Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.mft
File:                     GBxTLx_zEilN0RxRGxd80zyDBFY.mft (raw, json)
Hash identifier:          LHJINyvmaGLrsQ2Yi4Mu3sMNn4vAc/By83kzWaN9QgU=
Subject key identifier:   CE:E2:C0:7A:38:C3:3C:EC:26:E0:E4:B6:36:76:76:22:1E:0C:89:FE
Authority key identifier: 18:1C:53:2F:1F:F3:12:29:4D:D1:1C:51:1B:17:7C:D3:3C:83:04:56
Certificate issuer:       /CN=181c532f1ff312294dd11c511b177cd33c830456
Certificate serial:       01A08979DF5801789C381605D7D70826B59F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBxTLx_zEilN0RxRGxd80zyDBFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.mft
Manifest number:          4E
Signing time:             Thu 10 Sep 2026 04:01:00 +0000
Manifest this update:     Thu 10 Sep 2026 04:01:00 +0000
Manifest next update:     Fri 11 Sep 2026 04:01:00 +0000
Files and hashes:         1: GBxTLx_zEilN0RxRGxd80zyDBFY.crl (hash: nUo1K3/RtGFK66ek4YJHkzGjxuTq3XIUIxgEmzkJm/Q=)
                          2: SmH0Y2akj9BXoPJsoCRP_5Abq_4.roa (hash: noEFjTcJ4li+Z5lYJLyOd4NFqf9iNEJOmVPDK4Ua36c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GBxTLx_zEilN0RxRGxd80zyDBFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 04:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:79:df:58:01:78:9c:38:16:05:d7:d7:08:26:b5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=181c532f1ff312294dd11c511b177cd33c830456
        Validity
            Not Before: Sep 10 04:01:00 2026 GMT
            Not After : Sep 11 04:01:00 2026 GMT
        Subject: CN=cee2c07a38c33cec26e0e4b6367676221e0c89fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cd:1d:9c:d9:f4:2a:1c:5a:18:10:bc:0f:d1:
                    41:51:83:83:22:4a:51:bc:5f:21:a5:7e:5d:35:fb:
                    b4:4f:8c:60:9f:25:48:9d:6c:cf:ee:2a:48:fa:9a:
                    eb:6f:40:53:44:81:b5:ab:30:b4:54:de:43:05:c0:
                    3d:d5:58:24:76:db:c7:10:40:28:28:ea:83:98:2c:
                    84:1c:0b:e1:bd:d5:a5:d6:83:5c:7c:b3:99:25:1a:
                    08:57:bc:ee:b7:fb:0f:c8:88:97:24:9b:6f:b1:71:
                    4e:2d:65:de:62:ef:37:22:e6:48:2f:31:5e:74:34:
                    76:96:68:e4:9b:09:df:0f:43:a7:1f:ee:98:51:03:
                    1b:e1:82:26:50:60:75:6f:bf:57:55:f3:d6:e1:8f:
                    ab:0a:b8:1f:b5:6c:2e:b1:77:37:a1:51:a8:31:7f:
                    ea:57:98:52:66:bf:50:82:cd:93:41:b9:d0:d5:66:
                    28:8b:52:bf:15:71:26:84:08:76:15:d5:43:07:4c:
                    f7:87:52:ba:f6:81:23:4d:af:11:ed:7b:3a:f5:39:
                    ea:d6:01:a4:99:39:b8:8e:e6:bd:c5:ff:2a:69:35:
                    14:62:a5:11:d7:0c:56:67:80:21:82:59:bd:69:ee:
                    91:49:74:26:9f:0a:b7:62:f3:92:3e:bb:ef:61:a4:
                    be:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E2:C0:7A:38:C3:3C:EC:26:E0:E4:B6:36:76:76:22:1E:0C:89:FE
            X509v3 Authority Key Identifier:
                keyid:18:1C:53:2F:1F:F3:12:29:4D:D1:1C:51:1B:17:7C:D3:3C:83:04:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBxTLx_zEilN0RxRGxd80zyDBFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:f1:5b:7a:cd:ee:f2:82:c7:6d:2a:d2:14:6a:30:cb:0a:37:
         93:bc:13:fb:ea:9e:21:25:39:e0:20:47:f6:64:e2:f4:35:41:
         63:fc:22:a0:54:3e:57:71:51:de:19:d4:79:26:03:39:c2:68:
         0a:eb:cc:7c:7e:65:ea:ca:2b:9d:e7:8a:43:9d:1c:30:6e:51:
         ae:39:f2:b7:87:37:95:f8:97:e1:5f:85:f8:aa:0a:48:e7:ac:
         f4:15:16:c6:eb:0d:29:f2:79:69:9f:90:01:f1:73:04:cf:dd:
         c2:24:05:ea:8f:c3:13:4b:c9:10:03:d6:8b:c8:3a:bb:ee:94:
         86:58:7b:ef:29:af:62:9a:57:f6:6c:8d:97:6a:89:ef:be:d1:
         ef:13:bf:77:4a:9f:a3:a1:c7:28:1e:97:58:22:c4:cb:f5:d5:
         39:b0:28:f2:7c:3c:2f:1a:11:36:63:f4:80:bf:d1:0d:5d:67:
         62:3d:64:6d:59:b1:53:26:42:a6:72:23:a2:56:bd:79:6c:12:
         61:ab:fe:5e:64:0a:63:bb:04:cb:4c:78:d3:05:46:0d:fc:53:
         99:38:72:87:f0:43:95:ea:c7:87:c8:5d:58:26:95:34:c5:89:
         1f:62:42:cb:d2:1e:df:99:86:0c:5b:94:1a:56:e3:bb:dc:36:
         fd:61:01:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:33:09 2026 by rpki-client