:98:
                    e3:3f:e5:9a:2f:09:80:f8:7e:6a:95:ad:f1:da:62:
                    3d:69:a2:3d:92:45:39:eb:73:f2:90:a1:81:bf:5e:
                    40:c6:ba:86:cc:38:07:6c:39:91:f9:64:c6:19:8d:
                    69:43:3b:e4:6d:5b:65:b2:a7:8a:82:04:75:20:87:
                    9f:69:14:07:08:c1:a8:85:1f:a5:30:83:5c:e1:dc:
                    47:c0:8a:e1:61:c0:cb:2c:df:d9:1b:e9:2f:f4:23:
                    d5:e7:a6:54:41:26:f5:e7:a8:79:8d:23:7f:e7:64:
                    76:ba:63:61:f7:ce:d3:03:b5:3d:11:03:fd:f5:e9:
                    3d:4a:03:47:99:c3:c0:35:bd:09:39:cc:94:77:9b:
                    b8:18:37:b0:4a:98:89:06:05:f5:9f:95:94:5e:bc:
                    46:25:05:95:17:18:8e:d4:47:55:c2:81:57:4e:3e:
                    59:61:25:3b:15:27:e2:92:9c:2e:ec:47:64:24:83:
                    ac:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BD:97:CA:31:57:BE:A1:5D:91:89:29:6E:76:11:07:AC:10:7F:D2
            X509v3 Authority Key Identifier:
                keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:80:d5:ea:c8:6b:a0:55:a9:e2:6d:00:48:44:49:f1:9b:ac:
         77:cd:2d:6d:de:cd:eb:75:43:29:b2:2a:b3:65:4a:fc:16:57:
         68:2f:8c:72:d0:c9:0e:bc:9e:6e:fa:36:68:e4:99:8c:b9:1f:
         61:7e:e1:69:71:98:c3:f0:a7:65:4e:65:94:f8:ec:13:01:8e:
         26:bc:75:bf:4a:75:83:04:a2:86:7f:ce:2f:e5:9b:ec:13:fc:
         02:92:f5:ea:3c:5d:06:a3:7d:b1:2b:cd:29:2d:47:f3:af:25:
         e8:fe:6a:35:33:a0:29:aa:03:c8:e8:8c:af:12:8e:64:01:48:
         66:0c:13:fd:9c:b9:97:bb:76:9b:4d:55:07:d4:0e:97:34:31:
         e3:a1:37:18:49:ae:e3:96:78:1b:9d:02:7a:07:22:5f:bc:ac:
         95:4c:81:a7:2d:10:f0:57:5f:2d:a5:21:12:47:84:f7:71:ca:
         cb:0c:37:47:73:38:ee:85:07:81:cf:f5:e3:0e:60:96:99:5f:
         2b:05:04:8c:71:04:f4:84:0f:75:cf:9c:49:36:14:99:fe:91:
         3b:d7:ad:ba:dd:bc:59:e4:ea:e0:d1:4e:ad:21:de:40:81:93:
         c6:3c:bd:fb:cc:14:f5:3e:4a:fc:5f:65:ab:5e:9f:1c:8e:3e:
         7d:e4:14:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:33:51 2026 by rpki-client