Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
File:                     GPJ8DAs13dQruJLBaEWmOwAnocc.mft (raw, json)
Hash identifier:          CqIBlD888Zo7vL7iLqmZUvHcJH3ntuyIlETCLCi6UC0=
Subject key identifier:   68:69:FC:03:68:C4:3C:41:6D:20:7B:56:59:6F:A4:57:3C:A5:F3:2D
Authority key identifier: 18:F2:7C:0C:0B:35:DD:D4:2B:B8:92:C1:68:45:A6:3B:00:27:A1:C7
Certificate issuer:       /CN=18f27c0c0b35ddd42bb892c16845a63b0027a1c7
Certificate serial:       01A116AA7084F8CAF62D97E1BDD214BEA9B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
Manifest number:          0590
Signing time:             Wed 07 Oct 2026 14:00:31 +0000
Manifest this update:     Wed 07 Oct 2026 14:00:31 +0000
Manifest next update:     Thu 08 Oct 2026 14:00:31 +0000
Files and hashes:         1: 1EUxYTDLLUc7mVnOfDWhYTqOGew.asa (hash: WuBGSOOM0G8a8NXmtYj2PDl7Beqn8WgMWBiuyR9IYQ0=)
                          2: 67H4O3u42i3kdzgA_rephn7HtOI.asa (hash: H8IEM88SP6cl8KTzisA3Hfz9mjuQ8MRmme20jIFQ3JQ=)
                          3: GPJ8DAs13dQruJLBaEWmOwAnocc.crl (hash: Qe+Dds1Ht3e8uEK4ziycToVibAmehjtq9Y2XonVs3vo=)
                          4: RqlCRGLn8WCi_decwvLY1MH3NJ0.roa (hash: e6wtpCGhTAbBzVr4hSDCQshEk7sSjJ31RaQhsBrVJiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 13:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:16:aa:70:84:f8:ca:f6:2d:97:e1:bd:d2:14:be:a9:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18f27c0c0b35ddd42bb892c16845a63b0027a1c7
        Validity
            Not Before: Oct  7 14:00:31 2026 GMT
            Not After : Oct  8 14:00:31 2026 GMT
        Subject: CN=6869fc0368c43c416d207b56596fa4573ca5f32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6f:b6:86:9c:9f:5b:ef:d4:e1:e3:e9:cc:c9:
                    67:c1:ab:83:15:55:5a:39:9d:90:a9:08:18:74:94:
                    f9:dc:dd:ba:96:0e:ee:69:25:a6:f8:65:cd:04:ce:
                    f9:3e:16:ac:c1:b6:a3:d2:20:5b:dd:60:fb:28:ff:
                    3e:de:b7:93:6d:f6:24:bc:88:d4:e9:86:6d:07:ee:
                    88:55:e9:0b:b3:91:6d:f9:3d:3f:82:c0:97:bb:5f:
                    f0:01:ec:fe:70:f2:d1:2d:b4:13:0f:ce:1d:18:f0:
                    15:90:e8:1d:91:f9:77:a2:86:7a:4d:44:13:50:dc:
                    9e:30:53:d6:f3:59:fc:ba:d3:c1:39:d3:38:30:f1:
                    90:82:3c:3b:4c:52:30:74:da:e6:a2:81:84:3b:55:
                    f9:25:05:67:4e:c7:68:5f:3a:e2:9b:31:ab:ee:43:
                    76:5c:8b:3d:7e:6d:16:f6:78:24:62:11:d1:3c:df:
                    28:eb:b2:e7:3f:a2:c6:57:32:a7:a6:b9:69:47:b3:
                    c7:96:46:51:d6:4f:95:84:e5:2b:2e:2f:b4:68:7b:
                    79:3c:12:12:5c:62:63:f6:76:54:5f:78:7a:88:5c:
                    9d:ec:07:e8:b5:a4:eb:1d:22:12:a9:8b:70:87:5f:
                    6c:b8:2a:1a:6a:34:99:c5:bf:87:6e:b6:30:f5:44:
                    cc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:69:FC:03:68:C4:3C:41:6D:20:7B:56:59:6F:A4:57:3C:A5:F3:2D
            X509v3 Authority Key Identifier:
                keyid:18:F2:7C:0C:0B:35:DD:D4:2B:B8:92:C1:68:45:A6:3B:00:27:A1:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPJ8DAs13dQruJLBaEWmOwAnocc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/32bfe3-901c-4685-be0a-afac204d990f/1/GPJ8DAs13dQruJLBaEWmOwAnocc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:1b:56:51:af:f8:68:88:36:33:a0:3b:b4:f8:cd:30:ab:c1:
         58:93:da:bd:48:18:e4:0e:82:3e:59:89:22:96:79:54:51:95:
         f4:d5:df:87:29:ee:2b:bb:65:40:8a:06:20:0f:55:d0:5c:f7:
         c5:35:d7:ef:ec:35:6b:d3:67:53:9d:80:cd:6a:5c:14:c4:fa:
         62:bc:66:27:f0:cb:92:11:16:54:aa:e1:b3:f9:5c:1f:8d:3b:
         6b:f2:af:1c:b4:62:12:86:79:b1:f0:53:68:b7:21:3c:97:a4:
         dc:f3:aa:cf:a1:1f:35:f9:f5:1c:12:e8:6a:f2:f2:04:1e:41:
         44:a5:d6:8c:32:f3:aa:76:cc:ff:1f:09:47:00:d1:5c:a4:ce:
         bd:92:a1:1b:2c:85:d5:bc:7b:da:91:60:bd:f3:0d:7a:89:60:
         52:10:71:fe:7b:f5:ae:bc:74:04:44:7f:ed:c1:86:04:a4:4d:
         21:5a:e2:ea:bf:1e:8b:a3:e6:6e:57:a0:25:13:30:56:9f:39:
         5a:cd:71:de:0f:2c:c2:c3:19:91:6e:ff:42:ec:d1:ef:6a:e6:
         be:83:39:8f:36:da:2e:62:14:4d:5b:78:02:2e:2f:fa:24:c3:
         d4:d6:96:5a:3a:7b:33:23:f2:9f:67:45:2d:34:17:04:b6:fd:
         11:fc:75:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:24:17 2026 by rpki-client