Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.mft
File:                     GBxTLx_zEilN0RxRGxd80zyDBFY.mft (raw, json)
Hash identifier:          /Q9g5wX6PUP5IM8TEG+/A0wR5YqWDvde7y0+4hSXFr0=
Subject key identifier:   8F:1B:CD:AF:73:05:82:89:EF:F6:87:76:6A:08:F7:E6:D4:A4:4F:D3
Authority key identifier: 18:1C:53:2F:1F:F3:12:29:4D:D1:1C:51:1B:17:7C:D3:3C:83:04:56
Certificate issuer:       /CN=181c532f1ff312294dd11c511b177cd33c830456
Certificate serial:       01A17ADF39F9427CD5D5855B04EB93B8F8D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBxTLx_zEilN0RxRGxd80zyDBFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.mft
Manifest number:          CB
Signing time:             Tue 27 Oct 2026 01:00:12 +0000
Manifest this update:     Tue 27 Oct 2026 01:00:12 +0000
Manifest next update:     Wed 28 Oct 2026 01:00:12 +0000
Files and hashes:         1: GBxTLx_zEilN0RxRGxd80zyDBFY.crl (hash: HSAqVEqw7kw7TgYEYZGHWW3TVrJu8tqzxN5oFXR4EqM=)
                          2: SmH0Y2akj9BXoPJsoCRP_5Abq_4.roa (hash: noEFjTcJ4li+Z5lYJLyOd4NFqf9iNEJOmVPDK4Ua36c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GBxTLx_zEilN0RxRGxd80zyDBFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 01:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7a:df:39:f9:42:7c:d5:d5:85:5b:04:eb:93:b8:f8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=181c532f1ff312294dd11c511b177cd33c830456
        Validity
            Not Before: Oct 27 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=8f1bcdaf73058289eff687766a08f7e6d4a44fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9b:ae:f2:8b:f6:1e:d5:76:b3:f6:f0:60:31:
                    26:43:d0:fa:61:2e:02:7d:d1:db:7e:fd:35:1e:03:
                    bf:db:2e:d0:58:96:2e:9b:39:85:91:58:f6:8b:38:
                    db:19:04:4e:11:39:8d:b8:0b:16:3e:69:04:9f:2a:
                    5a:1a:40:69:f0:da:3e:28:a6:52:36:f2:2f:35:62:
                    02:a7:fc:2f:2f:1a:8a:7c:2d:b4:52:aa:d9:6d:7e:
                    1f:a9:ed:5e:52:4d:3f:c3:1e:12:a5:90:b0:f5:3a:
                    5d:0b:21:87:f7:17:e9:f2:1d:2c:33:47:8e:34:4b:
                    a2:45:b5:9a:bb:ee:be:0a:45:00:2d:e0:3e:e0:ff:
                    ea:f0:8f:0e:f2:4b:e9:61:97:07:10:2f:4b:e0:d5:
                    87:cf:b2:f6:87:de:95:6b:a7:74:f1:4c:b4:0f:48:
                    e9:fa:e7:c4:a3:47:59:b9:0f:31:b1:1d:ee:89:c6:
                    34:cd:2b:00:4d:9a:b7:29:87:47:e9:38:c6:b4:58:
                    30:59:18:ac:8d:60:7b:5c:81:56:de:4b:ae:e8:26:
                    38:05:03:05:ca:4f:eb:ee:aa:bc:f1:ec:e8:72:ec:
                    a6:b7:b3:bf:fd:7f:e4:4b:c3:4b:d0:94:a7:de:59:
                    c0:c6:8e:11:c6:b2:17:dd:4e:df:f4:37:e2:d1:a7:
                    7b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1B:CD:AF:73:05:82:89:EF:F6:87:76:6A:08:F7:E6:D4:A4:4F:D3
            X509v3 Authority Key Identifier:
                keyid:18:1C:53:2F:1F:F3:12:29:4D:D1:1C:51:1B:17:7C:D3:3C:83:04:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBxTLx_zEilN0RxRGxd80zyDBFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:a0:6a:6d:e9:11:b2:cb:77:9e:c2:96:11:2d:0c:3e:58:bf:
         6c:90:51:14:11:cf:88:57:41:26:2f:62:56:97:ed:00:5a:16:
         7c:96:13:1e:91:4d:68:81:50:d5:f3:6a:95:b5:61:77:42:06:
         86:3b:c7:50:a8:2c:ce:5e:75:37:5f:98:da:e8:88:46:60:b1:
         bc:44:9b:55:ca:0e:1c:67:60:91:c3:38:b5:80:a8:af:ec:cb:
         28:89:5d:47:a4:71:2a:6c:50:02:8d:ca:03:e8:66:ea:33:94:
         79:a3:5e:20:47:36:b6:3c:9c:ef:ea:93:db:da:32:6b:4f:30:
         d3:ab:49:b2:4f:14:f8:2e:75:93:9c:8a:16:7d:5e:63:0e:17:
         cb:cf:f9:53:5a:33:5a:93:c6:1d:d8:80:4c:f3:02:0e:c6:1f:
         af:f3:14:57:2e:50:b7:23:2a:e3:b8:30:b0:46:84:5d:86:0b:
         c1:4d:1e:c0:2e:f9:36:8b:53:3a:41:6b:af:99:05:82:2b:70:
         7e:f4:5b:cb:33:e6:95:cf:48:94:1f:5c:49:42:d2:0e:13:43:
         c3:a9:42:16:ff:d3:c0:f8:88:3d:7d:5c:e0:72:bb:e4:1d:87:
         19:04:3e:a5:c5:9a:4b:f6:3c:12:5b:b3:8a:f2:cb:99:1c:ab:
         3f:8f:87:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:58:39 2026 by rpki-client